Commit Graph

75723 Commits

Author SHA1 Message Date
Bruce Ashfield
2adde7bee1 linux-yocto/6.6: update to v6.6.119
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    5fa4793a2d2d Linux 6.6.119
    810189546cb6 HID: core: Harden s32ton() against conversion to 0 bits
    e7e8e9b1a1b1 net: dsa: microchip: Free previously initialized ports on init failures
    3b5a6115d6ea net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
    70ad6455139e ksmbd: fix use-after-free in session logoff
    3a13454fd098 mptcp: fix duplicate reset on fastclose
    b77075c08d7e selftests: mptcp: join: properly kill background tasks
    f12f4c657617 staging: rtl8712: Remove driver using deprecated API wext
    2b9719ccad38 net: macb: fix unregister_netdev call order in macb_remove()
    a395121fe29e iio: adc: rtq6056: Correct the sign bit index
    094f10f3f290 can: rcar_canfd: Fix CAN-FD mode as default
    eecd163fa6da usb: typec: ucsi: psy: Set max current to zero when disconnected
    f02a412c0a18 usb: gadget: udc: fix use-after-free in usb_gadget_state_work
    92234ee7fc23 usb: udc: Add trace event for usb_gadget_set_state
    0722d804f7ad nfsd: Replace clamp_t in nfsd4_get_drc_mem()
    5106da73b016 bonding: check xdp prog when set bond mode
    694a354ddf98 bonding: return detailed error when loading native XDP fails
    becc488a4d86 libceph: replace BUG_ON with bounds check for map->max_osd
    ccbccfba25e9 libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
    183ad6e3b651 libceph: fix potential use-after-free in have_mon_and_osd_map()
    1c6fb1cc5035 net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
    1759edf0e688 net: dsa: microchip: common: Fix checks on irq_find_mapping()
    9d1a65cbe3ec drm/amd/display: Check NULL before accessing
    748ed1b6a2ca drm: sti: fix device leaks at component probe
    28a385af4a94 USB: serial: option: add support for Rolling RW101R-GL
    17cab1f3aefb USB: serial: ftdi_sio: add support for u-blox EVK-M101
    b75d20301703 xhci: dbgtty: fix device unregister
    da7a52bcee3f xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
    afc0e34f161c usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
    5428c75e92e4 usb: dwc3: pci: Sort out the Intel device IDs
    9dab9859b10e usb: dwc3: pci: add support for the Intel Nova Lake -S
    e3a55221f4de usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
    04a8a6393f3f usb: storage: sddr55: Reject out-of-bound new_pba
    f5b6b214db12 USB: storage: Remove subclass and protocol overrides from Novatek quirk
    cb1401b5bcc2 usb: storage: Fix memory leak in USB bulk transport
    9d86bc8b188a usb: renesas_usbhs: Fix synchronous external abort on unbind
    41434488ca71 usb: gadget: f_eem: Fix memory leak in eem_unwrap
    730c13a9701c usb: cdns3: Fix double resource release in cdns3_pci_probe
    993bfdc38428 most: usb: fix double free on late probe failure
    41ae1203c5ab serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
    ce318ec9864b mptcp: clear scheduled subflows on retransmit
    71796c91ee8e firmware: stratix10-svc: fix bug in saving controller data
    87b3d0105192 slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
    c4ba90485bfd thunderbolt: Add support for Intel Wildcat Lake
    f62ffdfb431b smb: client: fix memory leak in cifs_construct_tcon()
    4c257170c81d drivers/usb/dwc3: fix PCI parent check
    f8d1f166289f dm-verity: fix unreliable memory allocation
    5a3f3e39b187 ceph: fix crash in process_v2_sparse_read() for encrypted directories
    61089dd37ccd can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
    c952664fd54f can: sja1000: fix max irq loop handling
    9917ba597cf9 atm/fore200e: Fix possible data race in fore200e_open()
    5b88725e5ea1 ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
    b4abe6826926 ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
    231ac951faba MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
    135713cd0751 MIPS: mm: Prevent a TLB shutdown on initial uniquification
    ad70338c1b87 iio: adc: ad7280a: fix ad7280_store_balance_timer()
    a9fa254af33a iio: accel: fix ADXL355 startup race condition
    cdd4a9e98004 iio: accel: bmc150: Fix irq assumption regression
    a8f6a8256a68 iio:common:ssp_sensors: Fix an error handling path ssp_probe()
    936e082a7c07 iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
    d59a7824444e Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
    c538dae04a4c spi: bcm63xx: fix premature CS deassertion on RX-only transactions
    01511983d7b8 spi: nxp-fspi: Propagate fwnode in ACPI case as well
    5fc6f8175b8b spi: nxp-fspi: Support per spi-mem operation frequency switches
    a25cc746f7d0 spi: spi-mem: Add a new controller capability
    f1ea0e8b4a15 spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
    94b3c7558748 spi: spi-mem: Allow specifying the byte order in Octal DTR mode
    99aff13bcc13 spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
    dbb60bd12950 spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
    f29b58e974c7 mailbox: pcc: don't zero error register
    ea621f472cfe mailbox: pcc: Refactor error handling in irq handler into separate function
    5550f9021895 mailbox: mailbox-test: Fix debugfs_create_dir error checking
    826785925627 usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
    cad94b17e276 iio: st_lsm6dsx: Fixed calibrated timestamp calculation
    21f867e3da98 net: fec: do not register PPS event for PEROUT
    2648b8b51992 net: fec: do not allow enabling PPS and PEROUT simultaneously
    b332c433489e net: fec: do not update PEROUT if it is enabled
    2d8f6acf5623 net: fec: cancel perout_timer when PEROUT is disabled
    3be37c3c96b1 net: atlantic: fix fragment overflow handling in RX path
    90daa70a4d62 net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
    d25c17507e80 net: dsa: sja1105: simplify static configuration reload
    0be4d79f8a1b drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
    7fd789d6ea49 net: sxgbe: fix potential NULL dereference in sxgbe_rx()
    aa20dcff033c net/mlx5e: Fix validation logic in rate limiting
    58c411509141 net: lan966x: Fix the initialization of taprio
    30a1d3db72bc net: aquantia: Add missing descriptor cache invalidation on ATL2
    3e7442c58021 platform/x86: intel: punit_ipc: fix memory corruption
    ff45dd52bd18 net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
    fd6a1261d05d Bluetooth: SMP: Fix not generating mackey and ltk when repairing
    fe68510fc99b Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
    4ffac725154c can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
    3433680b7596 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
    1a588c40a422 can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
    e9dd83a75a72 can: kvaser_usb: leaf: Fix potential infinite loop in command parsers

(From OE-Core rev: 01535e428d4fbab6d467644339d37ff828ddfa88)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
3ad8559850 linux-yocto/6.6: update to v6.6.118
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4791134e4aeb Linux 6.6.118
    c602cc344b4b mptcp: fix a race in mptcp_pm_del_add_timer()
    19de79aaea33 mm/mempool: fix poisoning order>0 pages with HIGHMEM
    0d40c4ef4b4b mm/mempool: replace kmap_atomic() with kmap_local_page()
    f38b91f7aded HID: amd_sfh: Stop sensor before starting
    4948db9c9ca8 selftests: mptcp: join: endpoints: longer transfer
    378e6136b8c0 pmdomain: imx: Fix reference count leak in imx_gpc_remove
    a5958b1bcf4a pmdomain: imx-gpc: Convert to platform remove callback returning void
    ad120c08b89a pmdomain: arm: scmi: Fix genpd leak on provider registration failure
    7ea2ea68df08 ftrace: Fix BPF fexit with livepatch
    f01f9c348d76 crash: fix crashkernel resource shrink
    b3d24038eb77 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
    29150018bf19 maple_tree: fix tracepoint string pointers
    bf07df375d20 uio_hv_generic: Set event for all channels on the device
    fc3139d9f4c1 KVM: arm64: Check the untrusted offset in FF-A memory share
    64332afa9f76 smb: client: fix incomplete backport in cfids_invalidation_worker()
    6917e894f86f tracing/tools: Fix incorrcet short option in usage text for --threads
    952637c5b9be net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
    1ee10e90e160 ALSA: usb-audio: fix uac2 clock source at terminal parser
    5d604d40cd32 f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
    e822e902f8e6 s390/mm: Fix __ptep_rdp() inline assembly
    4e9efe0d56e7 f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi
    d0141cf6ab1f kconfig/nconf: Initialize the default locale at startup
    be46fa4de9da kconfig/mconf: Initialize the default locale at startup
    6ae0613ea6f5 net: tls: Cancel RX async resync request on rcd_delta overflow
    1bc765f0f75a selftests: net: use BASH for bareudp testing
    3ab328a0258f x86/microcode/AMD: Limit Entrysign signature checking to known generations
    5d778778b40b scsi: core: Fix a regression triggered by scsi_host_busy()
    1f8e4d6c1d20 cifs: fix typo in enable_gcm_256 module parameter
    d89ae707cfe6 bcma: don't register devices disabled in OF
    5998da5a8208 vsock: Ignore signal/timeout on connect() if already established
    7627864dc312 cifs: fix memory leak in smb3_fs_context_parse_param error path
    496d1383e441 LoongArch: Use UAPI types in ptrace UAPI header
    69e043bce09c net/mlx5: Clean up only new IRQ glue on request_irq() failure
    715d9cda646a devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
    6d9f0036d21e pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
    3b90bd8aaeb2 pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
    f0923011c126 net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
    57752d523a3f kernel.h: Move ARRAY_SIZE() to a separate header
    9bbb4afff974 platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
    3b177b2ded56 s390/ctcm: Fix double-kfree
    e2a897ad5f53 nvme-multipath: fix lockdep WARN due to partition scan work
    0b903f33c31c net: openvswitch: remove never-working support for setting nsh fields
    f8c496e20b7a net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()
    385fd7ec3214 net: dsa: hellcreek: fix missing error handling in LED registration
    2e78580e6e7d drm/tegra: Add call to put_pid()
    ddb483ce2136 mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
    9026f31a520d pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
    a620b091c4df xfrm: Prevent locally generated packets from direct output in tunnel mode
    a2b61573e6a3 xfrm: Determine inner GSO type from packet inner protocol
    b3b27876f3be drm/amd/display: Move sleep into each retry for retrieve_link_cap()
    e688c20f088e drm/amd/display: Increase DPCD read retries
    06a79f1bffe7 drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
    8b57f8127086 drm/tegra: dc: Fix reference leak in tegra_dc_couple()
    642561238c98 mptcp: do not fallback when OoO is present
