Oracle alert ELSA-2025-20480 (kernel)

From:
             
 
Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com>
To:
             
 
el-errata@oss.oracle.com
Subject:
             
 
[El-errata] ELSA-2025-20480 Important: Unbreakable Enterprise kernel security update
Date:
             
 
Tue, 22 Jul 2025 05:44:47 -0700
Message-ID:
             
 
<mailman.182.1753188299.3112399.el-errata@oss.oracle.com>
Oracle Linux Security Advisory ELSA-2025-20480

http://linux.oracle.com/errata/ELSA-2025-20480.html

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-core-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-devel-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-doc-6.12.0-101.33.4.3.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-tools-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-101.33.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-101.33.4.3.el10uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-core-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-devel-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-modules-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-tools-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-core-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-101.33.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-101.33.4.3.el10uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-uek-6.12....

Related CVEs:

CVE-2012-3430
CVE-2015-6937
CVE-2016-5244
CVE-2018-12928
CVE-2018-5332
CVE-2018-5333
CVE-2018-7492
CVE-2019-11815
CVE-2021-3695
CVE-2021-3696
CVE-2021-3697
CVE-2021-45095
CVE-2022-21385
CVE-2022-28733
CVE-2022-28734
CVE-2022-28735
CVE-2022-28736
CVE-2023-22024
CVE-2023-3159
CVE-2024-28956
CVE-2024-36350
CVE-2024-36357
CVE-2024-39282
CVE-2024-41090
CVE-2024-41091
CVE-2024-41149
CVE-2024-41932
CVE-2024-41935
CVE-2024-43098
CVE-2024-45828
CVE-2024-46896
CVE-2024-47141
CVE-2024-47143
CVE-2024-47408
CVE-2024-47794
CVE-2024-47809
CVE-2024-48873
CVE-2024-48875
CVE-2024-48876
CVE-2024-48881
CVE-2024-49568
CVE-2024-49569
CVE-2024-49570
CVE-2024-49571
CVE-2024-49573
CVE-2024-50051
CVE-2024-51729
CVE-2024-52319
CVE-2024-52332
CVE-2024-52559
CVE-2024-53103
CVE-2024-53104
CVE-2024-53141
CVE-2024-53142
CVE-2024-53143
CVE-2024-53145
CVE-2024-53146
CVE-2024-53147
CVE-2024-53148
CVE-2024-53149
CVE-2024-53150
CVE-2024-53151
CVE-2024-53152
CVE-2024-53153
CVE-2024-53154
CVE-2024-53155
CVE-2024-53156
CVE-2024-53157
CVE-2024-53158
CVE-2024-53160
CVE-2024-53161
CVE-2024-53162
CVE-2024-53163
CVE-2024-53164
CVE-2024-53165
CVE-2024-53166
CVE-2024-53167
CVE-2024-53168
CVE-2024-53169
CVE-2024-53170
CVE-2024-53171
CVE-2024-53172
CVE-2024-53173
CVE-2024-53174
CVE-2024-53175
CVE-2024-53176
CVE-2024-53177
CVE-2024-53178
CVE-2024-53179
CVE-2024-53180
CVE-2024-53181
CVE-2024-53182
CVE-2024-53183
CVE-2024-53184
CVE-2024-53185
CVE-2024-53186
CVE-2024-53187
CVE-2024-53188
CVE-2024-53189
CVE-2024-53190
CVE-2024-53191
CVE-2024-53192
CVE-2024-53193
CVE-2024-53194
CVE-2024-53195
CVE-2024-53197
CVE-2024-53198
CVE-2024-53199
CVE-2024-53200
CVE-2024-53201
CVE-2024-53202
CVE-2024-53203
CVE-2024-53204
CVE-2024-53205
CVE-2024-53206
CVE-2024-53207
CVE-2024-53208
CVE-2024-53209
CVE-2024-53210
CVE-2024-53211
CVE-2024-53212
CVE-2024-53213
CVE-2024-53214
CVE-2024-53215
CVE-2024-53216
CVE-2024-53217
CVE-2024-53218
CVE-2024-53219
CVE-2024-53220
CVE-2024-53221
CVE-2024-53222
CVE-2024-53223
CVE-2024-53224
CVE-2024-53225
CVE-2024-53226
CVE-2024-53227
CVE-2024-53228
CVE-2024-53229
CVE-2024-53230
CVE-2024-53231
CVE-2024-53232
CVE-2024-53233
CVE-2024-53234
CVE-2024-53235
CVE-2024-53236
CVE-2024-53237
CVE-2024-53238
CVE-2024-53239
CVE-2024-53240
CVE-2024-53241
CVE-2024-53680
CVE-2024-53681
CVE-2024-53682
CVE-2024-53685
CVE-2024-53687
CVE-2024-53690
CVE-2024-54031
CVE-2024-54191
CVE-2024-54193
CVE-2024-54455
CVE-2024-54456
CVE-2024-54458
CVE-2024-54460
CVE-2024-54683
CVE-2024-55639
CVE-2024-55641
CVE-2024-55642
CVE-2024-55881
CVE-2024-55916
CVE-2024-56368
CVE-2024-56369
CVE-2024-56372
CVE-2024-56531
CVE-2024-56532
CVE-2024-56533
CVE-2024-56534
CVE-2024-56535
CVE-2024-56536
CVE-2024-56537
CVE-2024-56538
CVE-2024-56539
CVE-2024-56540
CVE-2024-56541
CVE-2024-56542
CVE-2024-56543
CVE-2024-56544
CVE-2024-56545
CVE-2024-56546
CVE-2024-56547
CVE-2024-56549
CVE-2024-56550
CVE-2024-56551
CVE-2024-56552
CVE-2024-56553
CVE-2024-56554
CVE-2024-56555
CVE-2024-56556
CVE-2024-56557
CVE-2024-56558
CVE-2024-56559
CVE-2024-56560
CVE-2024-56561
CVE-2024-56562
CVE-2024-56563
CVE-2024-56564
CVE-2024-56565
CVE-2024-56566
CVE-2024-56567
CVE-2024-56568
CVE-2024-56569
CVE-2024-56570
CVE-2024-56572
CVE-2024-56573
CVE-2024-56574
CVE-2024-56575
CVE-2024-56576
CVE-2024-56577
CVE-2024-56578
CVE-2024-56579
CVE-2024-56580
CVE-2024-56581
CVE-2024-56582
CVE-2024-56583
CVE-2024-56584
CVE-2024-56585
CVE-2024-56586
CVE-2024-56587
CVE-2024-56588
CVE-2024-56589
CVE-2024-56590
CVE-2024-56591
CVE-2024-56592
CVE-2024-56593
CVE-2024-56594
CVE-2024-56595
CVE-2024-56596
CVE-2024-56597
CVE-2024-56598
CVE-2024-56599
CVE-2024-56600
CVE-2024-56601
CVE-2024-56602
CVE-2024-56603
CVE-2024-56604
CVE-2024-56605
CVE-2024-56606
CVE-2024-56607
CVE-2024-56608
CVE-2024-56609
CVE-2024-56610
CVE-2024-56611
CVE-2024-56612
CVE-2024-56613
CVE-2024-56614
CVE-2024-56615
CVE-2024-56616
CVE-2024-56617
CVE-2024-56618
CVE-2024-56619
CVE-2024-56620
CVE-2024-56621
CVE-2024-56622
CVE-2024-56623
CVE-2024-56624
CVE-2024-56625
CVE-2024-56626
CVE-2024-56627
CVE-2024-56628
CVE-2024-56629
CVE-2024-56630
CVE-2024-56631
CVE-2024-56632
CVE-2024-56633
CVE-2024-56634
CVE-2024-56635
CVE-2024-56636
CVE-2024-56637
CVE-2024-56638
CVE-2024-56639
CVE-2024-56640
CVE-2024-56641
CVE-2024-56642
CVE-2024-56643
CVE-2024-56644
CVE-2024-56645
CVE-2024-56646
CVE-2024-56647
CVE-2024-56648
CVE-2024-56649
CVE-2024-56650
CVE-2024-56651
CVE-2024-56652
CVE-2024-56653
CVE-2024-56654
CVE-2024-56655
CVE-2024-56656
CVE-2024-56657
CVE-2024-56658
CVE-2024-56659
CVE-2024-56660
CVE-2024-56661
CVE-2024-56662
CVE-2024-56663
CVE-2024-56664
CVE-2024-56665
CVE-2024-56666
CVE-2024-56667
CVE-2024-56668
CVE-2024-56669
CVE-2024-56670
CVE-2024-56671
CVE-2024-56672
CVE-2024-56673
CVE-2024-56674
CVE-2024-56675
CVE-2024-56676
CVE-2024-56677
CVE-2024-56678
CVE-2024-56679
CVE-2024-56680
CVE-2024-56681
CVE-2024-56682
CVE-2024-56683
CVE-2024-56684
CVE-2024-56685
CVE-2024-56687
CVE-2024-56688
CVE-2024-56690
CVE-2024-56691
CVE-2024-56692
CVE-2024-56693
CVE-2024-56694
CVE-2024-56695
CVE-2024-56696
CVE-2024-56697
CVE-2024-56698
CVE-2024-56699
CVE-2024-56700
CVE-2024-56701
CVE-2024-56702
CVE-2024-56703
CVE-2024-56704
CVE-2024-56705
CVE-2024-56706
CVE-2024-56707
CVE-2024-56708
CVE-2024-56709
CVE-2024-56710
CVE-2024-56711
CVE-2024-56712
CVE-2024-56713
CVE-2024-56714
CVE-2024-56715
CVE-2024-56716
CVE-2024-56717
CVE-2024-56718
CVE-2024-56719
CVE-2024-56720
CVE-2024-56721
CVE-2024-56722
CVE-2024-56723
CVE-2024-56724
CVE-2024-56725
CVE-2024-56726
CVE-2024-56727
CVE-2024-56728
CVE-2024-56729
CVE-2024-56730
CVE-2024-56739
CVE-2024-56740
CVE-2024-56742
CVE-2024-56743
CVE-2024-56744
CVE-2024-56745
CVE-2024-56746
CVE-2024-56747
CVE-2024-56748
CVE-2024-56749
CVE-2024-56750
CVE-2024-56751
CVE-2024-56752
CVE-2024-56753
CVE-2024-56754
CVE-2024-56755
CVE-2024-56756
CVE-2024-56757
CVE-2024-56758
CVE-2024-56759
CVE-2024-56760
CVE-2024-56761
CVE-2024-56763
CVE-2024-56764
CVE-2024-56765
CVE-2024-56766
CVE-2024-56767
CVE-2024-56768
CVE-2024-56769
CVE-2024-56770
CVE-2024-56771
CVE-2024-56772
CVE-2024-56773
CVE-2024-56774
CVE-2024-56775
CVE-2024-56776
CVE-2024-56777
CVE-2024-56778
CVE-2024-56779
CVE-2024-56780
CVE-2024-56781
CVE-2024-56782
CVE-2024-56783
CVE-2024-56784
CVE-2024-56785
CVE-2024-56787
CVE-2024-56788
CVE-2024-57791
CVE-2024-57792
CVE-2024-57793
CVE-2024-57795
CVE-2024-57798
CVE-2024-57799
CVE-2024-57800
CVE-2024-57801
CVE-2024-57802
CVE-2024-57804
CVE-2024-57805
CVE-2024-57806
CVE-2024-57807
CVE-2024-57809
CVE-2024-57834
CVE-2024-57838
CVE-2024-57839
CVE-2024-57841
CVE-2024-57843
CVE-2024-57844
CVE-2024-57849
CVE-2024-57850
CVE-2024-57852
CVE-2024-57857
CVE-2024-57872
CVE-2024-57874
CVE-2024-57875
CVE-2024-57876
CVE-2024-57877
CVE-2024-57878
CVE-2024-57879
CVE-2024-57880
CVE-2024-57881
CVE-2024-57882
CVE-2024-57883
CVE-2024-57884
CVE-2024-57885
CVE-2024-57886
CVE-2024-57887
CVE-2024-57888
CVE-2024-57889
CVE-2024-57890
CVE-2024-57891
CVE-2024-57892
CVE-2024-57893
CVE-2024-57895
CVE-2024-57896
CVE-2024-57897
CVE-2024-57898
CVE-2024-57899
CVE-2024-57900
CVE-2024-57901
CVE-2024-57902
CVE-2024-57903
CVE-2024-57904
CVE-2024-57905
CVE-2024-57906
CVE-2024-57907
CVE-2024-57908
CVE-2024-57909
CVE-2024-57910
CVE-2024-57911
CVE-2024-57912
CVE-2024-57913
CVE-2024-57914
CVE-2024-57916
CVE-2024-57917
CVE-2024-57918
CVE-2024-57919
CVE-2024-57921
CVE-2024-57922
CVE-2024-57923
CVE-2024-57924
CVE-2024-57925
CVE-2024-57926
CVE-2024-57927
CVE-2024-57928
CVE-2024-57929
CVE-2024-57930
CVE-2024-57931
CVE-2024-57932
CVE-2024-57933
CVE-2024-57934
CVE-2024-57935
CVE-2024-57936
CVE-2024-57938
CVE-2024-57939
CVE-2024-57940
CVE-2024-57941
CVE-2024-57942
CVE-2024-57943
CVE-2024-57944
CVE-2024-57945
CVE-2024-57946
CVE-2024-57948
CVE-2024-57950
CVE-2024-57951
CVE-2024-57952
CVE-2024-57953
CVE-2024-57973
CVE-2024-57974
CVE-2024-57975
CVE-2024-57977
CVE-2024-57978
CVE-2024-57979
CVE-2024-57980
CVE-2024-57981
CVE-2024-57982
CVE-2024-57984
CVE-2024-57985
CVE-2024-57986
CVE-2024-57987
CVE-2024-57988
CVE-2024-57989
CVE-2024-57990
CVE-2024-57991
CVE-2024-57993
CVE-2024-57994
CVE-2024-57996
CVE-2024-57997
CVE-2024-57998
CVE-2024-57999
CVE-2024-58001
CVE-2024-58002
CVE-2024-58003
CVE-2024-58004
CVE-2024-58005
CVE-2024-58006
CVE-2024-58007
CVE-2024-58008
CVE-2024-58009
CVE-2024-58010
CVE-2024-58011
CVE-2024-58012
CVE-2024-58013
CVE-2024-58014
CVE-2024-58016
CVE-2024-58017
CVE-2024-58018
CVE-2024-58019
CVE-2024-58020
CVE-2024-58021
CVE-2024-58034
CVE-2024-58042
CVE-2024-58051
CVE-2024-58052
CVE-2024-58053
CVE-2024-58054
CVE-2024-58055
CVE-2024-58056
CVE-2024-58057
CVE-2024-58058
CVE-2024-58060
CVE-2024-58061
CVE-2024-58062
CVE-2024-58063
CVE-2024-58064
CVE-2024-58068
CVE-2024-58069
CVE-2024-58070
CVE-2024-58071
CVE-2024-58072
CVE-2024-58075
CVE-2024-58076
CVE-2024-58077
CVE-2024-58078
CVE-2024-58079
CVE-2024-58080
CVE-2024-58081
CVE-2024-58082
CVE-2024-58083
CVE-2024-58084
CVE-2024-58086
CVE-2024-58087
CVE-2024-58088
CVE-2024-58089
CVE-2024-58090
CVE-2024-58092
CVE-2024-58093
CVE-2024-58098
CVE-2024-58100
CVE-2024-58237
CVE-2025-21629
CVE-2025-21631
CVE-2025-21632
CVE-2025-21634
CVE-2025-21636
CVE-2025-21637
CVE-2025-21638
CVE-2025-21639
CVE-2025-21640
CVE-2025-21641
CVE-2025-21642
CVE-2025-21643
CVE-2025-21644
CVE-2025-21645
CVE-2025-21646
CVE-2025-21647
CVE-2025-21648
CVE-2025-21649
CVE-2025-21650
CVE-2025-21652
CVE-2025-21653
CVE-2025-21654
CVE-2025-21655
CVE-2025-21656
CVE-2025-21657
CVE-2025-21658
CVE-2025-21659
CVE-2025-21660
CVE-2025-21661
CVE-2025-21662
CVE-2025-21663
CVE-2025-21664
CVE-2025-21665
CVE-2025-21666
CVE-2025-21667
CVE-2025-21668
CVE-2025-21669
CVE-2025-21670
CVE-2025-21671
CVE-2025-21672
CVE-2025-21673
CVE-2025-21674
CVE-2025-21675
CVE-2025-21676
CVE-2025-21678
CVE-2025-21679
CVE-2025-21680
CVE-2025-21681
CVE-2025-21682
CVE-2025-21683
CVE-2025-21684
CVE-2025-21685
CVE-2025-21687
CVE-2025-21688
CVE-2025-21689
CVE-2025-21690
CVE-2025-21691
CVE-2025-21692
CVE-2025-21693
CVE-2025-21694
CVE-2025-21695
CVE-2025-21696
CVE-2025-21697
CVE-2025-21699
CVE-2025-21700
CVE-2025-21701
CVE-2025-21702
CVE-2025-21703
CVE-2025-21704
CVE-2025-21705
CVE-2025-21706
CVE-2025-21707
CVE-2025-21708
CVE-2025-21710
CVE-2025-21711
CVE-2025-21712
CVE-2025-21714
CVE-2025-21715
CVE-2025-21716
CVE-2025-21718
CVE-2025-21719
CVE-2025-21720
CVE-2025-21721
CVE-2025-21722
CVE-2025-21723
CVE-2025-21724
CVE-2025-21725
CVE-2025-21726
CVE-2025-21727
CVE-2025-21728
CVE-2025-21729
CVE-2025-21730
CVE-2025-21731
CVE-2025-21732
CVE-2025-21733
CVE-2025-21734
CVE-2025-21735
CVE-2025-21736
CVE-2025-21737
CVE-2025-21738
CVE-2025-21739
CVE-2025-21741
CVE-2025-21742
CVE-2025-21743
CVE-2025-21744
CVE-2025-21745
CVE-2025-21746
CVE-2025-21748
CVE-2025-21749
CVE-2025-21750
CVE-2025-21753
CVE-2025-21754
CVE-2025-21756
CVE-2025-21758
CVE-2025-21759
CVE-2025-21760
CVE-2025-21761
CVE-2025-21762
CVE-2025-21763
CVE-2025-21764
CVE-2025-21765
CVE-2025-21766
CVE-2025-21767
CVE-2025-21768
CVE-2025-21770
CVE-2025-21771
CVE-2025-21772
CVE-2025-21773
CVE-2025-21774
CVE-2025-21775
CVE-2025-21776
CVE-2025-21777
CVE-2025-21778
CVE-2025-21779
CVE-2025-21780
CVE-2025-21781
CVE-2025-21782
CVE-2025-21783
CVE-2025-21784
CVE-2025-21785
CVE-2025-21786
CVE-2025-21787
CVE-2025-21788
CVE-2025-21789
CVE-2025-21790
CVE-2025-21791
CVE-2025-21792
CVE-2025-21793
CVE-2025-21794
CVE-2025-21795
CVE-2025-21796
CVE-2025-21798
CVE-2025-21799
CVE-2025-21800
CVE-2025-21801
CVE-2025-21802
CVE-2025-21803
CVE-2025-21804
CVE-2025-21805
CVE-2025-21806
CVE-2025-21808
CVE-2025-21809
CVE-2025-21810
CVE-2025-21811
CVE-2025-21812
CVE-2025-21813
CVE-2025-21814
CVE-2025-21815
CVE-2025-21816
CVE-2025-21819
CVE-2025-21820
CVE-2025-21821
CVE-2025-21823
CVE-2025-21824
CVE-2025-21825
CVE-2025-21826
CVE-2025-21827
CVE-2025-21828
CVE-2025-21829
CVE-2025-21830
CVE-2025-21831
CVE-2025-21832
CVE-2025-21834
CVE-2025-21835
CVE-2025-21836
CVE-2025-21838
CVE-2025-21839
CVE-2025-21841
CVE-2025-21842
CVE-2025-21844
CVE-2025-21845
CVE-2025-21846
CVE-2025-21847
CVE-2025-21848
CVE-2025-21849
CVE-2025-21851
CVE-2025-21852
CVE-2025-21853
CVE-2025-21854
CVE-2025-21856
CVE-2025-21857
CVE-2025-21858
CVE-2025-21859
CVE-2025-21861
CVE-2025-21862
CVE-2025-21863
CVE-2025-21864
CVE-2025-21865
CVE-2025-21866
CVE-2025-21867
CVE-2025-21868
CVE-2025-21869
CVE-2025-21870
CVE-2025-21871
CVE-2025-21872
CVE-2025-21873
CVE-2025-21874
CVE-2025-21875
CVE-2025-21876
CVE-2025-21877
CVE-2025-21878
CVE-2025-21880
CVE-2025-21881
CVE-2025-21883
CVE-2025-21885
CVE-2025-21886
CVE-2025-21887
CVE-2025-21888
CVE-2025-21889
CVE-2025-21890
CVE-2025-21891
CVE-2025-21892
CVE-2025-21893
CVE-2025-21894
CVE-2025-21895
CVE-2025-21897
CVE-2025-21898
CVE-2025-21899
CVE-2025-21900
CVE-2025-21901
CVE-2025-21902
CVE-2025-21903
CVE-2025-21904
CVE-2025-21905
CVE-2025-21906
CVE-2025-21907
CVE-2025-21908
CVE-2025-21909
CVE-2025-21910
CVE-2025-21911
CVE-2025-21912
CVE-2025-21913
CVE-2025-21914
CVE-2025-21915
CVE-2025-21916
CVE-2025-21917
CVE-2025-21918
CVE-2025-21919
CVE-2025-21920
CVE-2025-21921
CVE-2025-21922
CVE-2025-21923
CVE-2025-21924
CVE-2025-21925
CVE-2025-21926
CVE-2025-21927
CVE-2025-21928
CVE-2025-21929
CVE-2025-21930
CVE-2025-21931
CVE-2025-21932
CVE-2025-21934
CVE-2025-21935
CVE-2025-21936
CVE-2025-21937
CVE-2025-21938
CVE-2025-21940
CVE-2025-21941
CVE-2025-21943
CVE-2025-21944
CVE-2025-21945
CVE-2025-21946
CVE-2025-21947
CVE-2025-21948
CVE-2025-21950
CVE-2025-21951
CVE-2025-21954
CVE-2025-21955
CVE-2025-21956
CVE-2025-21957
CVE-2025-21958
CVE-2025-21959
CVE-2025-21960
CVE-2025-21961
CVE-2025-21962
CVE-2025-21963
CVE-2025-21964
CVE-2025-21965
CVE-2025-21966
CVE-2025-21967
CVE-2025-21968
CVE-2025-21969
CVE-2025-21970
CVE-2025-21971
CVE-2025-21972
CVE-2025-21973
CVE-2025-21974
CVE-2025-21975
CVE-2025-21976
CVE-2025-21977
CVE-2025-21978
CVE-2025-21979
CVE-2025-21980
CVE-2025-21981
CVE-2025-21982
CVE-2025-21983
CVE-2025-21984
CVE-2025-21985
CVE-2025-21986
CVE-2025-21987
CVE-2025-21989
CVE-2025-21990
CVE-2025-21991
CVE-2025-21992
CVE-2025-21993
CVE-2025-21994
CVE-2025-21995
CVE-2025-21996
CVE-2025-21997
CVE-2025-21998
CVE-2025-21999
CVE-2025-22000
CVE-2025-22001
CVE-2025-22002
CVE-2025-22003
CVE-2025-22004
CVE-2025-22005
CVE-2025-22006
CVE-2025-22007
CVE-2025-22008
CVE-2025-22009
CVE-2025-22010
CVE-2025-22011
CVE-2025-22013
CVE-2025-22014
CVE-2025-22015
CVE-2025-22016
CVE-2025-22017
CVE-2025-22018
CVE-2025-22019
CVE-2025-22020
CVE-2025-22021
CVE-2025-22022
CVE-2025-22023
CVE-2025-22024
CVE-2025-22025
CVE-2025-22026
CVE-2025-22027
CVE-2025-22028
CVE-2025-22030
CVE-2025-22032
CVE-2025-22033
CVE-2025-22034
CVE-2025-22035
CVE-2025-22036
CVE-2025-22037
CVE-2025-22038
CVE-2025-22039
CVE-2025-22040
CVE-2025-22041
CVE-2025-22042
CVE-2025-22043
CVE-2025-22044
CVE-2025-22045
CVE-2025-22046
CVE-2025-22047
CVE-2025-22049
CVE-2025-22050
CVE-2025-22053
CVE-2025-22054
CVE-2025-22055
CVE-2025-22056
CVE-2025-22057
CVE-2025-22058
CVE-2025-22059
CVE-2025-22060
CVE-2025-22062
CVE-2025-22063
CVE-2025-22064
CVE-2025-22065
CVE-2025-22066
CVE-2025-22067
CVE-2025-22068
CVE-2025-22070
CVE-2025-22071
CVE-2025-22072
CVE-2025-22073
CVE-2025-22074
CVE-2025-22075
CVE-2025-22076
CVE-2025-22077
CVE-2025-22078
CVE-2025-22079
CVE-2025-22080
CVE-2025-22081
CVE-2025-22082
CVE-2025-22083
CVE-2025-22084
CVE-2025-22085
CVE-2025-22086
CVE-2025-22087
CVE-2025-22088
CVE-2025-22089
CVE-2025-22090
CVE-2025-22091
CVE-2025-22093
CVE-2025-22095
CVE-2025-22097
CVE-2025-22102
CVE-2025-22120
CVE-2025-22122
CVE-2025-22123
CVE-2025-22126
CVE-2025-23134
CVE-2025-23136
CVE-2025-23138
CVE-2025-23140
CVE-2025-23141
CVE-2025-23142
CVE-2025-23144
CVE-2025-23145
CVE-2025-23146
CVE-2025-23147
CVE-2025-23148
CVE-2025-23149
CVE-2025-23150
CVE-2025-23151
CVE-2025-23154
CVE-2025-23156
CVE-2025-23157
CVE-2025-23158
CVE-2025-23159
CVE-2025-23160
CVE-2025-23163
CVE-2025-37738
CVE-2025-37739
CVE-2025-37740
CVE-2025-37741
CVE-2025-37742
CVE-2025-37744
CVE-2025-37745
CVE-2025-37748
CVE-2025-37749
CVE-2025-37750
CVE-2025-37752
CVE-2025-37754
CVE-2025-37755
CVE-2025-37756
CVE-2025-37757
CVE-2025-37758
CVE-2025-37759
CVE-2025-37760
CVE-2025-37761
CVE-2025-37763
CVE-2025-37764
CVE-2025-37765
CVE-2025-37766
CVE-2025-37767
CVE-2025-37768
CVE-2025-37769
CVE-2025-37770
CVE-2025-37771
CVE-2025-37772
CVE-2025-37773
CVE-2025-37774
CVE-2025-37775
CVE-2025-37776
CVE-2025-37777
CVE-2025-37778
CVE-2025-37780
CVE-2025-37781
CVE-2025-37784
CVE-2025-37785
CVE-2025-37786
CVE-2025-37787
CVE-2025-37788
CVE-2025-37789
CVE-2025-37790
CVE-2025-37791
CVE-2025-37792
CVE-2025-37793
CVE-2025-37794
CVE-2025-37796
CVE-2025-37797
CVE-2025-37798
CVE-2025-37799
CVE-2025-37800
CVE-2025-37801
CVE-2025-37805
CVE-2025-37806
CVE-2025-37807
CVE-2025-37808
CVE-2025-37809
CVE-2025-37810
CVE-2025-37811
CVE-2025-37812
CVE-2025-37813
CVE-2025-37814
CVE-2025-37815
CVE-2025-37816
CVE-2025-37817
CVE-2025-37818
CVE-2025-37819
CVE-2025-37820
CVE-2025-37821
CVE-2025-37822
CVE-2025-37823
CVE-2025-37824
CVE-2025-37826
CVE-2025-37827
CVE-2025-37828
CVE-2025-37829
CVE-2025-37830
CVE-2025-37831
CVE-2025-37833
CVE-2025-37834
CVE-2025-37836
CVE-2025-37837
CVE-2025-37838
CVE-2025-37839
CVE-2025-37840
CVE-2025-37841
CVE-2025-37843
CVE-2025-37844
CVE-2025-37845
CVE-2025-37846
CVE-2025-37847
CVE-2025-37848
CVE-2025-37849
CVE-2025-37850
CVE-2025-37852
CVE-2025-37853
CVE-2025-37854
CVE-2025-37856
CVE-2025-37857
CVE-2025-37858
CVE-2025-37859
CVE-2025-37861
CVE-2025-37862
CVE-2025-37863
CVE-2025-37864
CVE-2025-37865
CVE-2025-37866
CVE-2025-37867
CVE-2025-37868
CVE-2025-37869
CVE-2025-37870
CVE-2025-37871
CVE-2025-37872
CVE-2025-37873
CVE-2025-37874
CVE-2025-37875
CVE-2025-37876
CVE-2025-37877
CVE-2025-37878
CVE-2025-37879
CVE-2025-37880
CVE-2025-37881
CVE-2025-37882
CVE-2025-37883
CVE-2025-37884
CVE-2025-37885
CVE-2025-37886
CVE-2025-37887
CVE-2025-37888
CVE-2025-37889
CVE-2025-37890
CVE-2025-37891
CVE-2025-37892
CVE-2025-37893
CVE-2025-37894
CVE-2025-37895
CVE-2025-37897
CVE-2025-37899
CVE-2025-37900
CVE-2025-37901
CVE-2025-37903
CVE-2025-37905
CVE-2025-37907
CVE-2025-37908
CVE-2025-37909
CVE-2025-37910
CVE-2025-37911
CVE-2025-37912
CVE-2025-37913
CVE-2025-37914
CVE-2025-37915
CVE-2025-37916
CVE-2025-37917
CVE-2025-37918
CVE-2025-37919
CVE-2025-37920
CVE-2025-37921
CVE-2025-37922
CVE-2025-37923
CVE-2025-37924
CVE-2025-37926
CVE-2025-37927
CVE-2025-37928
CVE-2025-37929
CVE-2025-37930
CVE-2025-37931
CVE-2025-37932
CVE-2025-37933
CVE-2025-37934
CVE-2025-37935
CVE-2025-37936
CVE-2025-37937
CVE-2025-37938
CVE-2025-37940
CVE-2025-37941
CVE-2025-37942
CVE-2025-37943
CVE-2025-37944
CVE-2025-37945
CVE-2025-37946
CVE-2025-37947
CVE-2025-37948
CVE-2025-37949
CVE-2025-37951
CVE-2025-37952
CVE-2025-37953
CVE-2025-37954
CVE-2025-37955
CVE-2025-37956
CVE-2025-37957
CVE-2025-37958
CVE-2025-37959
CVE-2025-37960
CVE-2025-37961
CVE-2025-37962
CVE-2025-37963
CVE-2025-37964
CVE-2025-37965
CVE-2025-37967
CVE-2025-37968
CVE-2025-37969
CVE-2025-37970
CVE-2025-37971
CVE-2025-37972
CVE-2025-37973
CVE-2025-37974
CVE-2025-37975
CVE-2025-37978
CVE-2025-37979
CVE-2025-37980
CVE-2025-37982
CVE-2025-37983
CVE-2025-37985
CVE-2025-37986
CVE-2025-37987
CVE-2025-37988
CVE-2025-37989
CVE-2025-37990
CVE-2025-37991
CVE-2025-37992
CVE-2025-37993
CVE-2025-37994
CVE-2025-37995
CVE-2025-37997
CVE-2025-37998
CVE-2025-37999
CVE-2025-38000
CVE-2025-38001
CVE-2025-38003
CVE-2025-38004
CVE-2025-38005
CVE-2025-38007
CVE-2025-38008
CVE-2025-38009
CVE-2025-38010
CVE-2025-38011
CVE-2025-38012
CVE-2025-38013
CVE-2025-38014
CVE-2025-38015
CVE-2025-38016
CVE-2025-38018
CVE-2025-38019
CVE-2025-38020
CVE-2025-38022
CVE-2025-38023
CVE-2025-38024
CVE-2025-38027
CVE-2025-38031
CVE-2025-38033
CVE-2025-38034
CVE-2025-38035
CVE-2025-38037
CVE-2025-38038
CVE-2025-38039
CVE-2025-38040
CVE-2025-38043
CVE-2025-38044
CVE-2025-38045
CVE-2025-38047
CVE-2025-38048
CVE-2025-38049
CVE-2025-38051
CVE-2025-38052
CVE-2025-38053
CVE-2025-38054
CVE-2025-38055
CVE-2025-38056
CVE-2025-38057
CVE-2025-38058
CVE-2025-38059
CVE-2025-38060
CVE-2025-38061
CVE-2025-38062
CVE-2025-38063
CVE-2025-38065
CVE-2025-38066
CVE-2025-38068
CVE-2025-38069
CVE-2025-38071
CVE-2025-38072
CVE-2025-38073
CVE-2025-38074
CVE-2025-38075
CVE-2025-38077
CVE-2025-38078
CVE-2025-38079
CVE-2025-38080
CVE-2025-38081
CVE-2025-38082
CVE-2025-38089
CVE-2025-38152
CVE-2025-38240
CVE-2025-38479
CVE-2025-38575
CVE-2025-38637
CVE-2025-39688
CVE-2025-39728
CVE-2025-39735
CVE-2025-39778
CVE-2025-39989
CVE-2025-40114