    8a5d1ceef950 mptcp: decouple mptcp fastclose from tcp close
    28e4d5fd731e mptcp: avoid unneeded subflow-level drops
    d019cbb455ee mptcp: fix premature close in case of fallback
    3d513efe18a9 mptcp: fix ack generation for fallback msk
    8f9ba1a99a89 mptcp: fix race condition in mptcp_schedule_work()
    fe694895d3b7 LoongArch: Don't panic if no valid cache info for PCI
    6aa22377ef27 dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
    5ea58bb47c50 MIPS: Malta: Fix !EVA SOC-it PCI MMIO
    a6ef60898dda scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
    b343cee5df7e scsi: sg: Do not sleep in atomic context
    33f64600a120 nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
    5fe335a80548 nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
    7d1977b4ae5c nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
    d344ea1baf19 Input: pegasus-notetaker - fix potential out-of-bounds access
    ca9a08de9b29 Input: imx_sc_key - fix memory corruption on unload
    8a2d2a536c76 Input: goodix - add support for ACPI ID GDIX1003
    9cf59f4724a9 Input: cros_ec_keyb - fix an invalid memory access
    7419d8064dab Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
    00c56d55332c net: dsa: microchip: lan937x: Fix RGMII delay tuning
    ce0a3699244a be2net: pass wrb_params in case of OS2BMC
    5968bcf785c6 ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
    2a494b9e6364 smb: client: introduce close_cached_dir_locked()
    b8113c1ca469 ata: libata-scsi: Fix system suspend for a security locked drive
    037cc5058964 mptcp: Fix proto fallback detection with BPF
    2ecd37dae7a6 mptcp: Disallow MPTCP subflows from sockmap
    e65f1a2807c5 exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
    583990e7dcea shmem: fix tmpfs reconfiguration (remount) when noswap is set
    457376c6fbf0 mtdchar: fix integer overflow in read/write ioctls
    b146e0b085d9 mtd: rawnand: cadence: fix DMA device NULL pointer dereference
    49365455a63c HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
    6665fbd7730b timers: Fix NULL function pointer race in timer_shutdown_sync()
    1e89a1be4fe9 Linux 6.6.117
    0fdb596476c0 memcg: fix data-race KCSAN bug in rstats
    541e85e1c9c9 ACPI: HMAT: Remove register of memory node for generic target
    41ea28dc3c0c mm: memcg: optimize parent iteration in memcg_rstat_updated()
    6b97ad92d932 mm/memory-tier: fix abstract distance calculation overflow
    206a8665f9cc memory tiers: use default_dram_perf_ref_source in log message
    e2f7c76758be cachestat: do not flush stats in recency check
    1f45e5c84684 net: netpoll: ensure skb_pool list is always initialized
    03695541b334 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
    42d486d35a41 mm/secretmem: fix use-after-free race in fault handler
    46185cdfc9ed mm/truncate: unmap large folio on split failure
    7e239675ae51 mm/memory: do not populate page table entries beyond i_size
    fe601b70eac6 filemap: cap PTE range to be created to allowed zero fill in folio_map_range()
    e5dffca89b4a mm: memcg: restore subtree stats flushing
    68849411ce9e mm: workingset: move the stats flush into workingset_test_recent()
    1b201161f34b mm: memcg: make stats flushing threshold per-memcg
    b68fc4f792bb mm: memcg: move vmstats structs definition above flushing code
    68e727bdb68b mm: memcg: change flush_next_time to flush_last_time
    b283ba3ddc9f mm: memcg: add per-memcg zswap writeback stat
    2c3568736912 mm: memcg: add THP swap out info for anonymous reclaim
    57692c303132 scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL
    aca6f63e803e scsi: ufs: core: Add a quirk to suppress link_startup_again
    753ca4b5beff scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register
    d1f293ee8dc3 scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT
    aba8384b2311 scsi: ufs: core: Add fill_crypto_prdt variant op
    f108b6a34856 scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE
    bd77a15c3a8d scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller
    7e3bfaaf0208 scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE
    960dab23f6d4 net: stmmac: Fix accessing freed irq affinity_hint
    ef49378864bb f2fs: fix to avoid overflow while left shift operation
    c645693180a9 net: netpoll: fix incorrect refcount handling causing incorrect cleanup
    a3a476cb65a4 net: netpoll: flush skb pool during cleanup
    dc67d67a995e net: netpoll: Individualize the skb pool
    e9ab9dec36bb netpoll: remove netpoll_srcu
    94b01ef5186c mm, percpu: do not consider sleepable allocations atomic
    4c8a4f1d34ec iommufd: Don't overflow during division for dirty tracking
    066ee13f05fb btrfs: ensure no dirty metadata is written back for an fs with errors
    df1ad5de2197 drm/mediatek: Disable AFBC support on Mediatek DRM driver
    a299478ac16f Revert "perf dso: Add missed dso__put to dso__load_kcore"
    ee59d88353e8 selftests: mptcp: connect: trunc: read all recv data
    8b644440d16a selftests: mptcp: join: rm: set backup flag
    b78aae82ea75 selftests: mptcp: connect: fix fallback note due to OoO
    4e833774cdc2 pmdomain: samsung: plug potential memleak during probe
    22330f5f0052 btrfs: do not update last_log_commit when logging inode due to a new name
    4020f18436ea btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()
    4a351adbbd72 EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
    d58afbd05627 EDAC/altera: Handle OCRAM ECC enable after warm reset
    ca9f11fe0926 LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY
    2612f0e0b8dc selftests/user_events: fix type cast for write_index packed member in perf_test
    21bedc6eeb51 x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
    70f73dde0ad7 spi: Try to get ACPI GPIO IRQ earlier
    ca2bd7a717d5 smb: client: fix cifs_pick_channel when channel needs reconnect
    bfdcd67e0fcb crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
    868fc62811d3 cifs: client: fix memory leak in smb3_fs_context_parse_param
    ece3b981bb66 ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
    082b6b511432 mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
    159244b55095 mm/mm_init: fix hash table order logging in alloc_large_system_hash()
    67272c11f379 fs/proc: fix uaf in proc_readdir_de()
    ad4a84daf6f8 wifi: mac80211: reject address change while connecting
    c3cbf016a697 selftests/tracing: Run sample events to clear page cache events
    041ab9ca6e80 ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
    c6201eb32371 LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY
    f4b4146c1cf0 LoongArch: Use correct accessor to read FWPC/MWPC
    4c49fe089661 dma-mapping: benchmark: Restore padding to ensure uABI remained consistent
    b30421bc31c0 strparser: Fix signed/unsigned mismatch bug
    5746b2a0f5eb ksmbd: close accepted socket when per-IP limit rejects connection
    142b2990e64f gcov: add support for GCC 15
    29fbb3ad4018 NFSD: free copynotify stateid in nfs4_free_ol_stateid()
    e18c368d8611 KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated
    79f851a65c47 HID: uclogic: Fix potential memory leak in error path
    9e8863f3fe34 ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY
    57473eec8080 HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
    6546dd0c6ad2 ARM: dts: imx51-zii-rdu1: Fix audmux node names
    adee209bb898 arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1
    3f358a66a045 netfilter: nf_tables: reject duplicate device on updates
    dd3a38574f93 mtd: onenand: Pass correct pointer to IRQ handler
    7ce9bb0b95fc Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
    c157fa22c400 lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
    d8d79cf8c2b7 espintcp: fix skb leaks
    2e93bf719462 net: dsa: improve shutdown sequence
    ed8a77fee461 net: allow small head cache usage with large MAX_SKB_FRAGS values
    52b44d8c6534 net: fix NULL pointer dereference in l3mdev_l3_rcv
    e91ecc2e30b4 irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops
    64b12dca2b0a bpf: account for current allocated stack depth in widen_imprecise_scalars()
    baa61dcaa50b bpf: Add bpf_prog_run_data_pointers()
    872c04306b02 acpi/hmat: Fix lockdep warning for hmem_register_resource()
    6015ad3b210e base/node / ACPI: Enumerate node access class for 'struct access_coordinate'
    356d4d79dc18 acpi: numa: Add setting of generic port system locality attributes
    e507071185fb acpi: Break out nesting for hmat_parse_locality()
    1fec7730896f acpi: numa: Add genport target allocation to the HMAT parsing
    d0e2cbe79e5d acpi: numa: Create enum for memory_target access coordinates indexing
    994c51070c95 base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates'
    519af3fa0263 acpi, hmat: calculate abstract distance with HMAT
    7e9fa5cdcc4f acpi, hmat: refactor hmat_register_target_initiators()
    9c8ffc4f91a8 memory tiering: add abstract distance calculation algorithms management
    57f607c11296 ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
    c2d65ce1d035 NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
    0ad6db4438ef NFS: sysfs: fix leak when nfs_client kobject add fails
    b6137b4906f4 pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS
    45ea5a60adbc NFS: enable nconnect for RDMA
    275369632f6a pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
    b5de1eb5bc20 ASoC: tas2781: fix getting the wrong device number
    b5df9e06eed3 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
    aaaa8531896f ASoC: codecs: va-macro: fix resource leak in probe error path
    7fd65a5f9701 ASoC: cs4271: Fix regulator leak on probe failure
    34294379ea4e regulator: fixed: fix GPIO descriptor leak on register failure
    83475ce43fa7 acpi,srat: Fix incorrect device handle check for Generic Initiator
    25d6e7663932 cifs: Fix uncached read into ITER_KVEC iterator
    581c65fd0b0e cifs: stop writeback extension when change of size is detected
    ad141380d768 Bluetooth: L2CAP: export l2cap_chan_hold for modules
    335266ea359e ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
    4470b8bb9a8e ACPI: CPPC: Perform fast check switch only for online CPUs
    a851ebcdc2e2 ACPI: CPPC: Check _CPC validity for only the online CPUs
    f6a7808cadde hsr: Fix supervision frame sending on HSRv0
    873f985f3bdf virtio-net: fix incorrect flags recording in big mode
    14aba9bd583e net_sched: limit try_bulk_dequeue_skb() batches
    aa9f57c077f2 net/mlx5e: Fix potentially misleading debug message
    df953d41a579 net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
    29f62b3d4466 net/mlx5e: Fix maxrate wraparound in threshold between units
    a676a296af65 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
    31e4aa93e2e5 net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
    a6d1bb631af9 net_sched: act_connmark: use RCU in tcf_connmark_dump()
    4cd8d755c7d4 af_unix: Initialise scc_index in unix_add_edge().
    f01f007c9cc9 wifi: mac80211: skip rate verification for not captured PSDUs
    2a5c3396f6d9 net: mdio: fix resource leak in mdiobus_register_device()
    c92dbf85627b tipc: Fix use-after-free in tipc_mon_reinit_self().
    e9800b8b77f2 net/handshake: Fix memory leak in tls_handshake_accept()
    e5afb55625ac net/smc: fix mismatch between CLC header and proposal
    ed71f801249d sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
    a5059df18988 Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
    2a9ff4086c26 Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
    c24ac6cfe4f9 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
    1c28c1e1522c Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
    2927ff643607 Bluetooth: MGMT: cancel mesh send timer when hdev removed
    65c74343da8e net: fec: correct rx_bytes statistic for the case SHIFT16 is set
    d6f93bba3d7d selftests: net: local_termination: Wait for interfaces to come up
    8085b6cdb0e0 wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()
    4fbfef04d957 ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
    e671f9bb9780 smb/server: fix possible refcount leak in smb2_sess_setup()
    63d8706a2c09 smb/server: fix possible memory leak in smb2_read()
    113de3341728 HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel
    a74a8be2652b NFS: check if suid/sgid was cleared after a write as needed
    dad9857bbe64 HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
    df712250acdd NFS4: Fix state renewals missing after boot
    1243e396148a drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
    21dbe5fa22df drm/amd/pm: Disable MCLK switching on SI at high pixel clocks
    fdf2ea31ce40 riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
    7a635df5ef26 RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors
    ea5b1db5569c compiler_types: Move unused static inline functions warning to W=2
    36bc0502c2de drm/amd: Fix suspend failure with secure display TA
    e5a4b227bc6e iommufd: Make vfio_compat's unmap succeed if the range is already empty
    d6ab7ef52aaf smb: client: fix refcount leak in smb2_set_path_attr
    c63dc33e3794 drm/i915: Fix conversion between clock ticks and nanoseconds
    3dec22bde207 drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
    c6fc325d8434 selftests: netdevsim: set test timeout to 10 minutes
    885827bc1518 riscv: stacktrace: fix backtracing through exceptions
    8fa7f51d3725 drm/amd/display: Fix black screen with HDMI outputs
    f10a6f51984b drm/amdgpu: Fix function header names in amdgpu_connectors.c
    d96aa80f5f2e extcon: adc-jack: Cleanup wakeup source only if it was enabled
    3335f9054365 scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers
    62b013354dcf lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
    946dec89c417 virtio-net: fix received length check in big packets
    cb52d9c86d70 smb: client: fix potential UAF in smb2_close_cached_fid()
    018179e955a8 smb: client: validate change notify buffer before copy
    24bef9ca5830 x86/microcode/AMD: Add more known models to entry sign checking
    193b2c5e5443 rtc: rx8025: fix incorrect register reference
    5f7350ff2b17 Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
    70150b9443dd drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
    8bcadabc3c12 drm/amd/display: Enable mst when it's detected but yet to be initialized
    e70d2e1f876a tracing: Fix memory leaks in create_field_var()
    1b29b6898ed8 net: bridge: fix MST static key usage
    3b60ce334c1c net: bridge: fix use-after-free due to MST port state bypass
    5a5d2f772775 lan966x: Fix sleeping in atomic context
    8cb474cd65bf net: dsa: microchip: Fix reserved multicast address table programming
    8bf679ebbecd net/mlx5e: SHAMPO, Fix skb size check for 64K pages
    96d20e36c6df net/mlx5e: Fix return value in case of module EEPROM read error
    9b37f576d2c0 net/mlx5e: Use extack in get module eeprom by page callback
    c729f0049561 wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup
    7ee2eb85755d bnxt_en: Fix a possible memory leak in bnxt_ptp_init
    dd03780c29f8 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
    2ad229bc61ba sctp: Hold sock lock while iterating over address list
    c9119f243d9c sctp: Prevent TOCTOU out-of-bounds write
    48d161b3c815 sctp: Hold RCU read lock while iterating over address list
    1ac40030b4e9 net: dsa: b53: stop reading ARL entries if search is done
    32e43d361bac net: dsa: b53: fix enabling ip multicast
    c95c731efee0 net: dsa: b53: fix resetting speed and pause on forced link
    ddf9fc39548e net: vlan: sync VLAN features with lower device
    d8a729fd4427 selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh
    f680e2eb8c21 netdevsim: add Makefile for selftests
    efad140b6284 selftests/net: use destination options instead of hop-by-hop
    28f2d15e27af selftests/net: fix GRO coalesce test and add ext header coalesce tests
    deff55caa564 selftests/net: fix out-of-order delivery of FIN in gro:tcp test
    cb5a4c715521 net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
    f44b8bbb1b7e Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2()
    779f83a91d4f Bluetooth: hci_event: validate skb length for unknown CC opcode
    59b9ed956c7d riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
    f34ba22989da riscv: stacktrace: Disable KASAN checks for non-current tasks
    19682d62547c riscv: Improve exception and system call latency
    d4187ec26410 net: libwx: fix device bus LAN ID
    6d7567cc0bc0 Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
    994ec06b7ba1 media: uvcvideo: Use heuristic to find stream entity
    85866cbd5edb ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
    ad71f31b62a4 ceph: refactor wake_up_bit() pattern of calling
    34353a0cd39b ceph: add checking of wait_for_completion_killable() return value
    068e002bc0b6 ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
    32df8c333071 kbuild: uapi: Strip comments before size type check
    05a378912231 rtc: pcf2127: fix watchdog interrupt mask on pcf2131
    86df8ade88d2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
    81e829f699ee tools: lib: thermal: use pkg-config to locate libnl3
    fe6d58972d3d tools: lib: thermal: don't preserve owner in install
    fa7d0c8b2350 tools bitmap: Add missing asm-generic/bitsperlong.h include
    a1a09685874e ACPI: property: Return present device nodes only on fwnode interface
    6a1e5fa2d1fd scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS
    ece711f11c0d 9p: sysfs_init: don't hardcode error to ENOMEM
    4f3926f060d7 cpufreq: tegra186: Initialize all cores to max frequencies
    cdd2b67dec44 9p: fix /sys/fs/9p/caches overwriting itself
    0ab9ef66a89e NTB: epf: Allow arbitrary BAR mapping
    751734d4cc7f clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
    824b92e6d24a clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register
    7235f9969d9e clk: at91: clk-master: Add check for divide by 3
    544f8254c1fb ARM: at91: pm: save and restore ACR during PLL disable/enable
    9f9110995873 rtc: pcf2127: clear minute/second interrupt
    30e5bbcb98a9 clk: sunxi-ng: sun6i-rtc: Add A523 specifics
    3c5e016d2328 um: Fix help message for ssl-non-raw
    c34d6dd9ab35 fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
    da98803bccaf btrfs: mark dirty extent range for out of bound prealloc extents
    352056b6b669 RDMA/hns: Fix wrong WQE data when QP wraps around
    d4837e720ff0 RDMA/hns: Fix the modification of max_send_sge
    bc8c9b8f6387 RDMA/irdma: Set irdma_cq cq_num field during CQ create
    d559ddd687ed RDMA/irdma: Remove unused struct irdma_cq fields
    cd7e3bb8e200 RDMA/irdma: Fix SD index calculation
    57d352e198de ACPICA: Update dsmethod.c to get rid of unused variable warning
    f1d84a3d6521 char: misc: restrict the dynamic range to exclude reserved minors
    d2993a7e98eb ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
    c3e4a6de0d1f smb: client: transport: avoid reconnects triggered by pending task work
    a024cf4d9f84 ksmbd: use sock_create_kern interface to create kernel socket
    e81e6d6d99b1 ftrace: Fix softlockup in ftrace_module_enable
    e09a096104fc orangefs: fix xattr related buffer overflow...