Description of changes:

[6.12.0-101.33.4.3.el10uek]
- Revert "Add normal counters" (Boris Ostrovsky)  [Orabug: 38171405]

[6.12.0-101.33.4.2.el10uek]
- sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug:
38178286]  {CVE-2025-38089}
- mm: memcontrol: remove memcg from LRU on release instead of offline (Harry Yoo)  [Orabug:
38162790]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Harshvardhan Jha)  [Orabug: 38175263]
- ipv6: replace ipcm6_init calls with ipcm6_init_sk (Willem de Bruijn)  [Orabug: 38175246]
- ipv6: remove leftover ip6 cookie initializer (Willem de Bruijn)  [Orabug: 38175246]

[6.12.0-101.33.4.1.el10uek]
- Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38023239]  {CVE-2024-36350} {CVE-2024-36357}
- x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38023239]
{CVE-2024-36350} {CVE-2024-36357}
- Add normal counters (Borislav Petkov (AMD))  [Orabug: 38023239]  {CVE-2024-36350}
{CVE-2024-36357}
- KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38023239]
{CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug:
38023239]  {CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug:
38023239]  {CVE-2024-36350} {CVE-2024-36357}

[6.12.0-101.33.4.el10uek]
- rds: ib: Add cm_id generation scheme in order to detect new ones (Håkon Bugge)  [Orabug:
37617972]
- uek-rpm: Enable the FWCTL PDS and CXL support in UEK8 (Qing Huang)  [Orabug: 38006732]
- cxl/feature: Update out_len in set feature failure case (Li Ming)  [Orabug: 38006732]
- cxl: Fix devm host device for CXL fwctl initialization (Dave Jiang)  [Orabug: 38006732]
- fwctl/cxl: Fix uuid_t usage in uapi (Dan Williams)  [Orabug: 38006732]
- pds_fwctl: add Documentation entries (Shannon Nelson)  [Orabug: 38006732]
- pds_fwctl: add rpc and query support (Brett Creeley)  [Orabug: 38006732]
- pds_fwctl: initial driver framework (Shannon Nelson)  [Orabug: 38006732]
- pds_core: add new fwctl auxiliary_device (Shannon Nelson)  [Orabug: 38006732]
- cxl: Fixup kdoc issues for include/cxl/features.h (Dave Jiang)  [Orabug: 38006732]
- fwctl/cxl: Add documentation to FWCTL CXL (Dave Jiang)  [Orabug: 38006732]
- cxl/test: Add Set Feature support to cxl_test (Dave Jiang)  [Orabug: 38006732]
- cxl/test: Add Get Feature support to cxl_test (Dave Jiang)  [Orabug: 38006732]
- cxl: Add support to handle user feature commands for set feature (Dave Jiang)  [Orabug:
38006732]
- cxl: Add support to handle user feature commands for get feature (Dave Jiang)  [Orabug:
38006732]
- cxl: Add support for fwctl RPC command to enable CXL feature commands (Dave Jiang)  [Orabug:
38006732]
- cxl: Move cxl feature command structs to user header (Dave Jiang)  [Orabug: 38006732]
- cxl: Add FWCTL support to CXL (Dave Jiang)  [Orabug: 38006732]
- cxl: Setup exclusive CXL features that are reserved for the kernel (Dave Jiang)  [Orabug:
38006732]
- cxl/mbox: Add SET_FEATURE mailbox command (Shiju Jose)  [Orabug: 38006732]
- cxl/mbox: Add GET_FEATURE mailbox command (Shiju Jose)  [Orabug: 38006732]
- cxl/test: Add Get Supported Features mailbox command support (Dave Jiang)  [Orabug: 38006732]
- cxl: Add Get Supported Features command for kernel usage (Dave Jiang)  [Orabug: 38006732]
- cxl: Enumerate feature commands (Dave Jiang)  [Orabug: 38006732]
- cxl: Refactor user ioctl command path from mds to mailbox (Dave Jiang)  [Orabug: 38006732]
- vhost-scsi: Fix log flooding with target does not exist errors (Mike Christie)  [Orabug:
38053075]
- vhost-scsi: Change def inline_sg_cnt and max_io_vqs for exadata (Mike Christie)  [Orabug:
38053233]
- sched/numa: add tracepoint that tracks the skipping of numa balancing due to cpuset memory
pinning (Libo Chen)  [Orabug: 38070168]
- sched/numa: skip VMA scanning on memory pinned to one NUMA node via cpuset.mems (Libo Chen)
[Orabug: 38070168]
- uek-rpm: Enable CONFIG_SERIAL_RP2 as m (Samasth Norway Ananda)  [Orabug: 38091733]
- serial: update the rp2 driver code (Samasth Norway Ananda)  [Orabug: 38091733]

[6.12.0-101.33.3.el10uek]
- mm: do not write protect COW mappings when preserving across exec (Anthony Yznaga) [Orabug:
38029049]
- mm: hold the source mmap write lock when copying PTEs (Anthony Yznaga) [Orabug: 38029049]
- Enable EROFS modules and related config options (Harshit Mogalapalli) [Orabug: 38042713]

[6.12.0-101.33.2.el10uek]
- net: mana: Add support for Multi Vports on Bare metal (Haiyang Zhang) [Orabug: 38052741]
- tools: hv: Enable debug logs for hv_kvp_daemon (Shradha Gupta) [Orabug: 38052759]
- LTS version: v6.12.33 (Jack Vogel)
- Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (Aurabindo Pillai)
- dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property (Xu Yang)
- dt-bindings: usb: cypress,hx3: Add support for all variants (Lukasz Czechowski)
- thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky)
- usb: usbtmc: Fix timeout value in get_stb (Dave Penkler)
- serial: jsm: fix NPE during jsm_uart_port_init (Dustin Lundquist)
- Bluetooth: hci_qca: move the SoC type check to the right place (Bartosz Golaszewski)
- usb: typec: ucsi: fix Clang -Wsign-conversion warning (Qasim Ijaz)
- USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Charles Yeh)
- usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Hongyu Xie)
- usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Jiayi Li)
- Revert "cpufreq: tegra186: Share policy per cluster" (Jonathan Hunter)
- block: fix adding folio to bio (Ming Lei) [Orabug: 37844657] {CVE-2025-22122}
- PCI/ASPM: Disable L1 before disabling L1 PM Substates (Ajay Agarwal)
- accel/ivpu: Update power island delays (Karol Wachowski)
- accel/ivpu: Add initial Panther Lake support (Maciej Falkowski)
- rtc: Fix offset calculation for .start_secs < 0 (Alexandre Mergnat)
- rtc: Make rtc_time64_to_tm() support dates before 1970 (Alexandre Mergnat)
- Documentation: ACPI: Use all-string data node references (Sakari Ailus)
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Gautham R. Shenoy)
- pinctrl: armada-37xx: set GPIO output value before setting direction (Gabor Juhos)
- pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 (Gabor Juhos)
- f2fs: fix to avoid accessing uninitialized curseg (Chao Yu) [Orabug: 37844644] {CVE-2025-22123}
- tracing: Fix compilation warning on arm32 (Pan Taixi)
- LTS version: v6.12.32 (Jack Vogel)
- ksmbd: use list_first_entry_or_null for opinfo_get_list() (Namjae Jeon)
- net: ethernet: ti: am65-cpsw: Lower random mac address error print to info (Nishanth Menon)
- platform/x86: thinkpad_acpi: Ignore battery threshold change event notification (Mark Pearson)
- ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform (Kailang Yang)
- platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys (Valtteri Koskivuori)
- NFS: Avoid flushing data while holding directory locks in nfs_rename() (Trond Myklebust)
- char: tpm: tpm-buf: Add sanity check fallback in read helpers (Purva Yeshi)
- drm/xe: Save the gt pointer in lrc and drop the tile (Umesh Nerlige Ramappa)
- drm/xe/xe2hpg: Add Wa_22021007897 (Aradhya Bhatia)
- nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro (Ilya Guterman)
- spi: spi-sun4i: fix early activation (Alessandro Grassi)
- phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error (Algea Cao)
- phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure (Hal Feng)
- drm/amd/display: check stream id dml21 wrapper to get plane_id (Aurabindo Pillai)
- drm/amd/display: fix link_set_dpms_off multi-display MST corner case (George Shen)
- gpio: virtuser: fix potential out-of-bound write (Markus Burri) [Orabug: 38095181]
{CVE-2025-38082}
- um: let 'make clean' properly clean underlying SUBARCH as well (Masahiro Yamada)
- platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS (John Chau)
- nfs: don't share pNFS DS connections between net namespaces (Jeff Layton)
- HID: quirks: Add ADATA XPG alpha wireless mouse support (Milton Barrera)
- dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open (Purva Yeshi)
- coredump: hand a pidfd to the usermode coredump helper (Christian Brauner)
- coredump: fix error handling for replace_fd() (Christian Brauner)
- perf/arm-cmn: Add CMN S3 ACPI binding (Robin Murphy)
- perf/arm-cmn: Initialise cmn->cpu earlier (Robin Murphy)
- perf/arm-cmn: Fix REQ2/SNP2 mixup (Robin Murphy)
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [Orabug:
38049363] {CVE-2025-38001}
- arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl (Siddharth Vadapalli)
- arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1" (Siddharth Vadapalli)
- arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1" (Siddharth Vadapalli)
- arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219 (Yemike Abhilash Chandra)
- arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay (Yemike Abhilash
Chandra)
- arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators (Yemike Abhilash Chandra)
- arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy (Yemike Abhilash Chandra)
- arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 (Judith Mendez)
- arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay (Yemike Abhilash
Chandra)
- arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay (Yemike Abhilash
Chandra)
- arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay (Yemike Abhilash
Chandra)
- arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default (Judith Mendez)
- arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default (Judith Mendez)
- arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default (Judith Mendez)
- arm64: dts: qcom: x1e80100: Fix video thermal zone (Stephan Gerhold)
- arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on (Johan Hovold)
- arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on (Johan Hovold)
- arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)
- arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)
- arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)
- arm64: dts: qcom: sm8650: Add missing properties for cryptobam (Stephan Gerhold)
- arm64: dts: qcom: sm8550: Add missing properties for cryptobam (Stephan Gerhold)
- arm64: dts: qcom: sm8450: Add missing properties for cryptobam (Stephan Gerhold)
- arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node (Alok Tiwari)
- arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 (Karthik Sanagavarapu)
- arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property (Ling Xu)
- arm64: dts: qcom: ipq9574: Add missing properties for cryptobam (Stephan Gerhold)
- can: kvaser_pciefd: Force IRQ edge in case of nested IRQ (Axel Forsman)
- RDMA/bnxt_re: Remove unusable nq variable (Leon Romanovsky) [Orabug: 37822348]
- RDMA/bnxt_re: Fix budget handling of notification queue (Kashyap Desai) [Orabug: 37822348]
- bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [Orabug: 37822348]
- bnxt_en: Add a new ethtool -W dump flag (Michael Chan) [Orabug: 37822348]
- bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [Orabug: 37822348]
- bnxt_en: Add functions to copy host context memory (Sreekanth Reddy) [Orabug: 37822348]
- bnxt_en: Do not free FW log context memory (Hongguang Gao) [Orabug: 37822348]
- bnxt_en: Manage the FW trace context memory (Shruti Parab) [Orabug: 37822348]
- bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [Orabug: 37822348]
- bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Hongguang Gao) [Orabug: 37822348]
- bnxt_en: Refactor bnxt_free_ctx_mem() (Hongguang Gao) [Orabug: 37822348]
- bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [Orabug: 37822348]
- bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (David Wei) [Orabug:
37822348]
- bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Daniel Xu) [Orabug: 37822348]
- bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Daniel Xu) [Orabug: 37822348]
- bnxt_en: use irq_update_affinity_hint() (Mohammad Heib) [Orabug: 37822348]
- bnxt_en: add unlocked version of bnxt_refclk_read (Vadim Fedorenko) [Orabug: 37822348]
- bnxt_en: replace PTP spinlock with seqlock (Vadim Fedorenko) [Orabug: 37822348]
- bnxt_en: cache only 24 bits of hw counter (Vadim Fedorenko) [Orabug: 37822348]
- bnxt_en: Update firmware interface spec to 1.10.3.85 (Michael Chan) [Orabug: 37822348]
- bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Michael Chan) [Orabug:
37822348]
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Michael Chan) [Orabug: 37822348]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Michael Chan) [Orabug:
37822348]
- bnxt_en: Do not allow ethtool -m on an untrusted VF (Michael Chan) [Orabug: 37822348]
- RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Preethi G) [Orabug: 37822348]
- RDMA/bnxt_re: Fix allocation of QP table (Kashyap Desai) [Orabug: 37822348]
- RDMA/bnxt_re: Remove deliver net device event (Yuyu Li) [Orabug: 37822348]
- RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Pass the context for ulp_irq_stop (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Query firmware defaults of CC params during probe (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Add Async event handling support (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Remove unnecessary header file inclusion (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Eliminate need for some forward declarations (Kalesh Ap) [Orabug: 37822348]
- bnxt_en: Add ULP call to notify async events (Michael Chan) [Orabug: 37822348]
- RDMA/bnxt_re: Fix issue in the unload path (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Damodharam Ammepalli) [Orabug:
37822348]
- RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Use the default mode of congestion control (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Support different traffic class (Chandramohan Akula) [Orabug: 37822348]
- RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Bhargava Chenna Marreddy)
[Orabug: 37822348]
- bnxt_en: Add support for RoCE sriov configuration (Vikas Gupta) [Orabug: 37822348]
- RDMA/bnxt_re: Add debugfs hook in the driver (Kalesh Ap) [Orabug: 37822348]
- RDMA/bnxt_re: Support raw data query for each resources (Kashyap Desai) [Orabug: 37822348]
- RDMA/bnxt_re: Add support for querying HW contexts (Kashyap Desai) [Orabug: 37822348]
- RDMA/bnxt_re: Support driver specific data collection using rdma tool (Kashyap Desai) [Orabug:
37822348]
- RDMA/bnxt_re: Fix access flags for MR and QP modify (Hongguang Gao) [Orabug: 37822348]
- RDMA/bnxt_re: Add support for CQ rx coalescing (Chandramohan Akula) [Orabug: 37822348]
- RDMA/bnxt_re: Add support for optimized modify QP (Kalesh Ap) [Orabug: 37822348]
- mm/memcontrol: Fix LRU reparenting logic when !MGLRU (Kamalesh Babulal) [Orabug: 37920452]
- mm: multi-gen LRU: skip rotation of offlined memcgs (Harry Yoo) [Orabug: 37997501]
- mm: lru: move VM_WARN_ON_ONCE_FOLIO before MGLRU functions (Harry Yoo) [Orabug: 37997580]
- mm: thp: replace folio_memcg() with folio_memcg_charged() (Muchun Song) [Orabug: 37997580]
- mm: zswap: prevent lruvec release in zswap_folio_swapin() (Muchun Song) [Orabug: 37997580]
- mm: workingset: prevent lruvec release in workingset_refault() (Muchun Song) [Orabug: 37997580]
- mm: page_io: prevent memory cgroup release in page_io module (Muchun Song) [Orabug: 37997580]
- mm: workingset: prevent memory cgroup release in lru_gen_eviction() (Muchun Song) [Orabug:
37997580]
- writeback: prevent memory cgroup release in writeback module (Muchun Song) [Orabug: 37997580]
- mm: memcontrol: protect lruvec critical section with the RCU read lock (Harry Yoo) [Orabug:
37997580]
- mm: vmscan: disable IRQ before __mod_lruvec_state() (Harry Yoo) [Orabug: 37997618]
- mm: multi-gen LRU: fix two warnings in evict_folios() (Harry Yoo) [Orabug: 37997618]
- mm: multi-gen LRU: update lrugen->nr_pages during lruvec reparenting (Harry Yoo) [Orabug:
37997618]
- ocfs2: fix the issue with discontiguous allocation in the global_bitmap (Heming Zhao) [Orabug:
38041352]
- Reapply "ocfs2: fix sparse warnings" (Gautham Ananthakrishna) [Orabug: 38041352]
- Reapply "ocfs2: speed up chain-list searching" (Gautham Ananthakrishna) [Orabug: 38041352]
- Reapply "ocfs2: adjust enabling place for la window" (Gautham Ananthakrishna) [Orabug: 38041352]
- Reapply "ocfs2: improve write IO performance when fragmentation is high" (Gautham Ananthakrishna)
[Orabug: 38041352]