    df7517553995 page_pool: Clamp pool size to max 16K pages
    2648c810a25f 6pack: drop redundant locking and refcounting
    e1806387c7f9 exfat: limit log print for IO error
    3a18f8ae062e ALSA: usb-audio: add mono main switch to Presonus S1824c
    799cd62cbcc3 Bluetooth: bcsp: receive data only if registered
    03371c021818 Bluetooth: SCO: Fix UAF on sco_conn_free
    c9d6e46c2fe8 Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames
    7eab99ffe36e net: macb: avoid dealing with endianness in macb_set_hwaddr()
    deb3d014d98c net/mlx5e: Don't query FEC statistics when FEC is disabled
    2bccb8072b28 ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007
    91a5cec5b9d6 ASoC: stm32: sai: manage context in set_sysclk callback
    93f8d67ef8b5 amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
    d932fb292f83 ext4: increase IO priority of fastcommit
    199ab7b43c5e fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
    7ec8ac9f73d4 accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
    f6108a8164c4 accel/habanalabs/gaudi2: read preboot status after recovering from dirty state
    a7d72a80e24a accel/habanalabs: return ENOMEM if less than requested pages were pinned
    193e269df045 scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate
    88d6a9ea0688 accel/habanalabs/gaudi2: fix BMON disable configuration
    e30995ccd9b8 scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
    31116de5ee11 net: bridge: Install FDB for bridge MAC on VLAN 0
    eacfd08b26a0 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
    e30618333212 NFSv4.1: fix mount hang after CREATE_SESSION failure
    4e2f5f7e07f9 NFSv4: handle ERR_GRACE on delegation recalls
    1b65fb8723ed drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream
    7f097986b342 wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256
    a5cb7c982210 remoteproc: qcom: q6v5: Avoid handling handover twice
    221952c07b58 PCI/PM: Skip resuming to D0 if device is disconnected
    b679c74e5598 vfio: return -ENOTTY for unsupported device feature
    5561974e62e0 sparc64: fix prototypes of reads[bwl]()
    d170582b4bd4 sparc/module: Add R_SPARC_UA64 relocation handling
    1810b2fd7375 PCI: cadence: Check for the existence of cdns_pcie::ops before using it
    0b02dc2b4e78 r8169: set EEE speed down ratio to 1
    4e21e047a25c net: intel: fm10k: Fix parameter idx set but not used
    c9e7bb702b80 wifi: ath10k: Fix connection after GTK rekeying
    df0a0f229f73 iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
    4cacebe3dca9 net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
    855cd3a0c4d5 net: phy: clear link parameters on admin link down
    c5fa9fed6272 ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup()
    2a9575a37218 jfs: fix uninitialized waitqueue in transaction manager
    ce054a366c54 jfs: Verify inode mode when loading from disk
    ec2b3f83b4c8 ipv6: np->rxpmtu race annotation
    765f8816d395 f2fs: fix infinite loop in __insert_extent_tree()
    97e01c389402 usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
    8b21ba5da050 usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
    2611313d3bf4 allow finish_no_open(file, ERR_PTR(-E...))
    3c0725aceb14 scsi: lpfc: Define size of debugfs entry for xri rebalancing
    1169f4f03fb1 scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
    a0eb7e8f8266 scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
    88ac95b17a03 scsi: ufs: core: Disable timestamp functionality if not supported
    58b8f44a64ed selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
    0df3da8888fa drm/amdgpu: reject gang submissions under SRIOV
    a7efc2b0359c HID: i2c-hid: Resolve touchpad issues on Dell systems during S4
    0d0be8117eda ethernet: Extend device_get_mac_address() to use NVMEM
    7613c06ffa89 page_pool: always add GFP_NOWARN for ATOMIC allocations
    fe3f8b671618 drm/amd/display: Disable VRR on DCE 6
    ced20843717e drm/amd/display: Fix DVI-D/HDMI adapters
    eeb8ea76c912 drm/amd: Avoid evicting resources at S5
    19618f480cda drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
    a8a9f053e1d4 ALSA: serial-generic: remove shared static buffer
    59efb432c318 wifi: mt76: mt7996: Temporarily disable EPCS
    bf0b265fcb95 wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device
    81f9b19af302 net/cls_cgroup: Fix task_get_classid() during qdisc run
    160b03e57e62 crypto: caam - double the entropy delay interval for retry
    01be9fad74e4 PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify()
    27598de36043 crypto: sun8i-ce - remove channel timeout field
    a3d9de6ac510 watchdog: s3c2410_wdt: Fix max_timeout being calculated larger
    705c5a2f5517 HID: asus: add Z13 folio to generic group for multitouch to work
    c018a87942bf udp_tunnel: use netdev_warn() instead of netdev_WARN()
    ee957d6c0886 selftests: Replace sleep with slowwait
    518319c98097 eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
    c85be890e057 selftests: Disable dad for ipv6 in fcnal-test.sh
    2ddd6bf6b671 x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
    1a6ffaeddf76 netfilter: nf_reject: don't reply to icmp error messages
    b94b57fd7eb9 selftests: traceroute: Use require_command()
    5df7e8bc4d23 media: redrat3: use int type to store negative error codes
    d15b3e4107b4 selftests: net: replace sleeps in fcnal-test with waits
    f5781438ba04 net: sh_eth: Disable WoL if system can not suspend
    cedcc490241b phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
    f0cc4b6c443a phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet
    cf6781d97c69 phy: cadence: cdns-dphy: Enable lower resolutions in dphy
    9406ec01a077 wifi: mac80211: Fix HE capabilities element check
    17249b2a6527 ntfs3: pretend $Extend records as regular files
    b96d08ce3f72 scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes
    30220dda83f8 net: phy: marvell: Fix 88e1510 downshift counter errata
    5122665ca5f3 scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure
    8fefca6a12e6 scsi: ufs: host: mediatek: Enhance recovery on resume failure
    5bde774bbfbf media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer
    f32fe18efc95 media: ov08x40: Fix the horizontal flip control
    81015dd217a4 char: Use list_del_init() in misc_deregister() to reinitialize list pointer
    d89343fce39a drm/msm: make sure to not queue up recovery more than once
    ea37884097a0 usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
    38c179c52d22 usb: gadget: f_hid: Fix zero length packet transfer
    3c66bc0acc08 drm/amdgpu: add support for cyan skillfish gpu_info
    65240044398e drm/amdgpu: don't enable SMU on cyan skillfish
    b17fe7f5a2de drm/amd: add more cyan skillfish PCI ids
    aa98b4c1f84c iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs
    44a764aec64b iommu/amd: Skip enabling command/event buffers for kdump
    a5c425011c31 smsc911x: add second read of EEPROM mac when possible corruption seen
    170bd191fa6c net: call cond_resched() less often in __release_sock()
    194a056bdc6f ALSA: usb-audio: apply quirk for MOONDROP Quark2
    56384ec84c15 media: verisilicon: Explicitly disable selection api ioctls for decoders
    98dfcb4c287b media: adv7180: Only validate format in querystd
    20e3fe278b2f media: adv7180: Do not write format to device in set_fmt
    f195ac1e3542 media: adv7180: Add missing lock in suspend callback
    7ad7e582de8e net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
    7816b60922c8 ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
    2412c6aa42fc drm/amdgpu: Allow kfd CRIU with no buffer objects
    0d629175a7ee drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
    b093c81df23f drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
    196a75590f40 dmaengine: dw-edma: Set status for callback_result
    269d69a50f21 dmaengine: mv_xor: match alloc_wc and free_wc
    bb434f67b46b dmaengine: sh: setup_xref error handling
    a3eebe03da5f ptp: Limit time setting of PTP clocks
    ffdcbb30d3cd scsi: pm8001: Use int instead of u32 to store error codes
    c1751c5fdddf crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof()
    49d9ac3af3a1 mips: lantiq: danube: rename stp node on EASY50712 reference board
    e20d0efe03ea mips: lantiq: xway: sysctrl: rename stp clock
    98654c8434c6 mips: lantiq: danube: add missing device_type in pci node
    ae51686278ce mips: lantiq: danube: add model to EASY50712 dts
    6c7de5a8957f mips: lantiq: danube: add missing properties to cpu node
    f589021c3347 drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2)
    1a91de0fdbdf media: fix uninitialized symbol warnings
    3e283f38792e drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
    1de2e48b1f33 drm/amdkfd: fix vram allocation failure for a special case
    a7953bf98522 fuse: zero initialize inode private data
    bb9b505f02e2 net: phy: fixed_phy: let fixed_phy_unregister free the phy_device
    4aa5acd88fb4 remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper
    742f354124aa extcon: adc-jack: Fix wakeup source leaks on device unbind
    22c24c7c5e81 scsi: pm80xx: Fix race condition caused by static variables
    bbfe60eba369 scsi: mpi3mr: Fix controller init failure on fault during queue creation
    df64a4d69d3d rds: Fix endianness annotation for RDS_MPATH_HASH
    dcaec33d8deb ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
    31014c39d6d7 PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
    9b8dfaea5cea net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
    63fbe0e64132 net: stmmac: Correctly handle Rx checksum offload errors
    c1d2b289b9fc net: When removing nexthops, don't call synchronize_net if it is not necessary
    7d4ad49ba0c1 char: misc: Does not request module for miscdevice with dynamic minor
    4a61f3eb8913 char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor
    9001552e105f usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
    9e2c2d3e7209 iio: adc: imx93_adc: load calibrated values even calibration failed
    8bbda8e00cde iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
    fdd587be5936 drm/amdkfd: Handle lack of READ permissions in SVM mapping
    2b5128caee83 drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
    8231e8011846 media: imon: make send_packet() more robust
    f28dde240160 net: ipv6: fix field-spanning memcpy warning in AH output
    b34fc4fe9a85 scsi: ufs: host: mediatek: Fix invalid access in vccqx handling
    2d5551640dde scsi: ufs: host: mediatek: Change reset sequence for improved stability
    83a26fa18d47 scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change
    137dea7d7d00 scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration
    68245d8fe2fa bridge: Redirect to backup port when port is administratively down
    86e4faf48539 s390/pci: Use pci_uevent_ers() in PCI recovery
    8a54de9609d8 powerpc/eeh: Use result of error_detected() in uevent
    74e9ec803b6d thunderbolt: Use is_pciehp instead of is_hotplug_bridge
    7d87c41061e8 ice: Don't use %pK through printk or tracepoints
    bbfcf5db8c08 net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
    7a500e923127 x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
    79a27f405d02 media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR
    07f3f65682a9 drm/tidss: Set crtc modesetting parameters with adjusted mode
    1f950a449a4d drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST
    be9fc98a4198 drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value
    105ed683b400 drm/tidss: Use the crtc_* timings when programming the HW
    3f964091abb0 media: amphion: Delete v4l2_fh synchronously in .release()
    48bb7f8ab984 media: pci: ivtv: Don't create fake v4l2_fh
    b567d1c40c70 drm/amdkfd: return -ENOTTY for unsupported IOCTLs
    153353da60d0 wifi: rtw88: sdio: use indirect IO for device registers before power-on
    da9d28d79342 selftests/net: Ensure assert() triggers in psock_tpacket.c
    517abdc57cfb selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
    d7f4354d3de9 PCI: Disable MSI on RDC PCI to PCIe bridges
    ce054c331334 drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
    cb02acebd3d0 drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
    a0a44b1e0873 drm/amd/pm: Use cached metrics data on arcturus
    d4b2c3a3bc01 drm/amd/pm: Use cached metrics data on aldebaran
    f17f0100f702 drm/amd/display: update dpp/disp clock from smu clock table
    8c05069ce157 drm/amd/display: add more cyan skillfish devices
    2728e38ac27e drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration
    acb3c23080ca drm/amd/display: ensure committing streams is seamless
    f6bea0255090 mfd: da9063: Split chip variant reading in two bus transactions
    830c39871f16 mfd: madera: Work around false-positive -Wininitialized warning
    d9e793728021 mfd: stmpe-i2c: Add missing MODULE_LICENSE
    784f62e68a6c mfd: stmpe: Remove IRQ domain upon removal
    5ebb9bc9a662 tools/power x86_energy_perf_policy: Prefer driver HWP limits
    941ac2bcb1ac tools/power x86_energy_perf_policy: Enhance HWP enable
    91d267901aab tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
    5b69364cbef1 tools/cpupower: Fix incorrect size in cpuidle_state_disable()
    efa623350136 hwmon: (dell-smm) Add support for Dell OptiPlex 7040
    52d4d91db6f8 hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex
    1721c2938d00 uprobe: Do not emulate/sstep original instruction when ip is changed
    1a8ca4b9b3e3 nvme: Use non zero KATO for persistent discovery connections
    9c55db583707 bpf: Clear pfmemalloc flag when freeing all fragments
    d8d03481351e riscv: bpf: Fix uninitialized symbol 'retval_off'
    e1729523759c blk-cgroup: fix possible deadlock while configuring policy
    8613bed1f283 clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
    f3c6ae35a7e8 spi: rpc-if: Add resume support for RZ/G3E
    4aced32596ea futex: Don't leak robust_list pointer on exec race
    b8961542d2ae cpuidle: Fail cpuidle device registration if there is one already
    4b78d57b7dd3 bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21
    c77fcb6cc6f0 power: supply: qcom_battmgr: handle charging state change notifications
    877d4689e546 pmdomain: apple: Add "apple,t8103-pmgr-pwrstate"
    5aeb8550e8c3 tools/cpupower: fix error return value in cpupower_write_sysfs()
    7d0e0563256f video: backlight: lp855x_bl: Set correct EPROM start for LP8556
    edf3b828871d bpf: Do not limit bpf_cgroup_from_id to current's namespace
    25f4bf1f7979 nvme-fc: use lock accessing port_state and rport state
    601ed47b2363 nvmet-fc: avoid scheduling association deletion twice
    5ca9367da5be tee: allow a driver to allocate a tee_device without a pool
    12296895e962 ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
    8c1c0ac31949 mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
    46fc8ad19ce9 ARM: tegra: transformer-20: fix audio-codec interrupt
    0c9a3917a61e ARM: tegra: transformer-20: add missing magnetometer interrupt
    ca7c230fff41 soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups
    c7117d25e3db arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106
    e60b141dfc93 irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller
    552659030ab8 hwmon: sy7636a: add alias
    8161d9b78915 power: supply: sbs-charger: Support multiple devices
    0babd39ceb5d pinctrl: keembay: release allocated memory in detach path
    4f8d061ac497 hwmon: (sbtsi_temp) AMD CPU extended temperature range support
    5617c8165cf5 hwmon: (k10temp) Add device ID for Strix Halo
    44729682b694 hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
    3c4c5184631a power: supply: qcom_battmgr: add OOI chemistry
    dcba7b98dcb7 ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
    338f490a04c6 ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
    3e121479021d irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
    fea338c7e46f selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh
    233317cc29dd arc: Fix __fls() const-foldability via __builtin_clzl()
    8d6791c480f2 cpufreq/longhaul: handle NULL policy in longhaul_exit
    854241f8e4ff selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
    d45325fc6a73 irqchip/sifive-plic: Respect mask state when setting affinity
    0f7149ac7691 memstick: Add timeout to prevent indefinite waiting
    4cfc3b63ea09 mmc: host: renesas_sdhi: Fix the actual clock
    fa7c118e0b83 pinctrl: single: fix bias pull up/down handling in pin_config_set
    667789d3e29f bpf: Don't use %pK through printk
    8c8f8f7f84e8 spi: loopback-test: Don't use %pK through printk
    3f274df8526e soc: qcom: smem: Fix endian-unaware access of num_entries
    2a0db48dd8c2 soc: aspeed: socinfo: Add AST27xx silicon IDs
    fc1141a530df usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
    b63c061be622 s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
    b61ed8005bd3 drm/sysfb: Do not dereference NULL pointer in plane reset
    b5493968ac7a drm/sched: Fix race in drm_sched_entity_select_rq()
    7088465f1081 s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
    a2ae01c674e1 sched/fair: Use all little CPUs for CPU-bound workloads
    4ced68c43a15 sched/pelt: Avoid underestimation of task utilization
    fe04654ecb65 net: phy: dp83867: Disable EEE support as not implemented
    a60be7339353 cpuidle: governors: menu: Select polling state in some more cases
    58c347aa881d cpuidle: governors: menu: Rearrange main loop in menu_select()
    6e43d5f0e593 s390/pci: Restore IRQ unconditionally for the zPCI device
    49888b3b457b mptcp: fix MSG_PEEK stream corruption
    a5a896f8315d drm/mediatek: Fix device use-after-free on unbind
    2664bfd8969d regmap: slimbus: fix bus_context pointer in regmap init calls
    482b568e8680 block: make REQ_OP_ZONE_OPEN a write operation
    37089e2258d6 block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
    02a16148f842 drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
    e69d5d11ed0c drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
    224932faac5c drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
    ca5dc7ef4c1a sfc: fix potential memory leak in efx_mae_process_mport()
    25191342d576 net: hns3: return error code when function fails
    1cd109318d69 drm/etnaviv: fix flush sequence logic
    83312609ff32 Bluetooth: hci_core: Fix tracking of periodic advertisement
    e3ba2b1f7d1a Bluetooth: ISO: Fix another instance of dst_type handling
    48d31ac5af5f Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00
    504554dbcbb4 Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset
    932c0a4f77ac Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
    9a579d6a3951 usbnet: Prevents free active kevent
    5d8f28a8b50e libbpf: Fix powerpc's stack register definition in bpf_tracing.h
    2e97da83839f ASoC: fsl_sai: fix bit order for DSD format
    06d711b4d620 ASoC: Intel: avs: Unprepare a stream when XRUN occurs
    0dd6474ced33 crypto: aspeed - fix double free caused by devm
    8e8bcd7b2925 crypto: aspeed-acry - Convert to platform remove callback returning void
    42f848f8e5ea bpf: Do not audit capability check in do_jit()
    5b81a79bada2 scsi: ufs: core: Initialize value of an attribute returned by uic cmd
    645114110354 bpf: Sync pending IRQ work before freeing ring buffer
    c898547ed64e ALSA: usb-audio: fix control pipe direction
    431da7f85430 drm/msm/a6xx: Fix GMU firmware parser
    ad5852941409 wifi: ath12k: free skb during idr cleanup callback
    0ec88db40ce0 wifi: ath11k: Add missing platform IDs for quirk table
    b8850b4370fa wifi: ath10k: Fix memory leak on unsupported WMI command
    1811c610653c x86/fpu: Ensure XFD state on signal delivery
    939c4e33005e smb: client: fix potential cfid UAF in smb2_query_info_compound
    6dbd3d9573e1 ASoC: qdsp6: q6asm: do not sleep while atomic
    aa826b05c68f mptcp: restore window probe
    f7e5fc50791b mptcp: drop bogus optimization in __mptcp_check_push()
    4a28d1898392 fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
    e097cdbac72e fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
    64e3175d1c8a wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
    e059b0560040 Bluetooth: rfcomm: fix modem control handling
    9ba1a7802ca9 fbdev: bitblit: bound-check glyph index in bit_putcs*
    e992faffa846 ACPI: button: Call input_free_device() on failing input device registration
    4e85246ec0d0 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
    3fe5494db5fe fbdev: atyfb: Check if pll_ops->init_pll failed
    468f78276a37 fbcon: Set fb_display[i]->mode to NULL when the mode is released
    814a55f44d8a net: usb: asix_devices: Check return value of usbnet_get_endpoints
    03524ccff698 NFSD: Fix crash in nfsd4_read_release()

(From OE-Core rev: 8af342d12598e3d7c3aca6a81ca4e16aee4b639b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
2c30acaf10 linux-yocto/6.6: update to v6.6.116
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    0a805b6ea8cda Linux 6.6.116
    63dde0eec59b4 gpio: idio-16: Define fixed direction of the GPIO lines
    92a15817f0fbd gpio: regmap: add the .fixed_direction_output configuration parameter
    38f50558b50cf gpio: regmap: Allow to allocate regmap-irq device
    ddd31f5a5ff39 bits: introduce fixed-type GENMASK_U*()
    739aa67ef147b bits: add comments and newlines to #if, #else and #endif directives
    0e660d8224d07 xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
    3aa367e6aae7a xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
    dae8555062cf0 xhci: dbc: Improve performance by removing delay in transfer event polling.