[6.12.0-101.31.1.el10uek]
- LTS version: v6.12.31 (Jack Vogel)
- drm/gem: Internally test import_attach for imported objects (Thomas Zimmermann)
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase
max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers (Balbir Singh)
- i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() (Nathan Chancellor)
- pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() (Dan Carpenter)
- watchdog: aspeed: fix 64-bit division (Arnd Bergmann)
- drm/amdkfd: Correct F8_MODE for gfx950 (Amber Lin)
- serial: sh-sci: Save and restore more registers (Geert Uytterhoeven)
- bpf: abort verification if env->cur_state->loop_entry != NULL (Eduard Zingerman)
- drm/amd/display: Exit idle optimizations before accessing PHY (Ovidiu Bunea)
- kbuild: Properly disable -Wunterminated-string-initialization for clang (Nathan Chancellor)
- Fix mis-uses of 'cc-option' for warning disablement (Linus Torvalds)
- gcc-15: disable '-Wunterminated-string-initialization' entirely for now (Linus Torvalds)
- gcc-15: make 'unterminated string initialization' just a warning (Linus Torvalds)
- err.h: move IOMEM_ERR_PTR() to err.h (Raag Jadav)
- spi: spi-fsl-dspi: Reset SR flags before sending a new message (Larisa Grigore)
- spi: spi-fsl-dspi: Halt the module after a new message transfer (Bogdan-Gabriel Roman)
- spi: spi-fsl-dspi: restrict register range for regmap access (Larisa Grigore)
- spi: use container_of_cont() for to_spi_device() (Greg Kroah-Hartman)
- platform/x86: think-lmi: Fix attribute name usage for non-compliant items (Mark Pearson)
- ksmbd: fix stream write failure (Namjae Jeon)
- Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" (Jernej Skrabec)
- Bluetooth: btmtksdio: Do close if SDIO card removed without close (Chris Lu)
- Bluetooth: btmtksdio: Check function enabled before doing close (Chris Lu)
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ryusuke Konishi)
- mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled (Ignacio Moreno Gonzalez)
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Tianyang Zhang)
- memcg: always call cond_resched() after fn() (Breno Leitao)
- highmem: add folio_test_partial_kmap() (Matthew Wilcox)
- Input: xpad - add more controllers (Vicki Pfau)
- Revert "drm/amd: Keep display off while going into S4" (Mario Limonciello)
- smb: client: Reset all search buffer pointers when releasing buffer (Zhaolong Wang)
- arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs (Gabor Juhos)
- smb: client: Fix use-after-free in cifs_fill_dirent (Zhaolong Wang) [Orabug: 38094970]
{CVE-2025-38051}
- drm/edid: fixed the bug that hdr metadata was not reset (Feijuan Li)
- thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature (Zhang Rui)
- platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Vladimir
Moskovkin) [Orabug: 38095141] {CVE-2025-38077}
- pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() (Dan Carpenter)
- pmdomain: renesas: rcar: Remove obsolete nullify checks (Geert Uytterhoeven)
- vmxnet3: update MTU after device quiesce (Ronak Doshi)
- net: dsa: microchip: linearize skb for tail-tagging switches (Jakob Unterwurzacher)
- can: kvaser_pciefd: Fix echo_skb race (Axel Forsman)
- can: kvaser_pciefd: Continue parsing DMA buf after dropped RX (Axel Forsman)
- llc: fix data loss when reading from a socket in llc_ui_recvmsg() (Gavrilov Ilia)
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 (Ed Burcher)
- ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [Orabug: 38095145]
{CVE-2025-38078}
- ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction (Peter Ujfalusi)
- ASoc: SOF: topology: connect DAI to a single DAI link (Kai Vehmanen)
- ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms (Peter Ujfalusi)
- ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext (Peter Ujfalusi)
- can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [Orabug: 38049369]
{CVE-2025-38003}
- can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 38049374]
{CVE-2025-38004}
- can: slcan: allow reception of short error messages (Carlos Sanchez)
- padata: do not leak refcount in reorder_work (Dominik Grzegorzek) [Orabug: 38094842]
{CVE-2025-38031}
- crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [Orabug: 38095153]
{CVE-2025-38079}
- clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() (André
Draszik)
- octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Geetha Sowjanya)
- octeontx2-af: Set LMT_ENA bit for APR table entries (Subbaraya Sundeep)
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Wang Liang) [Orabug: 38094978]
{CVE-2025-38052}
- octeontx2-pf: Add AF_XDP non-zero copy support (Suman Ghosh)
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [Orabug:
38049357] {CVE-2025-38000}
- idpf: fix idpf_vport_splitq_napi_poll() (Eric Dumazet)
- io_uring: fix overflow resched cqe reordering (Pavel Begunkov)
- net: lan743x: Restore SGMII CTRL register on resume (Thangaraj Samynathan)
- net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Paul Kocialkowski)
- pinctrl: qcom: switch to devm_register_sys_off_handler() (Dmitry Baryshkov)
- loop: don't require ->write_iter for writable files in loop_configure (Christoph Hellwig)
- idpf: fix null-ptr-deref in idpf_features_check (Pavan Kumar Linga) [Orabug: 38094982]
{CVE-2025-38053}
- ice: Fix LACP bonds without SRIOV environment (Dave Ertman)
- ice: fix vf->num_mac count with port representors (Jacob Keller)
- bridge: netfilter: Fix forwarding of fragmented packets (Ido Schimmel)
- ptp: ocp: Limit signal/freq counts in summary output functions (Sagi Maimon) [Orabug: 38094984]
{CVE-2025-38054}
- Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling (En-Wei Wu)
- Bluetooth: L2CAP: Fix not checking l2cap_chan security level (Luiz Augusto von Dentz)
- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Adrian Hunter) [Orabug: 38094988]
{CVE-2025-38055}
- irqchip/riscv-imsic: Start local sync timer on correct CPU (Andrew Bresticker)
- ASoC: SOF: Intel: hda: Fix UAF when reloading module (Tavian Barnes) [Orabug: 38094991]
{CVE-2025-38056}
- devres: Introduce devm_kmemdup_array() (Raag Jadav)
- driver core: Split devres APIs to device/devres.h (Andy Shevchenko)
- dmaengine: fsl-edma: Fix return code for unhandled interrupts (Stefan Wahren)
- dmaengine: idxd: Fix ->poll() return value (Dave Jiang)
- xfrm: Sanitize marks before insert (Paul Chaignon)
- clk: sunxi-ng: d1: Add missing divider for MMC mod clocks (Andre Przywara)
- remoteproc: qcom_wcnss: Fix on platforms without fallback regulators (Matti Lehtimäki)
- kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (David Hildenbrand)
- x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro (Seongman Lee)
- dmaengine: idxd: Fix allowing write() from different address spaces (Vinicius Costa Gomes)
- xfrm: Fix UDP GRO handling for some corner cases (Tobias Brunner)
- espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca)
- espintcp: fix skb leaks (Sabrina Dubroca) [Orabug: 38094993] {CVE-2025-38057}
- soundwire: bus: Fix race on the creation of the IRQ domain (Charles Keepax)
- __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [Orabug:
38095000] {CVE-2025-38058}
- drm/amd/display: Call FP Protect Before Mode Programming/Mode Support (Austin Zheng)
- xenbus: Allow PVH dom0 a non-local xenstore (Jason Andryuk)
- x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 (Paweł Anikiel) [Orabug:
38094847] {CVE-2025-38033}
- wifi: iwlwifi: add support for Killer on MTL (Johannes Berg)
- block: only update request sector if needed (Johannes Thumshirn)
- tools: ynl-gen: validate 0 len strings from kernel (David Wei)
- btrfs: avoid NULL pointer dereference if no valid csum tree (Qu Wenruo) [Orabug: 38095010]
{CVE-2025-38059}
- btrfs: handle empty eb->folios in num_extent_folios() (Boris Burkov)
- btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues)
[Orabug: 38094856] {CVE-2025-38034}
- btrfs: compression: adjust cb->compressed_folios allocation type (Kees Cook)
- ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers (Stefan Binding)
- cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function (Pali Rohár)
- cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() (Pali Rohár)
- io_uring/fdinfo: annotate racy sq/cq head/tail reads (Jens Axboe)
- nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [Orabug: 38094863]
{CVE-2025-38035}
- ALSA: usb-audio: Fix duplicated name in MIDI substream names (Takashi Iwai)
- nvme-pci: add quirks for WDC Blue SN550 15b7:5009 (Guan Wentao)
- nvme-pci: add quirks for device 126f:1001 (Guan Wentao)
- ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx (Takashi Iwai)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 (Takashi Iwai)
- ASoC: cs42l43: Disable headphone clamps during type detection (Charles Keepax)
- platform/x86: ideapad-laptop: add support for some new buttons (Gašper Nemgar)
- platform/x86: asus-wmi: Disable OOBE state after resume from hibernation (Pavel Nikulin)
- platform/x86/intel: hid: Add Pantherlake support (Saranya Gopal)
- smb: server: smb2pdu: check return value of xa_store() (Salah Triki)
- pinctrl: meson: define the pull up/down resistor value as 60 kOhm (Martin Blumenstingl)
- book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n (Ritesh Harjani)
- ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() (Chenyuan Yang)
- drm: Add valid clones check (Jessica Zhang)
- drm/panel-edp: Add Starry 116KHD024006 (Douglas Anderson)
- drm/buddy: fix issue that force_merge cannot free all roots (Lin Cao)
- drm/atomic: clarify the rules around drm_atomic_state->allow_modeset (Simona Vetter)
- drm/xe: Reject BO eviction if BO is bound to current VM (Oak Zeng)
- drm/xe/sa: Always call drm_suballoc_manager_fini() (Michal Wajdeczko)
- wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan event (Ching-Te Ku)
- drm/xe: Do not attempt to bootstrap VF in execlists mode (Maarten Lankhorst)
- drm/xe: Move suballocator init to after display init (Maarten Lankhorst)
- wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation (P Praneesh)
- drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE (Zhi Wang)
- drm: bridge: adv7511: fill stream capabilities (Olivier Moysan)
- wifi: ath12k: Fix end offset bit definition in monitor ring descriptor (P Praneesh)
- wifi: ath12k: Fetch regdb.bin file from board-2.bin (Aaradhana Sahu)
- wifi: ath9k: return by of_get_mac_address (Rosen Penev)
- drm/xe/pf: Reset GuC VF config when unprovisioning critical resource (Michal Wajdeczko)
- accel/qaic: Mask out SR-IOV PCI resources (Youssef Samir)
- wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override (Nicolas Escande)
- regulator: ad5398: Add device tree support (Isaac Scott)
- spi: zynqmp-gqspi: Always acknowledge interrupts (Sean Anderson)
- wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet (Ping-Ke Shih)
- wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate (Bitterblue
Smith)
- wifi: rtl8xxxu: retry firmware download on error (Soeren Moch)
- clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation (Lad Prabhakar)
- perf/amd/ibs: Fix ->config to sample period calculation for OP PMU (Ravi Bangoria)
- perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt (Ravi Bangoria)
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Sudeep Holla)
- bpftool: Fix readlink usage in get_fd_type (Viktor Malik)
- bpf: Use kallsyms to find the function name of a struct_ops's stub function (Martin Kafai Lau)
- drm/ast: Find VBIOS mode from regular display size (Thomas Zimmermann)
- dm vdo: use a short static string for thread name prefix (Matthew Sakai)
- dm vdo indexer: prevent unterminated string warning (Chung Chung)
- irqchip/riscv-aplic: Add support for hart indexes (Vladimir Kondratiev)
- ASoC: rt722-sdca: Add some missing readable registers (Charles Keepax)
- ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode (Cezary Rojewski)
- arm64: zynqmp: add clock-output-names property in clock nodes (Naman Trivedi Manojbhai)
- HID: usbkbd: Fix the bit shift number for LED_KANA (Junan)
- wifi: ath12k: Avoid napi_sync() before napi_enable() (Avula Sri Charan)
- scsi: st: Restore some drive settings after reset (Kai Mäkisara)
- net/mana: fix warning in the writer of client oob (Konstantin Taranov)
- drm/xe/relay: Don't use GFP_KERNEL for new transactions (Michal Wajdeczko)
- ice: count combined queues using Rx/Tx count (Michal Swiatkowski)
- perf: Avoid the read if the count is already updated (Peter Zijlstra)
- rcu: fix header guard for rcu_all_qs() (Ankur Arora)
- rcu: handle unstable rdp in rcu_read_unlock_strict() (Ankur Arora)
- rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Ankur Arora)
- ice: treat dyn_allowed only as suggestion (Michal Swiatkowski)
- ice: init flow director before RDMA (Michal Swiatkowski)
- bridge: mdb: Allow replace of a host-joined group (Petr Machata)
- net: flush_backlog() small changes (Eric Dumazet)
- r8169: don't scan PHY addresses > 0 (Heiner Kallweit)
- ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only (Geert Uytterhoeven)
- vxlan: Annotate FDB data races (Ido Schimmel) [Orabug: 38094879] {CVE-2025-38037}
- cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Dhananjay Ugwekar) [Orabug:
38094888] {CVE-2025-38038}
- tools: ynl-gen: don't output external constants (Jakub Kicinski)
- eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when adding unicast addrs
(Alexander Duyck)
- drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0 (Cristian Ciocaltea)
- media: qcom: camss: Add default case in vfe_src_pad_code (Depeng Shao)
- media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available (Depeng Shao)
- f2fs: introduce f2fs_base_attr for global sysfs entries (Jaegeuk Kim)
- hwmon: (xgene-hwmon) use appropriate type for the latency value (Andrey Vatoropin)
- tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (Len Brown)
- net: page_pool: avoid false positive warning if NAPI was never added (Jakub Kicinski)
- clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs (Jordan Crouse)
- wifi: rtw89: call power_on ahead before selecting firmware (Ping-Ke Shih)
- wifi: rtw89: fw: validate multi-firmware header before accessing (Ping-Ke Shih)
- wifi: rtw89: fw: validate multi-firmware header before getting its size (Ping-Ke Shih)
- wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang (Ching-Te Ku)
- wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU (Bitterblue Smith)
- wifi: rtw88: Fix download_firmware_validate() for RTL8814AU (Bitterblue Smith)
- ext4: remove writable userspace mappings before truncating page cache (Zhang Yi)
- ext4: don't write back data before punch hole in nojournal mode (Zhang Yi)
- leds: trigger: netdev: Configure LED blink interval for HW offload (Marek Vasut)