    6f126ef0117c9 xhci: dbc: Allow users to modify DbC poll interval via sysfs
    1c5cec6625a3f xhci: dbc: poll at different rate depending on data transfer activity
    afdf4f5108513 serial: sc16is7xx: remove useless enable of enhanced features
    74c8eafd42b48 serial: sc16is7xx: refactor EFR lock
    7db1a5451bcb9 serial: sc16is7xx: reorder code to remove prototype declarations
    2f7592e0bdfc6 serial: sc16is7xx: remove unused to_sc16is7xx_port macro
    39a7305e2abad selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported
    f87c246d7c1ef selftests: mptcp: disable add_addr retrans in endpoint_tests
    1f1632dd97dae mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
    4784326cb26a4 arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c
    797f15c2b15e9 btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
    93bcd360c503e btrfs: use level argument in log tree walk callback replay_one_buffer()
    ef64d81fb7ddd btrfs: always drop log root tree reference in btrfs_replay_log()
    3b838f39f4be8 btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
    fb6ceb6cde7bc btrfs: zoned: refine extent allocator hint selection
    8fabf4d56fd8f btrfs: zoned: return error from btrfs_zone_finish_endio()
    625aecafb1bd2 EDAC/mc_sysfs: Increase legacy channel support to 16
    0956cdef60de8 x86/bugs: Fix reporting of LFENCE retpoline
    077823b06f1cc x86/bugs: Report correct retbleed mitigation status
    5c63fb0b382f9 perf: Skip user unwind if the task is a kernel thread
    89fbfc799e1d5 perf: Have get_perf_callchain() return NULL if crosstask and user are set
    34b5aba8511a1 perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL
    a61ed1fb165b0 audit: record fanotify event regardless of presence of rules
    6ffa9d6618718 net/sched: sch_qfq: Fix null-deref in agg_dequeue
    e5bbb12db2c75 Linux 6.6.115
    2dc125f5da134 ksmbd: transport_ipc: validate payload size before reading handle
    2ae71c3770c39 gpio: ljca: Initialize num before accessing item in ljca_gpio_config
    bfd17b6138df0 fuse: fix livelock in synchronous file put from fuseblk workers
    c7ec75f3cbf73 fuse: allocate ff->release_args only if release is needed
    c34b09cbd6fc0 s390/cio: Update purge function to unregister the unused subchannels
    41fe20cfbcd43 x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
    bc1c6b803e14e fs/notify: call exportfs_encode_fid with s_umount
    df75bfc287029 xfs: always warn about deprecated mount options
    b89e20a365442 devcoredump: Fix circular locking dependency with devcd->mutex.
    7c691e10ca958 serial: 8250_mtk: Enable baud clock and manage in runtime PM
    a8527907f28d7 serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
    f354f7510ff0e serial: 8250_dw: handle reset control deassert error
    928a9c9b97ea2 dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
    91b2d5fcde526 tcpm: switch check for role_sw device with fw_node
    6fb8fbc0aa542 most: usb: hdm_probe: Fix calling put_device() before device initialization
    72427dc6f8752 most: usb: Fix use-after-free in hdm_disconnect
    9a297a68c3ba4 misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup
    a068cbe71c1cb mei: me: add wildcat lake P DID
    d4854eff25efb comedi: fix divide-by-zero in comedi_buf_munge()
    c055480e04561 binder: remove "invalid inc weak" check
    3a25640814ff8 x86/microcode: Fix Entrysign revision check for Zen1/Naples
    03d7e8c749428 xhci: dbc: enable back DbC in resume if it was enabled before suspend
    2c217d0e86885 usb: raw-gadget: do not limit transfer length
    cbf278c90c64a usb/core/quirks: Add Huawei ME906S to wakeup quirk
    102b9b8942e11 USB: serial: option: add Telit FN920C04 ECM compositions
    da06de8f1656f USB: serial: option: add Quectel RG255C
    7070c31465f1c USB: serial: option: add UNISOC UIS7720
    6d63703bec0c1 sched: Remove never used code in mm_cid_get()
    770b33a1a8e46 io_uring: correct __must_hold annotation in io_install_fixed_file
    5ba12858b664f gpio: ljca: Fix duplicated IRQ mapping
    7efa69e0688b5 gpio: update Intel LJCA USB GPIO driver
    d11f2156a93e3 hwmon: (sht3x) Fix error handling
    dc1ac7c1a355b RISC-V: Don't print details of CPUs disabled in DT
    00b58d2c25d10 RISC-V: Define pgprot_dmacoherent() for non-coherent devices
    c7849e8cb22a9 firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode
    d719ce9f286c4 firmware: arm_scmi: Account for failed debug initialization
    e42ec4eccebe2 spi: spi-nxp-fspi: add extra delay after dll locked
    18d1c06b72d56 selftests: mptcp: join: mark implicit tests as skipped if not supported
    c8aa3fd5b4a03 selftests: mptcp: join: mark 'flush re-add' as skipped if not supported
    5e46e4dc829e1 net: ravb: Ensure memory write completes before ringing TX doorbell
    d064092c3fc34 net: ravb: Enforce descriptor type ordering
    36838ece81545 net: usb: rtl8150: Fix frame padding
    9f2db04c21cff net: stmmac: dwmac-rk: Fix disabling set_clock_selection
    42ed0784d11ad vsock: fix lock inversion in vsock_assign_transport()
    aa6a21409dd62 ocfs2: clear extent cache after moving/defragmenting extents
    c7ae6b99c982d MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
    fa41d6f4b1382 cifs: Fix TCP_Server_Info::credits to be signed
    356c7fdf684cd can: netlink: can_changelink(): allow disabling of automatic restart
    a9da00c9cee99 ACPICA: Work around bogus -Wstringop-overread warning since GCC 11
    29d96bcc14952 Revert "cpuidle: menu: Avoid discarding useful information"
    a0c16f20d23cf gpio: 104-idio-16: Define maximum valid register address offset
    67adc5500ad7c gpio: pci-idio-16: Define maximum valid register address offset
    3373f263bb647 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
    941096f618c50 dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC
    15b80f63269d3 net: bonding: fix possible peer notify event loss or dup issue
    cb9055ba30306 sctp: avoid NULL dereference when chunk data buffer is missing
    4f32f754343a8 arm64, mm: avoid always making PTE dirty in pte_mkwrite()
    8b051d7f530e8 net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
    72328f25755ee net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ
    9d7bc56c550eb net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead
    b411759b9c1a9 selftests: net: fix server bind failure in sctp_vrf.sh
    bbcbbb9d68626 selftests/net: convert sctp_vrf.sh to run it in unique namespace
    dd2a7aba7f8d8 can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb()
    05e2c6ef4a9da dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
    050732ace1dbd net: enetc: correct the value of ENETC_RXB_TRUESIZE
    2781ca82ce8ca net: enetc: fix the deadlock of enetc_mdio_lock
    74c94df40ede9 net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush().
    6993a51388bdc rtnetlink: Allow deleting FDB entries in user namespace
    362f4c52efd05 net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size()
    550e311e1b16f Unbreak 'make tools/*' for user-space targets
    6aef39551e60a smb: server: let smb_direct_flush_send_list() invalidate a remote key first
    6ef6ac49fdf1d drivers/perf: hisi: Relax the event ID check in the framework
    99bdd0580d7f2 powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure
    6aee82d0bfeee m68k: bitops: Fix find_*_bit() signatures
    5f43ab41ddab1 lkdtm: fortify: Fix potential NULL dereference on kmalloc failure
    24cac083a76b9 hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
    cfafefcb0e1fc hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
    8c18c84ecbfa3 dlm: check for defined force value in dlm_lockspace_release
    2bb8bc99b1a7a hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
    4f40a2b3969da hfs: validate record offset in hfsplus_bmap_alloc
    a5bfb13b4f406 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
    714e70f603bee hfs: make proper initalization of struct hfs_find_data
    7870fbdce00ef hfs: clear offset and space out of valid records in b-tree node
    b1ec9faef7e36 nios2: ensure that memblock.current_limit is set when setting pfn limits
    813d3d18cfe47 exec: Fix incorrect type for ret

(From OE-Core rev: 99d8bdc07f708158cc98dfce11739e1fbaa08d31)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
7754aa3731 linux-yocto/6.6: update to v6.6.114
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4a243110dc88 Linux 6.6.114
    d060f49771b5 PCI: tegra194: Reset BARs when running in PCIe endpoint mode
    ed518734a3c1 PCI: j721e: Fix programming sequence of "strap" settings
    d763fffd4284 PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
    92b82e232b8d mm/ksm: fix flag-dropping behavior in ksm_madvise
    499089376206 ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
    65dc89d5cf40 PCI/sysfs: Ensure devices are powered for config reads (part 2)
    9c1c7edfea46 nfsd: decouple the xprtsec policy check from check_nfsd_access()
    2e0aab9ddaf1 ixgbevf: fix mailbox API compatibility by negotiating supported features
    8aebc9367911 ixgbevf: fix getting link speed data for E610 devices
    52ffb51de64f ixgbevf: Add support for Intel(R) E610 device
    6d4597351818 PCI: Add PCI_VDEVICE_SUB helper macro
    247d1fff85e0 phy: cadence: cdns-dphy: Update calibration wait time for startup state machine
    01829af7656b ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
    cebfbf40056a vfs: Don't leak disconnected dentries on umount
    f7353208c91a NFSD: Define a proc_layoutcommit for the FlexFiles layout type
    f846eacde280 fs: quota: create dedicated workqueue for quota_release_work
    d7d942c9a182 quota: remove unneeded return value of register_quota_format
    6c79b23f1c52 padata: Reset next CPU when reorder sequence wraps around
    5fb3328e927c xfs: use deferred intent items for reaping crosslinked blocks
    a4970f5087e2 iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
    353c69c7898e iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
    0af89c7e640a phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
    3594108460db phy: cdns-dphy: Store hs_clk_rate and return it
    11d10382a4df iio: imu: inv_icm42600: Simplify pm_runtime setup
    cbdd55050b78 PM: runtime: Add new devm functions
    2c3f01bb6ee4 xfs: fix log CRC mismatches between i386 and other architectures
    4245f6c66a3c xfs: rename the old_crc variable in xlog_recover_process
    c896618807a2 NFSD: Fix last write offset handling in layoutcommit
    4138321e9d41 NFSD: Minor cleanup in layoutcommit processing
    daa0ff1780c9 NFSD: Rework encoding and decoding of nfsd4_deviceid
    30a6a61c5828 nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
    a0caf1de97e1 block: fix race between set_blocksize and read paths
    8fdd0ad43977 arm64: errata: Apply workarounds for Neoverse-V3AE
    d9d3e9ff1e2a arm64: cputype: Add Neoverse-V3AE definitions
    4f5ab4a9c6ab hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
    b1ec27375dea selftests: arg_parsing: Ensure data is flushed to disk before reading.
    a0ed8ae58a83 HID: multitouch: fix name of Stylus input devices
    ef45e08141f8 HID: hid-input: only ignore 0 battery events for digitizers
    576312eb4363 ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
    d776af255d19 selftests/bpf: make arg_parsing.c more robust to crashes
    48b1d42286bf accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
    af7e3989e241 ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
    66c29d9fc1dc sched/fair: Fix pelt lost idle time detection
    3359a93f45c3 sched/balancing: Rename newidle_balance() => sched_balance_newidle()
    8942165d0c3f drm/rockchip: vop2: use correct destination rectangle height check
    025db46dbcf8 drm/amd/powerplay: Fix CIK shutdown temperature
    7a4482d59fcb drm/i915/guc: Skip communication warning on reset in progress
    b82efea81a15 ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
    1746416e885c ASoC: nau8821: Generalize helper to clear IRQ status
    ce1aa07aea2b ASoC: nau8821: Cancel jdet_work before handling jack ejection
    9e32cb91bfb3 ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
    001f1fb0e4e3 drm/bridge: lt9211: Drop check for last nibble of version register
    706ed11aa9e8 riscv: kprobes: Fix probe address validation
    06da9b0f87da nvme-multipath: Skip nr_active increments in RETRY disposition
    a22c03011dac net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
    db00e3bdf69a net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
    9c470a536556 tls: don't rely on tx_work during send()
    c61d4368197d tls: wait for pending async decryptions if tls_strp_msg_hold fails
    b9e21d676def tls: always set record_type in tls_process_cmsg
    f6c40bf4078d tls: wait for async encrypt in case of error during latter iterations of sendmsg
    f61dfccc5a3e net: tls: wait for async completion on last message
    071377a13834 tls: trim encrypted message to match the plaintext on short splice
    3dd3aa80e5af tg3: prevent use of uninitialized remote_adv and local_adv variables
    2bd8352df493 tcp: fix tcp_tso_should_defer() vs large RTT
    939a7d837167 amd-xgbe: Avoid spurious link down messages during interface toggle
    48294a67863c net/ip6_tunnel: Prevent perpetual tunnel growth
    932f7cd27905 r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
    deb6ab171fd1 doc: fix seg6_flowlabel path
    3f4a318dec64 net: dlink: handle dma_map_single() failure properly
    e3fdc2b2c61e can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
    627a7ebd8954 dax: skip read lock assertion for read-only filesystems
    d280c138e66b HID: multitouch: fix sticky fingers
    5f65c8ad8c72 usb: gadget: f_rndis: Refactor bind path to use __free()
    1cde4516295a usb: gadget: f_ncm: Refactor bind path to use __free()
    e348d18fb012 usb: gadget: f_acm: Refactor bind path to use __free()
    070f341d86cf usb: gadget: f_ecm: Refactor bind path to use __free()
    70a766743173 usb: gadget: Introduce free_usb_request helper
    167ac21abb82 usb: gadget: Store endpoint pointer in usb_request
    50c721be2cff media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
    211728b9b282 media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
    7a27f07948ef drm/exynos: exynos7_drm_decon: remove ctx->suspended
    cbbe08268a13 drm/exynos: exynos7_drm_decon: properly clear channels during bind
    98c15dc95009 drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
    fbc8589975ef drm/msm/a6xx: Fix PDC sleep sequence
    8e245d3a2ab8 drm/msm/adreno: De-spaghettify the use of memory barriers
    eb0d280c2751 eventpoll: Replace rwlock with spinlock
    f72553935a53 epoll: Remove ep_scan_ready_list() in comments
    dfacd00818ce Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1
    e19e401b059a cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
    59a6e61863e2 drm/amd: Check whether secure display TA loaded successfully
    db4bdb550ce1 drm/amdgpu: use atomic functions with memory barriers for vm fault info
    57239762aa90 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
    15c73964da9d cifs: parse_dfs_referrals: prevent oob on malformed input
    00e7da6ca640 can: gs_usb: increase max interface to U8_MAX
    be19fcf0baed can: gs_usb: gs_make_candev(): populate net_device->dev_port
    289498da343b btrfs: do not assert we found block group item when creating free space tree
    ebbf0d45be41 btrfs: fix incorrect readahead expansion length
    7c068bcc12d2 btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
    cb6039b68efa ext4: detect invalid INLINE_DATA + EXTENTS flag combination
    6e85cc404a7e ext4: wait for ongoing I/O to complete before freeing blocks
    870e14104978 jbd2: ensure that all ongoing I/O complete before freeing blocks
    f13ef730370b f2fs: fix wrong block mapping for multi-devices
    67a664eebf11 r8152: add error handling in rtl8152_driver_init
    d7dd034c1492 smb: client: Fix refcount leak for cifs_sb_tlink
    f231f248323d Linux 6.6.113
    99c704e44cab perf test stat: Avoid hybrid assumption when virtualized
    163f15370c55 writeback: Avoid excessively long inode switching times
    7594dae6cc95 writeback: Avoid softlockup when switching many inodes
    ab0d0138803c cramfs: Verify inode mode when loading from disk
    5a7602d64e1c fs: Add 'initramfs_options' to set initramfs mount options
    09d227c59d97 pid: Add a judgment for ns null in pid_nr_ns
    d47cdfddeb49 minixfs: Verify inode mode when loading from disk
    030a01fbcc42 irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume
    6d09bbbca3e5 irqchip/sifive-plic: Make use of __assign_bit()
    63c44fa29ef2 mptcp: pm: in-kernel: usable client side with C-flag
    06d82c3a1f7f selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled
    ef8a0b37f11d s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG
    1527222f3549 s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
    2c768a9d1c17 s390/bpf: Describe the frame using a struct instead of constants
    10358217e30c s390/bpf: Centralize frame offset calculations
    9b378246e7ef s390/bpf: Change seen_reg to a mask
    63d2008affae ACPI: property: Do not pass NULL handles to acpi_attach_data()
    af0ff085cd56 ACPI: property: Add code comments explaining what is going on
    156819a04732 ACPI: property: Disregard references in data-only subnode lists
    1ed161347ad9 ACPI: battery: Add synchronization between interface updates
    8f03b1bf2bcd ACPI: battery: Check for error code from devm_mutex_init() call
    e6c83bbb0119 ACPI: battery: initialize mutexes through devm_ APIs
    346975d62660 ACPI: battery: allocate driver data through devm_ APIs
    b8c7d40b4cb3 arm64: mte: Do not flag the zero page as PG_mte_tagged
    7f4f031e66ad arm64: kprobes: call set_memory_rox() for kprobe page
    ca603d157694 ipmi: Fix handling of messages with provided receive message pointer
    348121b29594 ipmi: Rework user message limit handling
    aafae78e6d79 KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2
    d0d9fa88d7ab rseq: Protect event mask against membarrier IPI
    1810b6084aea btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
    0c5ce6b6ccc2 PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release
    93b8a612db29 PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan()
    0fa2185104df misc: fastrpc: Save actual DMA size in fastrpc_map structure
    78e5fa79ed7c misc: fastrpc: Add missing dev_err newlines
    bc718d0bd87e ksmbd: add max ip connections parameter
    cd3efb93677c KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
    ad25061d1d73 mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
    1a301228c0a8 tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
    8d2a77ccefee mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
    3cb4b35687a9 mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
    d7b038045ea0 mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
    7bd4e5367d09 media: mc: Clear minor number before put device
    8c7aad767518 Squashfs: reject negative file sizes in squashfs_read_inode()
    f5a1b04e5df2 Squashfs: add additional inode sanity checking
    edb6425f5935 lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
    abdfc4704e0b ext4: free orphan info with kvfree
    f775f821de46 ACPICA: Allow to skip Global Lock initialization
    720a66fdaa6c ext4: validate ea_ino and size in check_xattrs
    79ea7f3e11ef ext4: guard against EA inode refcount underflow in xattr update
    9e642ab8e5b2 ext4: fix an off-by-one issue during moving extents
    d1e681c0bb03 ext4: correctly handle queries for metadata mappings
    871b6894a3fa ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
    304fc34ff6fc ext4: verify orphan file size is not too big
    e7e0e3eae0c1 nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
    925ed83efbe7 NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
    677ebfe5d00f mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
    bb5ef60ee84f mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0
    81a6d6011acb mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
    69336589df5d wifi: mt76: mt7921u: Add VID/PID for Netgear A7500
    d0ca2f9fbb96 wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
    3454c79780dd selftests: mptcp: join: validate C-flag + def limit
    1264edbed45e x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
    c5bceeb4c569 x86/umip: Check that the instruction opcode is at least two bytes
    d7760884ee3f spi: cadence-quadspi: Flush posted register writes before DAC access
    8bf417e1d36c spi: cadence-quadspi: Flush posted register writes before INDAC access
    eef57e03d5c1 PCI: tegra194: Handle errors in BPMP response
    315001252acd PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
    a1a7a80dbe08 PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
    f5770bba83d1 PCI: rcar-host: Drop PMSR spinlock
    608ab627d966 PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
    61aeab7178aa PCI/AER: Support errors introduced by PCIe r6.0
    741b78395083 PCI/AER: Fix missing uevent on recovery when a reset is requested
    a3a52f85a211 PCI/ERR: Fix uevent on failure to recover
    36039348bca7 PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
    bd27ddb68a42 PCI/sysfs: Ensure devices are powered for config reads
    7a9dee3e4c9d PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
    a5f1934fea37 rseq/selftests: Use weak symbol reference, not definition, to link with glibc
    9f16da9b549a rtc: interface: Fix long-standing race when setting alarm
    31a81d9ad81b rtc: interface: Ensure alarm irq is enabled when UIE is enabled
    5dd821744377 memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
    587b819fbcbf mmc: core: SPI mode remove cmd7
    6a5b401c745f mtd: rawnand: fsmc: Default to autodetect buswidth
    151bd8885947 xtensa: simdisk: add input size check in proc_write_simdisk
    3572290dfa7c sparc: fix error handling in scan_one_device()
    612d10ce8490 sparc64: fix hugetlb for sun4u
    ed3044b9c810 sctp: Fix MAC comparison to be constant-time
    04181645643d scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
    ebf2b91a09fd sched/deadline: Fix race in push_dl_task()
    f4aab940ae9e Revert "ipmi: fix msg stack when IPMI is disconnected"
    dc3a1c6237e7 pwm: berlin: Fix wrong register in suspend/resume
    9f88a6fd9748 powerpc/pseries/msi: Fix potential underflow and leak issue
    83319fa81e60 powerpc/powernv/pci: Fix underflow and leak issue
    4307297a5fe4 power: supply: max77976_charger: fix constant current reporting
    fc6ce639b9a7 pinctrl: samsung: Drop unused S3C24xx driver data
    4bfba41d80d3 nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
    62fcb12c1f80 parisc: Remove spurious if statement from raw_copy_from_user()
    eb67aaf2c2f3 parisc: don't reference obsolete termio struct for TC* constants
    dd21dc8d7451 openat2: don't trigger automounts with RESOLVE_NO_XDEV
    ff770d10cfeb of: unittest: Fix device reference count leak in of_unittest_pci_node_verify
    babe2b53fa7d lib/genalloc: fix device leak in of_gen_pool_get()
    db2fcc8189bf KEYS: trusted_tpm1: Compare HMAC values in constant time
    132f827e7bac kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
    8d982bdd5dfd iommu/vt-d: PRS isn't usable if PDS isn't supported
    ff416637ef07 iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
    dad6e796b10f init: handle bootloader identifier in kernel parameters
    759329336a77 iio: xilinx-ams: Unmask interrupts after updating alarms
    26242971663d iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
    54e7b86d1ab0 iio: frequency: adf4350: Fix prescaler usage.