- pstore: Change kmsg_bytes storage size to u32 (Kees Cook)
- iio: adc: ad7944: don't use storagebits for sizing (David Lechner)
- r8152: add vendor/device ID pair for Dell Alienware AW1022z (Aleksander Jan Bajkowski)
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Kuniyuki Iwashima)
- arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src
(Athira Rajeev)
- powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Gaurav Batra)
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Gaurav Batra)
- net: fec: Refactor MAC reset to function (Csókás Bence)
- wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx (Emmanuel Grumbach)
- wifi: mac80211: remove misplaced drv_mgd_complete_tx() call (Johannes Berg)
- wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() (Johannes Berg)
- wifi: iwlwifi: don't warn during reprobe (Miri Korenblit)
- wifi: iwlwifi: use correct IMR dump variable (Johannes Berg)
- mptcp: pm: userspace: flags: clearer msg if no remote addr (Matthieu Baerts)
- wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV (P Praneesh)
- xfrm: prevent high SEQ input in non-ESN mode (Leon Romanovsky)
- drm/v3d: Add clock handling (Stefan Wahren)
- net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (William Tu)
- net/mlx5e: reduce rep rxq depth to 256 for ECPF (William Tu)
- net/mlx5e: set the tx_queue_len for pfifo_fast (William Tu)
- net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Alexei Lazar)
- net/mlx5: XDP, Enable TX side XDP multi-buffer support (Alexei Lazar)
- scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() (Chaohai Chen)
- drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() (Alex Deucher)
- drm/amdgpu: enlarge the VBIOS binary size limit (Morris Zhang)
- drm/amdgpu: Use active umc info from discovery (Lijo Lazar)
- drm/amd/display: Populate register address for dentist for dcn401 (Dillon Varone)
- drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It (Austin Zheng)
- drm/amd/display: Increase block_sequence array size (Joshua Aberback) [Orabug: 38095164]
{CVE-2025-38080}
- drm/amd/display: Initial psr_version with correct setting (Tom Chung)
- drm/amd/display: Update CR AUX RD interval interpretation (George Shen)
- Revert "drm/amd/display: Exit idle optimizations before attempt to access PHY" (Brandon Syu)
- drm/amd/display: Support multiple options during psr entry. (Martin Tsai)
- drm/amd/pm: Skip P2S load for SMU v13.0.12 (Asad Kamal)
- drm/amdgpu: reset psp->cmd to NULL after releasing the buffer (Jiang Liu)
- drm/amd/display: Don't try AUX transactions on disconnected link (Ilya Bakoulin)
- drm/amd/display: pass calculated dram_speed_mts to dml2 (Charlene Liu)
- drm/amdgpu: Set snoop bit for SDMA for MI series (Harish Kasiviswanathan)
- drm/amdkfd: fix missing L2 cache info in topology (Eric Huang)
- drm/amdgpu/mes11: fix set_hw_resources_1 calculation (Alex Deucher)
- net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Huacai Chen)
- soundwire: cadence_master: set frame shape and divider based on actual clk freq (Bard Liao)
- soundwire: amd: change the soundwire wake enable/disable sequence (Vijendar Mukunda)
- phy: exynos5-usbdrd: fix EDS distribution tuning (gs101) (André Draszik)
- phy: core: don't require set_mode() callback for phy_get_mode() to work (Dmitry Baryshkov)
- phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and ROPLL_REF (Damon Ding)
- pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down (Claudiu Beznea)
- serial: sh-sci: Update the suspend/resume support (Claudiu Beznea)
- sched: Reduce the default slice to avoid tasks getting an extra tick (Zihan Zhou)
- x86/traps: Cleanup and robustify decode_bug() (Peter Zijlstra)
- x86/ibt: Handle FineIBT in handle_cfi_failure() (Peter Zijlstra)
- drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set (Shuicheng Lin)
- drm/xe/debugfs: fixed the return value of wedged_mode_set (Xin Wang)
- clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate (Krzysztof Kozlowski)
- clk: qcom: ipq5018: allow it to be bulid on arm32 (Karl Chan)
- drm/xe: Fix xe_tile_init_noalloc() error propagation (Lucas De Marchi)
- drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init() (Lucas De Marchi)
- net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Kees Cook)
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Sakari Ailus)
- media: i2c: imx219: Correct the minimum vblanking value (David Plowman)
- kunit: tool: Use qboot on QEMU x86_64 (Brendan Jackman)
- smack: Revert "smackfs: Added check catlen" (Konstantin Andreev)
- smack: recognize ipv4 CIPSO w/o categories (Konstantin Andreev)
- pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map (Valentin Caron)
- ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() (Kuninori Morimoto)
- ASoC: tas2764: Power up/down amp on mute ops (Hector Martin)
- ASoC: tas2764: Mark SW_RESET as volatile (Hector Martin)
- ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG (Hector Martin)
- ASoC: ops: Enforce platform maximum on initial value (Martin Povišer)
- firmware: xilinx: Dont send linux address to get fpga config get status (Siva Durga Prasad
Paladugu)
- firmware: arm_ffa: Handle the presence of host partition in the partition info (Sudeep Holla)
- firmware: arm_ffa: Reject higher major version as incompatible (Sudeep Holla)
- net/mlx5: Apply rate-limiting to high temperature warning (Shahar Shitrit)
- net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Shahar Shitrit)
- media: test-drivers: vivid: don't call schedule in loop (Hans Verkuil)
- irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base (Andrew Jones)
- hrtimers: Replace hrtimer_clock_to_base_table with switch-case (Andy Shevchenko)
- vxlan: Join / leave MC group after remote changes (Petr Machata)
- ACPI: HED: Always initialize before evged (Xiaofei Tan)
- PCI: Fix old_size lower bound in calculate_iosize() too (Ilpo Järvinen)
- eth: mlx4: don't try to complete XDP frames in netpoll (Jakub Kicinski)
- bpf: copy_verifier_state() should copy 'loop_entry' field (Eduard Zingerman) [Orabug: 38095018]
{CVE-2025-38060}
- bpf: don't do clean_live_states when state->loop_entry->branches > 0 (Eduard Zingerman)
- can: c_can: Use of_property_present() to test existence of DT property (Krzysztof Kozlowski)
- pmdomain: imx: gpcv2: use proper helper for property detection (Ahmad Fatoum)
- RDMA/core: Fix best page size finding when it can cross SG entries (Michael Margolin)
- serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (Alexis Lothoré) [Orabug:
38094901] {CVE-2025-38040}
- drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink (Harry
Wentland)
- Revert "drm/amd/display: Request HW cursor on DCN3.2 with SubVP" (Leo Zeng)
- drm/amd/display: Read LTTPR ALPM caps during link cap retrieval (George Shen)
- drm/amd/display: Fix BT2020 YCbCr limited/full range input (Ilya Bakoulin)
- drm/amd/display: Guard against setting dispclk low when active (Nicholas Kazlauskas)
- drm/amd/display: Add support for disconnected eDP streams (Harry Vanzylldejong)
- drm/amd/pm: Fetch current power limit from PMFW (Lijo Lazar)
- irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Anup Patel)
- eeprom: ee1004: Check chip before probing (Eddie James)
- mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs (Chris Morgan)
- i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) (Frank Li)
- EDAC/ie31200: work around false positive build warning (Arnd Bergmann)
- power: supply: axp20x_battery: Update temp sensor for AXP717 from device tree (Chris Morgan)
- net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer)
[Orabug: 38095024] {CVE-2025-38061}
- wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU (Kuan-Chung Chen)
- wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware (Ping-Ke Shih)
- wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32() (Ping-Ke Shih)
- wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() (Ping-Ke Shih)
- wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 (Bitterblue Smith)
- wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU (Bitterblue Smith)
- wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU (Bitterblue Smith)
- PCI: epf-mhi: Update device ID for SA8775P (Mrinmay Sarkar)
- clocksource: mips-gic-timer: Enable counter when CPUs start (Paul Burton)
- MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core (Paul Burton)
- genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jason Gunthorpe)
[Orabug: 38095031] {CVE-2025-38062}
- x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op() (Uros Bizjak)
- drm/amdgpu: remove all KFD fences from the BO on release (Christian König)
- MIPS: Use arch specific syscall name match function (Bibo Mao)
- drm/xe/oa: Ensure that polled read returns latest data (Umesh Nerlige Ramappa)
- net: ipv6: Init tunnel link-netns before registering dev (Xiao Liang)
- crypto: skcipher - Zap type in crypto_alloc_sync_skcipher (Herbert Xu)
- crypto: ahash - Set default reqsize from ahash_alg (Herbert Xu)
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)
- net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Patrisious Haddad)
- scsi: scsi_debug: First fixes for tapes (Kai Mäkisara)
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Jinliang Zheng) [Orabug: 38095038]
{CVE-2025-38063}
- libbpf: Fix out-of-bound read (Nandakumar Edamana)
- loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize (Christoph Hellwig)
- net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Jianbo Liu)
- media: tc358746: improve calculation of the D-PHY timing registers (Matthias Fend)
- media: adv7180: Disable test-pattern control on adv7180 (Niklas Söderlund)
- cpuidle: menu: Avoid discarding useful information (Rafael J. Wysocki)
- vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines (Konstantin Shkolnyy)
- x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long)
- ASoC: mediatek: mt8188: Add reference for dmic clocks (Nícolas F R A Prado)
- ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile (Nícolas F R A Prado)
- drm/amd/display: Fix mismatch type comparison (Navid Assadian)
- drm/amd/display: fix dcn4x init failed (Charlene Liu)
- drm/amd/display: handle max_downscale_src_width fail check (Yihan Zhu)
- x86/build: Fix broken copy command in genimage.sh when making isoimage (Nir Lichtman)
- Octeontx2-af: RPM: Register driver with PCI subsys IDs (Hariprasad Kelam)
- bpf: Search and add kfuncs in struct_ops prologue and epilogue (Amery Hung)
- soc: ti: k3-socinfo: Do not use syscon helper to build regmap (Andrew Davis)
- wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band (Ramasamy Kaliappan)
- bonding: report duplicate MAC address in all situations (Hangbin Liu)
- net: xgene-v2: remove incorrect ACPI_PTR annotation (Arnd Bergmann)
- net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only (Eric Woudstra)
- leds: pwm-multicolor: Add check for fwnode_property_read_u32 (Yuanjun Gong)
- drm/xe: xe_gen_wa_oob: replace program_invocation_short_name (Daniel Gomez)
- drm/amdkfd: KFD release_work possible circular locking (Philip Yang)
- pinctrl: sophgo: avoid to modify untouched bit when setting cv1800 pinconf (Inochi Amaoto)
- selftests/net: have gro.sh -t return a correct exit code (Kevin Krakauer)
- net/mlx5: Avoid report two health errors on same syndrome (Moshe Shemesh)
- drm/xe/pf: Create a link between PF and VF devices (K V P Satyanarayana)
- drm/xe/vf: Retry sending MMIO request to GUC on timeout error (K V P Satyanarayana)
- firmware: arm_ffa: Set dma_mask for ffa devices (Viresh Kumar) [Orabug: 38094925]
{CVE-2025-38043}
- PCI: brcmstb: Add a softdep to MIP MSI-X driver (Stanimir Varbanov)
- PCI: brcmstb: Expand inbound window size up to 64GB (Stanimir Varbanov)
- wifi: ath12k: Report proper tx completion status to mac80211 (Vinith Kumar R)
- soc: apple: rtkit: Implement OSLog buffers properly (Hector Martin)
- soc: apple: rtkit: Use high prio work queue (Janne Grunau)
- perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters (Rob Herring)
- fpga: altera-cvp: Increase credit timeout (Kuhanh Murugasen Krishnan)
- drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence (AngeloGioacchino Del Regno)
- ARM: at91: pm: fix at91_suspend_finish for ZQ calibration (Li Bin)
- hwmon: (gpio-fan) Add missing mutex locks (Alexander Stein)
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Breno Leitao)
- clk: imx8mp: inform CCF of maximum frequency of clocks (Ahmad Fatoum)
- media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value (Ricardo Ribalda)
- media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Ricardo Ribalda)
- ublk: complete command synchronously on error (Caleb Sander)
- block: mark bounce buffering as incompatible with integrity (Christoph Hellwig)
- drm/rockchip: vop2: Add uv swap for cluster window (Andy Yan)
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Kuniyuki Iwashima)
- scsi: logging: Fix scsi_logging_level bounds (Nicolas Bouchinet)
- ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 (Maciej S. Szmigiero)
- perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type (Saket Kumar Bhaskar)
- net: pktgen: fix mpls maximum labels list parsing (Peter Seiderer)
- media: imx335: Set vblank immediately (Paul Elder)
- iommufd: Disallow allocating nested parent domain with fault ID (Yi Liu)
- ublk: enforce ublks_max only for unprivileged devices (Uday Shankar)
- dpll: Add an assertion to check freq_supported_num (Jiasheng Jiang)
- net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 (Andrei Botila)
- net: ethernet: ti: cpsw_new: populate netdev of_node (Alexander Sverdlin)
- rcu: Fix get_state_synchronize_rcu_full() GP-start detection (Paul E. McKenney)
- pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" (Artur Weber)
- media: cx231xx: set device_caps for 417 (Hans Verkuil) [Orabug: 38094934] {CVE-2025-38044}
- perf/core: Clean up perf_try_init_event() (Peter Zijlstra)
- drm/amd/display: Request HW cursor on DCN3.2 with SubVP (Aric Cyr)
- drm/amd/display: Fix p-state type when p-state is unsupported (Dillon Varone)
- drm/amd/display: Fix DMUB reset sequence for DCN401 (Dillon Varone)
- drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination (George Shen)
- drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35 (Nicholas Kazlauskas)
- drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c (Victor Lu)
- remoteproc: qcom_wcnss: Handle platforms with only single power domain (Matti Lehtimäki)
- blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei)
- net: phylink: use pl->link_interface in phylink_expects_phy() (Choong Yong Liang)
- drm/gem: Test for imported GEM buffers with helper (Thomas Zimmermann)
- orangefs: Do not truncate file size (Matthew Wilcox) [Orabug: 38095056] {CVE-2025-38065}
- soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables (AngeloGioacchino Del Regno)
- dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [Orabug:
38095063] {CVE-2025-38066}
- usb: xhci: set page size to the xHCI-supported size (Niklas Neronin)
- media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() (Markus Elfring)
- ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 (Svyatoslav Ryhel)
- soc: samsung: include linux/array_size.h where needed (Arnd Bergmann)
- drm/xe: Retry BO allocation (Matthew Brost)
- drm/xe: Nuke VM's mapping upon close (Matthew Brost)
- ieee802154: ca8210: Use proper setters and getters for bitwise types (Andy Shevchenko)
- rtc: ds1307: stop disabling alarms on probe (Alexandre Belloni)
- tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() (Eric Dumazet)
- ALSA: seq: Improve data consistency at polling (Takashi Iwai)
- powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 (Andreas Schwab)
- arm64: tegra: Resize aperture for the IGX PCIe C5 slot (Jonathan Hunter)
- arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator (Diogo Ivo)
- drm/amdgpu: Fix missing drain retry fault the last entry (Emily Deng)
- drm/amdkfd: Set per-process flags only once cik/vi (Harish Kasiviswanathan)
- drm/amdkfd: Set per-process flags only once for gfx9/10/11/12 (Harish Kasiviswanathan)
- crypto: mxs-dcp - Only set OTP_KEY bit for OTP key (Sven Schwermer)
- crypto: lzo - Fix compression buffer overrun (Herbert Xu) [Orabug: 38095079] {CVE-2025-38068}
- misc: pci_endpoint_test: Give disabled BARs a distinct error code (Niklas Cassel)
- PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops (Christian Bruel)
[Orabug: 38095087] {CVE-2025-38069}
- watchdog: aspeed: Update bootstatus handling (Chin-Ting Kuo)
- cpufreq: tegra186: Share policy per cluster (Aaron Kling)
- iommu/amd/pgtbl_v2: Improve error handling (Vasant Hegde)
- coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t (Levi Yun)
- badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable < 0 (Coly Li)
- ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() (Alexey Klimov)
- auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" (Andy
Shevchenko)
- gfs2: Check for empty queue in run_queue (Andreas Gruenbacher)
- drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch (Leon Huang)
- drm/amd/display: not abort link train when bw is low (Peichen Huang)
- drm/amd/display: calculate the remain segments for all pipes (Zhikai Zhai)
- drm/amd/display: remove minimum Dispclk and apply oem panel timing. (Charlene Liu)
- ipv6: save dontfrag in cork (Willem de Bruijn)
- wifi: cfg80211: allow IR in 20 MHz configurations (Anjaneyulu)
- wifi: mac80211_hwsim: Fix MLD address translation (Ilan Peer)
- wifi: mac80211: fix warning on disconnect during failed ML reconf (Johannes Berg)
- wifi: iwlwifi: fix the ECKV UEFI variable name (Emmanuel Grumbach)
- wifi: iwlwifi: mark Br device not integrated (Johannes Berg)
- wifi: iwlwifi: fix debug actions order (Johannes Berg) [Orabug: 38094942] {CVE-2025-38045}
- wifi: iwlwifi: w/a FW SMPS mode selection (Daniel Gabay)
- wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit)
- printk: Check CON_SUSPEND when unblanking a console (Marcos Paulo de Souza)
- iommu: Keep dev->iommu state consistent (Robin Murphy)
- hwmon: (dell-smm) Increment the number of fans (Kurt Borja)
- wifi: iwlwifi: mvm: fix setting the TK when associated (Avraham Stern)
- usb: xhci: Don't change the status of stalled TDs on failed Stop EP (Michał Pecio)
- mmc: sdhci: Disable SD card clock before changing parameters (Erick Shepherd)
- mmc: dw_mmc: add exynos7870 DW MMC support (Kaustabh Chakraborty)
- arm64/mm: Check PUD_TYPE_TABLE in pud_bad() (Ryan Roberts)
- arm64/mm: Check pmd_table() in pmd_trans_huge() (Ryan Roberts)
- phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the corresponding set flags are
set (Andy Yan)
- PNP: Expand length of fixup id string (Kees Cook)
- netfilter: conntrack: Bound nf_conntrack sysctl writes (Nicolas Bouchinet)
- wifi: rtw89: set force HE TB mode when connecting to 11ax AP (Dian-Syuan Yang)
- timer_list: Don't use %pK through printk() (Thomas Weißschuh)
- net: hsr: Fix PRP duplicate detection (Jaakko Karrenpalo)
- net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Jonas Karlman)
- posix-timers: Ensure that timer initialization is fully visible (Thomas Gleixner)
- posix-timers: Add cond_resched() to posix_timer_add() search loop (Eric Dumazet)
- RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Maher Sanalla)
- ext4: do not convert the unwritten extents if data writeback fails (Baokun Li)
- ext4: reject the 'data_err=abort' option in nojournal mode (Baokun Li)
- clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490 (Taniya Das)
- ASoC: sun4i-codec: support hp-det-gpios property (Ryan Walklin)
- drm/amdgpu: Update SRIOV video codec caps (David Rosca)
- drm/amdgpu/gfx11: don't read registers in mqd init (Alex Deucher)
- drm/amdgpu/gfx12: don't read registers in mqd init (Alex Deucher)
- mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check (Shree Ramamoorthy)
- pinctrl-tegra: Restore SFSEL bit when freeing pins (Prathamesh Shete)
- xen: Add support for XenServer 6.1 platform device (Frediano Ziglio)
- net/smc: use the correct ndev to find pnetid by pnetid table (Guangguan Wang)
- dm: restrict dm device size to 2^63-512 bytes (Mikulas Patocka)
- crypto: octeontx2 - suppress auth failure screaming due to negative tests (Shashank Gupta)
- kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf (Masahiro Yamada)
- kbuild: fix argument parsing in scripts/config (Seyediman Seyedarab)
- bpf: Allow pre-ordering for bpf cgroup progs (Yonghong Song)
- ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect (Nícolas F R A Prado)
- ASoC: pcm6240: Drop bogus code handling IRQ as GPIO (Linus Walleij)
- spi: spi-mux: Fix coverity issue, unchecked return value (Sergio Perez Gonzalez)
- erofs: initialize decompression early (Gao Xiang)
- thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer (Mika Westerberg)
- objtool: Fix error handling inconsistencies in check() (Josh Poimboeuf)
- rtc: rv3032: fix EERD location (Alexandre Belloni)
- tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() (Ilpo Järvinen)
- jbd2: do not try to recover wiped journal (Jan Kara)
- PCI: dwc: Use resource start as ioremap() input in dw_pcie_pme_turn_off() (Frank Li)
- bpf: Return prog btf_id without capable check (Mykyta Yatsenko)
- vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson)
- scsi: st: ERASE does not change tape location (Kai Mäkisara)
- scsi: st: Tighten the page format heuristics with MODE SELECT (Kai Mäkisara)
- hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure (Al Viro)
- ext4: reorder capability check last (Christian Göttsche)
- riscv: Call secondary mmu notifier when flushing the tlb (Alexandre Ghiti)
- bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shantiprasad Shettar)
- wifi: mwifiex: Fix HT40 bandwidth issue. (Jeff Chen)
- um: Update min_low_pfn to match changes in uml_reserved (Tiwei Bie)
- um: Store full CSGSFS and SS register from mcontext (Benjamin Berg)
- clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug (Nick Hu)
- dlm: make tcp still work in multi-link env (Heming Zhao)
- s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() (Heiko Carstens)
- i3c: master: svc: Fix missing STOP for master request (Stanley Chu)
- drm/amdgpu: adjust drm_firmware_drivers_only() handling (Alex Deucher)
- drm/amd/display: Guard against setting dispclk low for dcn31x (Jing Zhou)
- drm/amdgpu: release xcp_mgr on exit (Flora Cui)
- blk-cgroup: improve policy registration error handling (Chen Linxuan)
- btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Filipe Manana)
- btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() (Filipe Manana)
- btrfs: fix non-empty delayed iputs list on unmount due to async workers (Filipe Manana)
- btrfs: run btrfs_error_commit_super() early (Qu Wenruo)
- btrfs: avoid linker error in btrfs_find_create_tree_block() (Mark Harmstone)
- btrfs: make btrfs_discard_workfn() block_group ref explicit (Boris Burkov)
- i2c: pxa: fix call balance of i2c->clk handling routines (Vitalii Mordan)
- i2c: qup: Vote for interconnect bandwidth to DRAM (Stephan Gerhold)
- x86/mm: Check return value from memblock_phys_alloc_range() (Philip Redkin) [Orabug: 38095101]
{CVE-2025-38071}
- x86/microcode: Update the Intel processor flag scan check (Sohil Mehta)
- x86/smpboot: Fix INIT delay assignment for extended Intel Families (Sohil Mehta)
- x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP (Ingo Molnar)
- x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers (Thomas Huth)
- wifi: mt76: mt7925: fix fails to enter low power mode in suspend state (Quan Zhou)
- wifi: mt76: mt7925: load the appropriate CLC data based on hardware type (Ming Yen Hsieh)
- wifi: mt76: mt7996: revise TXS size (Benjamin Lin)
- wifi: mt76: mt7996: fix SER reset trigger on WED reset (Rex Lu)
- wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 (Felix Fietkau)
- cgroup/rstat: avoid disabling irqs for O(num_cpu) (Eric Dumazet)
- drm/amdgpu: Skip pcie_replay_count sysfs creation for VF (Victor Skvortsov)
- mmc: host: Wait for Vdd to settle on card power off (Erick Shepherd)
- staging: vchiq_arm: Create keep-alive thread during probe (Stefan Wahren)
- pidfs: improve multi-threaded exec and premature thread-group leader exit polling (Christian
Brauner)
- libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [Orabug: 38095109]
{CVE-2025-38072}
- ext4: on a remount, only log the ro or r/w state when it has changed (Nicolas Bretz)
- xen/pci: Do not register devices with segments >= 0x10000 (Roger Pau Monné)
- PCI: vmd: Disable MSI remapping bypass under Xen (Roger Pau Monné)
- drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12 (Jonathan Kim)
- drm/amdgpu/discovery: check ip_discovery fw file available (Flora Cui)
- pNFS/flexfiles: Report ENETDOWN as a connection error (Trond Myklebust)
- tools/build: Don't pass test log files to linker (Ian Rogers)
- r8169: disable RTL8126 ZRX-DC timeout (Chunhao Lin)
- PCI: dwc: ep: Ensure proper iteration over outbound map windows (Frank Li)
- objtool: Properly disable uaccess validation (Josh Poimboeuf)
- lockdep: Fix wait context check on softirq for PREEMPT_RT (Ryo Takakura)
- dql: Fix dql->limit value when reset. (Jing Su)
- Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama)
- Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler removal (Sean Wang)
- thermal/drivers/qoriq: Power down TMU on system suspend (Alice Guo)
- thermal/drivers/mediatek/lvts: Start sensor interrupts disabled (Nícolas F R A Prado)
- net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus (Hans-Frieder Vogt)
- net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards (Hans-Frieder Vogt)
- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (Daniel Hsu)
- ASoC: codecs: wsa883x: Correct VI sense channel mask (Krzysztof Kozlowski)
- ASoC: codecs: wsa884x: Correct VI sense channel mask (Krzysztof Kozlowski)
- spi-rockchip: Fix register out of bounds access (Luis de Arquer) [Orabug: 38095173]
{CVE-2025-38081}
- SUNRPC: rpcbind should never reset the port to the value '0' (Trond Myklebust)
- SUNRPC: rpc_clnt_set_transport() must not change the autobind setting (Trond Myklebust)
- NFSv4: Treat ENETUNREACH errors as fatal for state recovery (Trond Myklebust)
- cifs: Fix establishing NetBIOS session for SMB2+ connection (Pali Rohár)
- cifs: add validation check for the fields in smb_aces (Namjae Jeon)
- cifs: Set default Netbios RFC1001 server name to hostname in UNC (Pali Rohár)
- fbdev: core: tileblit: Implement missing margin clearing for tileblit (Zsolt Kajtar)
- fbcon: Use correct erase colour for clearing in fbcon (Zsolt Kajtar)
- fbdev: fsl-diu-fb: add missing device_remove_file() (Shixiong Ou)
- riscv: Allow NOMMU kernels to access all of RAM (Samuel Holland)
- mailbox: use error ret code of of_parse_phandle_with_args() (Tudor Ambarus)
- mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() (Sudeep Holla)
- tpm: Convert warn to dbg in tpm2_start_auth_session() (Jonathan Mcdowell)
- ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list (Diogo Ivo)
- tracing: Mark binary printing functions with __printf() attribute (Andy Shevchenko)
- iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (Yi Liu)
- arm64: Add support for HIP09 Spectre-BHB mitigation (Jinqian Yang)
- SUNRPC: Don't allow waiting for exiting tasks (Trond Myklebust)
- NFS: Don't allow waiting for exiting tasks (Trond Myklebust)
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Trond Myklebust)
- io_uring/msg: initialise msg request opcode (Pavel Begunkov)
- exfat: call bh_read in get_block only when necessary (Sungjong Seo)
- fuse: Return EPERM rather than ENOSYS from link() (Matt Johnston)
- smb: client: Store original IO parameters and prevent zero IO sizes (Zhaolong Wang)
- cifs: Fix negotiate retry functionality (Pali Rohár)
- cifs: Fix querying and creating MF symlinks over SMB1 (Pali Rohár)
- cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES (Pali Rohár)
- s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Tony Krowiak)
- x86/fred: Fix system hang during S4 resume with FRED enabled (Xin Li) [Orabug: 38094951]
{CVE-2025-38047}
- kconfig: merge_config: use an empty file as initfile (Daniel Gomez)
- samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora (Haoran Jiang)
- bpf: fix possible endless loop in BPF map iteration (Brandon Kammerdiener)
- io_uring: don't duplicate flushing in io_req_post_cqe (Pavel Begunkov)
- block: fix race between set_blocksize and read paths (Darrick J. Wong) [Orabug: 38095117]
{CVE-2025-38073}
- selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure (Ihor Solodrai)
- drm/amdgpu: Allow P2P access through XGMI (Felix Kuehling)
- drm/amd/display: Enable urgent latency adjustment on DCN35 (Nicholas Susanto)
- fs/ext4: use sleeping version of sb_find_get_block() (Davidlohr Bueso)
- fs/jbd2: use sleeping version of __find_get_block() (Davidlohr Bueso)
- fs/ocfs2: use sleeping version of __find_get_block() (Davidlohr Bueso)
- fs/buffer: use sleeping version of __find_get_block() (Davidlohr Bueso)
- fs/buffer: introduce sleeping flavors for pagecache lookups (Davidlohr Bueso)
- fs/buffer: split locking for pagecache lookups (Davidlohr Bueso)
- ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler)
- dma-mapping: Fix warning reported for missing prototype (Balbir Singh)
- net: enetc: refactor bulk flipping of RX buffers to separate function (Vladimir Oltean)
- vhost_task: fix vhost_task_create() documentation (Stefano Garzarella)
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Gao Xu)