    3f88f4e8f178 iio: dac: ad5421: use int type to store negative error codes
    a832682cf6c9 iio: dac: ad5360: use int type to store negative error codes
    f7fed2af0ad8 fs/ntfs3: Fix a resource leak bug in wnd_extend()
    feac989493ca fbdev: Fix logic error in "offb" name match
    41b17a237e1e crypto: rockchip - Fix dma_unmap_sg() nents value
    4b3770692262 crypto: atmel - Fix dma_unmap_sg() direction
    11bb6f3cc21b crypto: aspeed - Fix dma_unmap_sg() direction
    69a18ff6c60e cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
    2e9ae62b1ca3 copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
    ed9cf7c460e8 bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
    108c50494c2b bus: mhi: ep: Fix chained transfer handling in read path
    0276c8582488 btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
    f74a135c5617 blk-crypto: fix missing blktrace bio split events
    fd7b6b31475e drm/nouveau: fix bad ret code in nouveau_bo_move_prep
    07c0125e21a6 drm/rcar-du: dsi: Fix 1/2/3 lane support
    b4ba1c81de30 media: lirc: Fix error handling in lirc_register()
    ec02275a6317 media: venus: firmware: Use correct reset sequence for IRIS2
    f9d61ee68937 media: pci: ivtv: Add missing check after DMA map
    4c656fd59e9e media: mc: Fix MUST_CONNECT handling for pads with no links
    d429c3bb06fa media: i2c: mt9v111: fix incorrect type for ret
    c0ad66984750 media: cx18: Add missing check after DMA map
    dbcbac8c47cb firmware: meson_sm: fix device leak at probe
    135eacbb111f xen/events: Update virq_to_irq on migration
    612ef6056855 xen/events: Return -EEXIST for bound VIRQs
    536a7e676fbe xen/manage: Fix suspend error path
    9ac86c75148f xen/events: Cleanup find_virq() return codes
    76165e048c1b dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required
    4d74d17ab18e ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
    61683c2e7019 arm64: dts: ti: k3-am62a-main: Fix main padcfg length
    d9560998550d arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
    ac7ce5c869f8 arm64: dts: qcom: msm8939: Add missing MDSS reset
    0a5e8961cd0f arm64: dts: qcom: msm8916: Add missing MDSS reset
    9cfc586847fa ACPI: debug: fix signedness issues in read/write helpers
    debf3c347330 ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
    1ae9cdd6b479 ACPI: property: Fix buffer properties extraction for subnodes
    b6e9645be9eb bpf: Avoid RCU context warning when unpinning htab with internal structs
    c14f73ecc365 gpio: wcd934x: mark the GPIO controller as sleeping
    380c23baf030 tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
    436cfdbc57d9 cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
    a133e2699f8e smb: client: fix missing timestamp updates after utime(2)
    f37e7860dc5e crypto: essiv - Check ssize for decryption and in-place encryption
    46362cdd9df6 bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
    0028e0134c64 netfilter: nft_objref: validate objref and objrefmap expressions
    df0ffc4b51e9 netfilter: nf_tables: drop unused 3rd argument from validate callback ops
    71fe3c3381de drm/amd/display: Properly disable scaling on DCE6
    914b1f47fb6a drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
    9973e4ee0e93 drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
    0e69ecbbd562 drm/amdgpu: Add additional DCE6 SCL registers
    b6bfe44b6dbb bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
    d3f97bef535e mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
    c6cdac3cb34f mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
    8078f8570e86 tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()
    5e51bb7ffca1 perf python: split Clang options when invoking Popen
    44f838a60551 tools build: Align warning options with perf
    988519923e33 net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
    422c1c173c39 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
    c21f45cfa4a9 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
    77e402b0af5e drm/vmwgfx: Fix copy-paste typo in validation
    867bda5d95d3 drm/vmwgfx: Fix Use-after-free in validation
    299cfb5a7dea drm/vmwgfx: Fix a null-ptr access in the cursor snooper
    2646a49e6286 net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
    e9aff0d0b173 LoongArch: Init acpi_gbl_use_global_lock to false
    d243aaafddea LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()
    2d02309c2f05 ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size
    3c90f583d679 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
    949545ef80f7 cpufreq: tegra186: Set target frequency for all cpus in policy
    d497fef5b957 clk: tegra: do not overallocate memory for bpmp clocks
    58f9a3f0acf9 clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
    586211feb242 clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
    5c2213b9aa44 clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags()
    9ea18c668db0 clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m
    fbfd0ae59013 perf evsel: Ensure the fallback message is always written to
    4a1f44e54664 perf tools: Add fallback for exclude_guest
    f6b458071302 perf test: Add a test for default perf stat command
    4163822f8c03 perf test: Don't leak workload gopipe in PERF_RECORD_*
    1501f779e794 perf session: Fix handling when buffer exceeds 2 GiB
    398657434c61 perf arm_spe: Correct memory level for remote access
    6f6ab20a6a3d perf arm-spe: Rename the common data source encoding
    ec2cc8ed15fd perf arm_spe: Correct setting remote access
    3966ea7d5405 rtc: optee: fix memory leak on driver removal
    0decf468c71e rtc: x1205: Fix Xicor X1205 vendor prefix
    41eac6ed9e2a perf util: Fix compression checks returning -1 as bool
    64419ecff19f clk: at91: peripheral: fix return value
    afa0b258e073 libperf event: Ensure tracing data is multiple of 8 sized
    52571a05bcd2 perf evsel: Avoid container_of on a NULL leader
    fdd428149a88 asm-generic/io.h: Skip trace helpers if rwmmio events are disabled
    ed30811fbed4 media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
    8ea08bcab31d iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
    cc1216f33ad4 clocksource/drivers/clps711x: Fix resource leaks in error paths
    9f13f727bed6 fscontext: do not consume log entries when returning -EMSGSIZE
    bc7372c05a07 fs: always return zero on success from replace_fd()

(From OE-Core rev: 7f47c7812a2e08dce8c9a379b540fa5ed37ecfd4)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield
40a0b2c80d linux-yocto/6.6: update to v6.6.112
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    0bbbd97a442d Linux 6.6.112
    acad20578817 usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
    5c25a2a403b3 arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode
    540aaab034b5 usb: typec: tipd: Clear interrupts first
    724a9db84188 net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
    78e87b8a3cf8 bus: fsl-mc: Check return value of platform_get_resource()
    1a2ea887a5cd pinctrl: check the return value of pinmux_ops::get_function_name()
    66821fdb723d remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()
    81cec07d3031 sunrpc: fix null pointer dereference on zero-length checksum
    fd8a23ecbc60 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
    bbd8f90c3bf4 Input: atmel_mxt_ts - allow reset GPIO to sleep
    d7513b47082c misc: fastrpc: Skip reference for DMA handles
    3ad42dc66445 misc: fastrpc: fix possible map leak in fastrpc_put_args
    6e0d6cc39f41 misc: fastrpc: Fix fastrpc_map_lookup operation
    b808a3590c28 nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
    964598e6f70a mm: hugetlb: avoid soft lockup when mprotect to large memory area
    c6effaab2427 ext4: fix checks for orphan inodes
    c6b15a82a56c ksmbd: fix error code overwriting in smb2_get