- dma-mapping: avoid potential unused data compilation warning (Marek Szyprowski)
- mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type (Hans de Goede)
- intel_th: avoid using deprecated page->mapping, index fields (Lorenzo Stoakes)
- dma/mapping.c: dev_dbg support for dma_addressing_limited (Balbir Singh)
- virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN (Zhongqiu Han) [Orabug:
38094958] {CVE-2025-38048}
- scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices (Manish Pandey)
- scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [Orabug: 38095134]
{CVE-2025-38075}
- nvmem: qfprom: switch to 4-byte aligned reads (Dmitry Baryshkov)
- nvmem: core: update raw_len if the bit reading is required (Dmitry Baryshkov)
- nvmem: core: verify cell's raw_len (Dmitry Baryshkov)
- nvmem: core: fix bit offsets of more than one byte (Dmitry Baryshkov)
- nvmem: rockchip-otp: add rk3576 variant data (Heiko Stuebner)
- nvmem: rockchip-otp: Move read-offset into variant-data (Heiko Stuebner)
- cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Pengyu Luo)
- phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Move IRQ request in probe (Claudiu Beznea)
- i2c: designware: Fix an error handling path in i2c_dw_pci_probe() (Christophe Jaillet)
- i2c: designware: Use temporary variable for struct device (Andy Shevchenko)
- drm/amd/display: Defer BW-optimization-blocked DRR adjustments (John Olender)
- drm/amd/display: Correct timing_adjust_pending flag setting. (Zhongwei)
- drm/amd/display: Do not enable replay when vtotal update is pending. (Sung-Huai Wang)
- drm/amd/display: Configure DTBCLK_P with OPTC only for dcn401 (Dillon Varone)
- LTS version: v6.12.30 (Jack Vogel)
- drm/amdgpu: fix pm notifier handling (Alex Deucher)
- phy: tegra: xusb: remove a stray unlock (Dan Carpenter)
- usb: typec: ucsi: displayport: Fix deadlock (Andrei Kuchynski) [Orabug: 37977018]
{CVE-2025-37967}
- drm/tiny: panel-mipi-dbi: Use drm_client_setup_with_fourcc() (Fabio Estevam)
- drm/panel-mipi-dbi: Run DRM default client setup (Thomas Zimmermann)
- drm/fbdev-dma: Support struct drm_driver.fbdev_probe (Thomas Zimmermann)
- Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [Orabug: 37844459]
{CVE-2025-22102}
- iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug:
37977026] {CVE-2025-37968}
- accel/ivpu: Fix fw log printing (Jacek Lawrynowicz)
- accel/ivpu: Refactor functions in ivpu_fw_log.c (Jacek Lawrynowicz)
- accel/ivpu: Reset fw log on cold boot (Tomasz Rusinowicz)
- accel/ivpu: Rename ivpu_log_level to fw_log_level (Jacek Lawrynowicz)
- mm/page_alloc: fix race condition in unaccepted memory handling (Kirill A. Shutemov) [Orabug:
38094767] {CVE-2025-38008}
- drm/xe/gsc: do not flush the GSC worker from the reset path (Daniele Ceraolo Spurio)
- CIFS: New mount option for cifs.upcall namespace resolution (Ritvik Budhiraja)
- dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Shuai Xue) [Orabug: 38094790]
{CVE-2025-38014}
- dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe (Shuai Xue)
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Shuai Xue) [Orabug:
38094793] {CVE-2025-38015}
- dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call (Shuai Xue)
- dmaengine: idxd: Add missing cleanups in cleanup internals (Shuai Xue)
- dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals (Shuai Xue)
- dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups (Shuai Xue)
- dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines (Shuai Xue)
- dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs (Shuai Xue)
- dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy
(Yemike Abhilash Chandra)
- dmaengine: ti: k3-udma: Add missing locking (Ronald Wahl) [Orabug: 38094756] {CVE-2025-38005}
- mm: userfaultfd: correct dirty flags set for both present and swap pte (Barry Song)
- net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor)
- ring-buffer: Fix persistent buffer when commit page is the reader page (Steven Rostedt)
- wifi: mt76: disable napi on driver removal (Fedor Pchelkin) [Orabug: 38094770] {CVE-2025-38009}
- tpm: Mask TPM RC in tpm2_start_auth_session() (Jarkko Sakkinen)
- spi: tegra114: Use value to check for invalid delays (Aaron Kling)
- smb: client: fix memory leak during error handling for POSIX mkdir (Jethro Donaldson)
- scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Steve Siwinski)
- phy: renesas: rcar-gen3-usb2: Set timing registers only once (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind (Claudiu Beznea)
- phy: Fix error handling in tegra_xusb_port_init (Ma Ke)
- phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (Wayne Chang) [Orabug:
38094777] {CVE-2025-38010}
- tracing: samples: Initialize trace_array_printk() with the correct function (Steven Rostedt)
- ftrace: Fix preemption accounting for stacktrace filter command (Donglin Peng)
- ftrace: Fix preemption accounting for stacktrace trigger command (Donglin Peng)
- kbuild: Disable -Wdefault-const-init-unsafe (Nathan Chancellor)
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Michael Kelley)
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Michael Kelley)
- arm64: dts: rockchip: Remove overdrive-mode OPPs from RK3588J SoC dtsi (Dragan Simic)
- arm64: dts: amlogic: dreambox: fix missing clkc_audio node (Christian Hewitt)
- hv_netvsc: Remove rmsg_pgcnt (Michael Kelley)
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Michael Kelley)
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Michael Kelley)
- dma-buf: insert memory barrier before updating num_fences (Hyejeong Choi)
- ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera (Nicolas Chauvet)
- ALSA: usb-audio: Add sample rate quirk for Audioengine D1 (Christian Heusel)
- ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() (Xu Wang)
- ACPI: PPTT: Fix processor subtable walk (Jeremy Linton)
- gpio: pca953x: fix IRQ storm on system wake up (Emanuele Ghidoli)
- MAINTAINERS: Update Alexey Makhalov's email address (Alexey Makhalov)
- drm/amd/display: Avoid flooding unnecessary info messages (Wayne Lin)
- drm/amd/display: Correct the reply value when AUX write incomplete (Wayne Lin)
- drm/amdgpu: csa unmap use uninterruptible lock (Philip Yang) [Orabug: 38094779] {CVE-2025-38011}
- drm/amdgpu: fix incorrect MALL size for GFX1151 (Tim Huang)
- Revert "drm/amd/display: Hardware cursor changes color when switched to software cursor" (Melissa
Wen)
- btrfs: add back warning for mount option commit values exceeding 300 (Kyoji Ogasawara)
- btrfs: fix folio leak in submit_one_async_extent() (Boris Burkov)
- btrfs: fix discard worker infinite loop after disabling discard (Filipe Manana)
- LoongArch: uprobes: Remove redundant code about resume_era (Tiezhu Yang)
- LoongArch: uprobes: Remove user_{en,dis}able_single_step() (Tiezhu Yang)
- LoongArch: Fix MAX_REG_OFFSET calculation (Huacai Chen)
- LoongArch: Save and restore CSR.CNTC for hibernation (Huacai Chen)
- LoongArch: Move __arch_cpu_idle() to .cpuidle.text section (Huacai Chen)
- LoongArch: Prevent cond_resched() occurring within kernel-fpu (Tianyang Zhang)
- HID: bpf: abort dispatch if device destroyed (Rongrong) [Orabug: 38094796] {CVE-2025-38016}
- udf: Make sure i_lenExtents is uptodate on inode eviction (Jan Kara)
- sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Tejun Heo) [Orabug:
38094786] {CVE-2025-38012}
- dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" (Nathan Lynch)
- NFSv4/pnfs: Reset the layout state after a layoutreturn (Trond Myklebust)
- tsnep: fix timestamping with a stacked DSA driver (Gerhard Engleder)
- net/tls: fix kernel panic when alloc_page failed (Pengtao He) [Orabug: 38094802]
{CVE-2025-38018}
- mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ido Schimmel) [Orabug:
38094804] {CVE-2025-38019}
- wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request (Kees Cook) [Orabug:
38094788] {CVE-2025-38013}
- octeontx2-pf: Do not reallocate all ntuple filters (Subbaraya Sundeep)
- octeontx2-af: Fix CGX Receive counters (Hariprasad Kelam)
- net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability (Bc-Bocun Chen)
- octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy (Subbaraya Sundeep)
- netlink: specs: tc: all actions are indexed arrays (Jakub Kicinski)
- netlink: specs: tc: fix a couple of attribute names (Jakub Kicinski)
- drm/xe: Save CTX_TIMESTAMP mmio value instead of LRC value (Umesh Nerlige Ramappa)
- regulator: max20086: fix invalid memory access (Cosmin Tanislav) [Orabug: 38094833]
{CVE-2025-38027}
- qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() (Abdun Nihaal)
- net/mlx5e: Disable MACsec offload for uplink representor profile (Carolina Jubran) [Orabug:
38094808] {CVE-2025-38020}
- vsock/test: Fix occasional failure in SIOCOUTQ tests (Konstantin Shkolnyy)
- net: dsa: b53: prevent standalone from trying to forward to other ports (Jonas Gorski)
- ALSA: sh: SND_AICA should depend on SH_DMA_API (Geert Uytterhoeven)
- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable (Keith Busch)
- nvme-pci: make nvme_pci_npages_prp() __always_inline (Kees Cook)
- net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING (Vladimir Oltean)
- net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Mathieu Othacehe)
- ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info (Takashi Iwai)
- ALSA: seq: Fix delivery of UMP events to group ports (Takashi Iwai)
- net: mctp: Ensure keys maintain only one ref to corresponding dev (Andrew Jeffery)
- tests/ncdevmem: Fix double-free of queue array (Cosmin Ratiu)
- selftests: ncdevmem: Switch to AF_INET6 (Stanislav Fomichev)
- selftests: ncdevmem: Make client_ip optional (Stanislav Fomichev)
- selftests: ncdevmem: Unify error handling (Stanislav Fomichev)
- selftests: ncdevmem: Separate out dmabuf provider (Stanislav Fomichev)
- selftests: ncdevmem: Redirect all non-payload output to stderr (Stanislav Fomichev)
- net: mctp: Don't access ifa_index when missing (Matt Johnston)
- mctp: no longer rely on net->dev_index_head[] (Eric Dumazet)
- tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing (Hangbin Liu)
- net_sched: Flush gso_skb list too during ->change() (Cong Wang) [Orabug: 37998128]
{CVE-2025-37992}
- Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags (Luiz Augusto von Dentz)
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Zhu Yanjun)
[Orabug: 38094813] {CVE-2025-38022}
- spi: loopback-test: Do not split 1024-byte hexdumps (Geert Uytterhoeven)
- nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094818]
{CVE-2025-38023}
- HID: uclogic: Add NULL check in uclogic_input_configured() (Henry Martin) [Orabug: 38094764]
{CVE-2025-38007}
- HID: thrustmaster: fix memory leak in thrustmaster_interrupts() (Qasim Ijaz)
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094827]
{CVE-2025-38024}
- virtio_net: ensure netdev_tx_reset_queue is called on bind xsk for tx (Koichiro Den)
- virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Koichiro Den)
- iio: chemical: sps30: use aligned_s64 for timestamp (David Lechner)
- iio: adc: ad7768-1: Fix insufficient alignment of timestamp. (Jonathan Cameron)
- xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. (Mathias Nyman)
- xhci: dbc: Improve performance by removing delay in transfer event polling. (Mathias Nyman)
- Revert "drm/amd: Stop evicting resources on APUs in suspend" (Alex Deucher)
- drm/amd: Add Suspend/Hibernate notification callback support (Mario Limonciello)
- iio: pressure: mprls0025pa: use aligned_s64 for timestamp (David Lechner)
- iio: chemical: pms7003: use aligned_s64 for timestamp (David Lechner)
- iio: adc: ad7266: Fix potential timestamp alignment issue. (Jonathan Cameron)
- KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Sean
Christopherson)
- KVM: Add member to struct kvm_gfn_range to indicate private/shared (Isaku Yamahata)
- uio_hv_generic: Fix sysfs creation path for ring buffer (Naman Jain)
- tpm: tis: Double the timeout B to 4s (Michal Suchanek)
- tracing: probes: Fix a possible race in trace_probe_log APIs (Masami Hiramatsu)
- cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks (Waiman Long)
- arm64: dts: imx8mp-var-som: Fix LDO5 shutdown causing SD card timeout (Himanshu Bhavani)
- platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection (Hans de Goede)
- platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL) (Runhua He)
- binfmt_elf: Move brk for static PIE even if ASLR disabled (Kees Cook)
- riscv: dts: sophgo: fix DMA data-width configuration for CV18xx (Ze Huang)
- drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies (Mario Limonciello)
- drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC Policies (Mario
Limonciello)
- fs/xattr.c: fix simple_xattr_list to always include security.* xattrs (Stephen Smalley)
- arm64: dts: rockchip: Assign RT5616 MCLK rate on rk3588-friendlyelec-cm3588 (Tom Vincent)
- LTS version: v6.12.29 (Jack Vogel)
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (James Morse)
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (James Morse) [Orabug:
37977004] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (James Morse) [Orabug: 37976926]
{CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (James Morse)
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (James Morse)
- arm64: insn: Add support for encoding DSB (James Morse)
- mm: page_alloc: speed up fallbacks in rmqueue_bulk() (Johannes Weiner)
- mm: page_alloc: don't steal single pages from biggest buddy (Johannes Weiner)
- Bluetooth: btmtk: Remove the resetting step before downloading the fw (Hao Qin)
- Bluetooth: btmtk: Remove resetting mt7921 before downloading the fw (Hao Qin)
- io_uring: always arm linked timeouts prior to issue (Jens Axboe)
- rust: clean Rust 1.88.0's clippy::uninlined_format_args lint (Miguel Ojeda)
- rust: allow Rust 1.87.0's clippy::ptr_eq lint (Miguel Ojeda)
- Revert "um: work around sched_yield not yielding in time-travel mode" (Christian Lamparter)
- do_umount(): add missing barrier before refcount checks in sync case (Al Viro)
- io_uring/sqpoll: Increase task_work submission batch size (Gabriel Krisman Bertazi)
- drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs (Tejas Upadhyay)
- drm/xe/tests/mocs: Update xe_force_wake_get() return handling (Himal Prasad Ghimiray)
- riscv: misaligned: enable IRQs while handling misaligned accesses (Clément Léger)
- riscv: misaligned: factorize trap handling (Clément Léger)
- nvme: unblock ctrl state transition for firmware update (Daniel Wagner)
- drm/panel: simple: Update timings for AUO G101EVN010 (Kevin Baker)
- loop: Add sanity check for read/write_iter (Lizhi Xu)
- loop: factor out a loop_assign_backing_file helper (Christoph Hellwig)
- loop: refactor queue limits updates (Christoph Hellwig)
- loop: Fix ABBA locking race (Ogawa Hirofumi)
- loop: Simplify discard granularity calc (John Garry)
- loop: Use bdev limit helpers for configuring discard (John Garry)
- riscv: misaligned: Add handling for ZCB instructions (Nylon Chen)
- MIPS: Fix MAX_REG_OFFSET (Thorsten Blum)
- iio: adc: dln2: Use aligned_s64 for timestamp (Jonathan Cameron)
- iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64 (Jonathan Cameron)
- types: Complement the aligned types with signed 64-bit one (Andy Shevchenko)
- iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer. (Jonathan Cameron)
- iio: accel: adxl367: fix setting odr for activity time update (Lothar Rubusch)
- usb: usbtmc: Fix erroneous generic_read ioctl return (Dave Penkler)
- usb: usbtmc: Fix erroneous wait_srq ioctl return (Dave Penkler)
- usb: usbtmc: Fix erroneous get_stb ioctl error returns (Dave Penkler)
- USB: usbtmc: use interruptible sleep in usbtmc_read (Oliver Neukum)
- usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015126]
{CVE-2025-37994}
- usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition (Rd Babiera)
- usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs (Lukasz Czechowski)
- usb: host: tegra: Prevent host controller crash when OTG port is used (Jim Lin)
- usb: gadget: Use get_status callback to set remote wakeup capability (Prashanth K)
- usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN (Wayne Chang)
- usb: gadget: f_ecm: Add get_status callback (Prashanth K)
- usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version (Pawel Laszczak)
- usb: cdnsp: Fix issue with resuming from L1 (Pawel Laszczak)
- usb: dwc3: gadget: Make gadget_wakeup asynchronous (Prashanth K)
- x86/microcode: Consolidate the loader enablement checking (Borislav Petkov)
- module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug:
38015131] {CVE-2025-37995}
- memblock: Accept allocated memory before use in memblock_double_array() (Tom Lendacky) [Orabug:
37976994] {CVE-2025-37960}
- clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() (Sebastian Andrzej
Siewior)
- arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap
generation (Levi Yun)
- accel/ivpu: Increase state dump msg timeout (Jacek Lawrynowicz)
- xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976934] {CVE-2025-37949}
- xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it (John Ernberg)
- smb: client: Avoid race in open_cached_dir with lease breaks (Paul Aurich) [Orabug: 37976959]
{CVE-2025-37954}
- usb: uhci-platform: Make the clock really optional (Alexey Charkov)
- drm/amdgpu/hdp7: use memcfg register to post the write for HDP flush (Alex Deucher)
- drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush (Alex Deucher)
- drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush (Alex Deucher)
- drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush (Alex Deucher)
- drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush (Alex Deucher)
- drm/amd/display: Copy AUX read reply data whenever length > 0 (Wayne Lin)
- drm/amd/display: Fix wrong handling for AUX_DEFER case (Wayne Lin)
- drm/amd/display: Remove incorrect checking in dmub aux handler (Wayne Lin)
- drm/amd/display: Fix the checking condition in dmub aux handling (Wayne Lin)
- drm/amd/display: more liberal vmin/vmax update for freesync (Aurabindo Pillai)
- drm/amd/display: Fix invalid context error in dml helper (Roman Li) [Orabug: 37977185]
{CVE-2025-37965}
- drm/amdgpu/vcn: using separate VCN1_AON_SOC offset (Ruijing Dong)
- drm/xe: Add page queue multiplier (Matthew Brost)
- drm/v3d: Add job to pending list if the reset was skipped (Maíra Canal) [Orabug: 37976942]
{CVE-2025-37951}
- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug:
37977031] {CVE-2025-37969}
- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug:
37977037] {CVE-2025-37970}
- iio: imu: inv_mpu6050: align buffer for timestamp (David Lechner)
- iio: adis16201: Correct inclinometer channel resolution (Gabriel)
- iio: adc: rockchip: Fix clock initialization sequence (Simon Xue)
- iio: adc: ad7606: fix serial register access (Angelo Dureghello)
- io_uring: ensure deferred completions are flushed for multishot (Jens Axboe)
- drm/amd/display: Shift DMUB AUX reply command if necessary (Wayne Lin)
- KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Mikhail Lobanov) [Orabug: 37976977]
{CVE-2025-37957}
- selftests/mm: fix a build failure on powerpc (Nysal Jan K.A.)
- selftests/mm: compaction_test: support platform with huge mount of memory (Feng Tang)
- mm/userfaultfd: fix uninitialized output field for -EAGAIN race (Peter Xu)
- mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976982]
{CVE-2025-37958}
- mm: fix folio_pte_batch() on XEN PV (Petr Vaněk)
- x86/mm: Eliminate window where TLB flushes may be inadvertently skipped (Dave Hansen) [Orabug:
37977013] {CVE-2025-37964}
- staging: axis-fifo: Correct handling of tx_fifo_depth for size validation (Gabriel)
- staging: axis-fifo: Remove hardware resets for user errors (Gabriel)
- staging: bcm2835-camera: Initialise dev in v4l2_dev (Dave Stevenson) [Orabug: 37977042]
{CVE-2025-37971}
- staging: iio: adc: ad7816: Correct conditional logic for store mode (Gabriel)
- rust: clean Rust 1.88.0's warning about clippy::disallowed_macros configuration (Miguel Ojeda)
- objtool/rust: add one more noreturn Rust function for Rust 1.87.0 (Miguel Ojeda)
- rust: clean Rust 1.88.0's unnecessary_transmutes lint (Miguel Ojeda)
- Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 (Aditya Garg)
- Input: synaptics - enable SMBus for HP Elitebook 850 G1 (Dmitry Torokhov)
- Input: synaptics - enable InterTouch on Dell Precision M3800 (Aditya Garg)
- Input: synaptics - enable InterTouch on Dynabook Portege X30L-G (Aditya Garg)
- Input: synaptics - enable InterTouch on Dynabook Portege X30-D (Manuel Fombuena)
- Input: xpad - fix two controller table values (Vicki Pfau)
- Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller (Lode Willems)
- Input: xpad - fix Share button on Xbox One controllers (Vicki Pfau)
- Input: mtk-pmic-keys - fix possible null pointer dereference (Gary Bisson) [Orabug: 37977044]
{CVE-2025-37972}
- Input: cyttsp5 - fix power control issue on wakeup (Mikael Gonella-Bolduc)
- Input: cyttsp5 - ensure minimum reset pulse width (Hugo Villeneuve)
- virtio-net: fix total qstat values (Jakub Kicinski)
- net: export a helper for adding up queue stats (Jakub Kicinski)
- fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready (Alexander Duyck)
- fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context (Alexander Duyck)
- fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready (Alexander Duyck)
- fbnic: Actually flush_tx instead of stalling out (Alexander Duyck)
- fbnic: Gate AXI read/write enabling on FW mailbox (Alexander Duyck)
- fbnic: Fix initialization of mailbox descriptor rings (Alexander Duyck)
- net: dsa: b53: do not set learning and unicast/multicast on up (Jonas Gorski)
- net: dsa: b53: fix learning on VLAN unaware bridges (Jonas Gorski)
- net: dsa: b53: fix toggling vlan_filtering (Jonas Gorski)
- net: dsa: b53: do not program vlans when vlan filtering is off (Jonas Gorski)
- net: dsa: b53: do not allow to configure VLAN 0 (Jonas Gorski)
- net: dsa: b53: always rejoin default untagged VLAN on bridge leave (Jonas Gorski)
- net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave (Jonas Gorski)
- net: dsa: b53: fix flushing old pvid VLAN on pvid change (Jonas Gorski)
- net: dsa: b53: fix clearing PVID of a port (Jonas Gorski)
- net: dsa: b53: keep CPU port always tagged again (Jonas Gorski)
- net: dsa: b53: allow leaky reserved multicast (Jonas Gorski)
- bpf: Scrub packet on bpf_redirect_peer (Paul Chaignon) [Orabug: 37976990] {CVE-2025-37959}
- netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015141]
{CVE-2025-37997}
- ipvs: fix uninit-value for saddr in do_output_route4 (Julian Anastasov) [Orabug: 37976996]
{CVE-2025-37961}
- erofs: ensure the extra temporary copy is valid for shortened bvecs (Gao Xiang)
- ice: use DSN instead of PCI BDF for ice_adapter index (Przemek Kitszel)
- ice: Initial support for E825C hardware in ice_adapter (Sergey Temerkhanov)
- wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping (Michael-Cy Lee)
- can: gw: fix RCU/BH usage in cgw_create_job() (Oliver Hartkopp)
- can: mcp251xfd: fix TDC setting for low data bit rates (Kelsey Maes)
- can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Antonios Salios)
[Orabug: 38015123] {CVE-2025-37993}
- net: ethernet: mtk_eth_soc: do not reset PSE when setting FE (Frank Wunderlich)
- net: ethernet: mtk_eth_soc: reset all TX queues on DMA free (Daniel Golle)
- gre: Fix again IPv6 link-local address generation. (Guillaume Nault)
- virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() (Jakub Kicinski) [Orabug:
37976969] {CVE-2025-37955}
- virtio_net: xsk: bind/unbind xsk for tx (Xuan Zhuo)
- sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 37977176] {CVE-2025-37953}
- s390/entry: Fix last breaking event handling in case of stack corruption (Heiko Carstens)
- ksmbd: fix memory leak in parse_lease_state() (Zhaolong Wang) [Orabug: 37977180]
{CVE-2025-37962}
- openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug:
38015148] {CVE-2025-37998}
- ksmbd: Fix UAF in __close_file_table_ids (Sean Heelan) [Orabug: 37976951] {CVE-2025-37952}
- ksmbd: prevent out-of-bounds stream writes by validating *pos (Norbert Szetei) [Orabug: 37976923]
{CVE-2025-37947}
- ksmbd: prevent rename with empty string (Namjae Jeon) [Orabug: 37976972] {CVE-2025-37956}
- can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls (Marc Kleine-Budde)
- can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls (Marc Kleine-Budde)
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Niklas Schnelle)
[Orabug: 37976920] {CVE-2025-37946}
- vfio/pci: Align huge faults to order (Alex Williamson)
- wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (Veerendranath
Jakkam) [Orabug: 37977046] {CVE-2025-37973}
- s390/pci: Fix missing check for zpci_create_device() error return (Niklas Schnelle) [Orabug:
37977050] {CVE-2025-37974}
- can: mcan: m_can_class_unregister(): fix order of unregistration calls (Marc Kleine-Budde)
- firmware: arm_scmi: Fix timeout checks on polling path (Cristian Marussi)
- arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2 (Wojciech Dubowik)
- Revert "btrfs: canonicalize the device path before adding it" (Qu Wenruo)
- fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() (Max Kellermann) [Orabug:
38015155] {CVE-2025-37999}
- dm: add missing unlock on in dm_keyslot_evict() (Dan Carpenter)
- mm/vmscan: wake up flushers conditionally to avoid cgroup OOM (Zeng Jingxiang) [Orabug:
37480932]
- dmaengine: idxd: Narrow the restriction on BATCH to ver. 1 only (Vinicius Costa Gomes) [Orabug:
37801355]
- uek-rpm: build the fwctl mlx5 driver on UEK (Qing Huang) [Orabug: 37810636]
- fwctl: Adapt upstream code for UEK8 (Mikhael Goikhman) [Orabug: 37810636]
- mlx5: Create an auxiliary device for fwctl_mlx5 (Saeed Mahameed) [Orabug: 37810636]
- fwctl/mlx5: Support for communicating with mlx5 fw (Saeed Mahameed) [Orabug: 37810636]
- fwctl: Add documentation (Jason Gunthorpe) [Orabug: 37810636]
- fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware (Jason Gunthorpe) [Orabug:
37810636]
- taint: Add TAINT_FWCTL (Jason Gunthorpe) [Orabug: 37810636]
- fwctl: FWCTL_INFO to return basic information about the device (Jason Gunthorpe) [Orabug:
37810636]
- fwctl: Basic ioctl dispatch for the character device (Jason Gunthorpe) [Orabug: 37810636]
- fwctl: Add basic structure for a class subsystem with a cdev (Jason Gunthorpe) [Orabug:
37810636]
- Revert "fwctl: Add basic structure for a class subsystem with a cdev" (Qing Huang) [Orabug:
37810636]
- Revert "fwctl: Basic ioctl dispatch for the character device" (Qing Huang) [Orabug: 37810636]
- Revert "fwctl: FWCTL_INFO to return basic information about the device" (Qing Huang) [Orabug:
37810636]
- Revert "fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware" (Qing Huang)
[Orabug: 37810636]
- Revert "fwctl/mlx5: Support for communicating with mlx5 fw" (Qing Huang) [Orabug: 37810636]
- Revert "mlx5: Create an auxiliary device for fwctl_mlx5" (Qing Huang) [Orabug: 37810636]
- Revert "taint: Add TAINT_FWCTL" (Qing Huang) [Orabug: 37810636]
- Revert "fwctl: Adapt code for UEK-NEXT" (Qing Huang) [Orabug: 37810636]
- Revert "fwctl/mlx5: Add INTERNAL_DEV_RES uctx capability" (Qing Huang) [Orabug: 37810636]
- Revert "fwctl: Allow up to 4k devices" (Qing Huang) [Orabug: 37810636]
- Revert "uek-rpm: build the fwctl mlx5 driver on UEK" (Qing Huang) [Orabug: 37810636]
- dmaengine: idxd: Change err messages to dbg (Jack Vogel) [Orabug: 37841831]
- PCI: Add PCI_VDEVICE_SUB helper macro (Piotr Kwapulinski) [Orabug: 37889575]
- ixgbevf: Add support for Intel(R) E610 device (Piotr Kwapulinski) [Orabug: 37889575]
- ixgbe: Enable link management in E610 device (Piotr Kwapulinski) [Orabug: 37889575]
- ixgbe: Clean up the E610 link management related code (Piotr Kwapulinski) [Orabug: 37889575]
- ixgbe: Add ixgbe_x540 multiple header inclusion protection (Piotr Kwapulinski) [Orabug:
37889575]
- ixgbe: Add support for EEPROM dump in E610 device (Piotr Kwapulinski) [Orabug: 37889575]
- ixgbe: Add support for NVM handling in E610 device (Piotr Kwapulinski) [Orabug: 37889575]
- ixgbe: Add link management support for E610 device (Piotr Kwapulinski) [Orabug: 37889575]
- ixgbe: Add support for E610 device capabilities detection (Piotr Kwapulinski) [Orabug: 37889575]
- ixgbe: Add support for E610 FW Admin Command Interface (Piotr Kwapulinski) [Orabug: 37889575]
- uek-rpm: Move the gve kernel module from extra to kernel-uek-core (Samasth Norway Ananda)
[Orabug: 37940897]
- uek-rpm/config-aarch64: Enable BT_HCIUART_BCM for RPi Bluetooth (Vijay Kumar) [Orabug: 37961540]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (Shravan Kumar Ramani) [Orabug:
37964051]
- mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [Orabug:
37964051,38037120] {CVE-2025-37866}
- mlxbf-bootctl: Support sysfs entries for RTC battery status (Xiangrong Li) [Orabug: 37964051]
- platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (Ai Chao) [Orabug:
37964051]
- uek-rpm: CONFIG_PTP_1588_CLOCK_OCP enable for OCI (Vijayendra Suman) [Orabug: 37966384]
- x86/its: Fix build errors when CONFIG_MODULES=n (Eric Biggers) [Orabug: 37970148]
- x86/its: Use dynamic thunks for indirect branches (Peter Zijlstra) [Orabug: 37970148]
- x86/ibt: Keep IBT disabled during alternative patching (Pawan Gupta) [Orabug: 37970148]
- RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad) [Orabug: 37989268]
- amd_hsmp: Increase the SMU timeout to 500ms (Vijay Kumar) [Orabug: 38000074]


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata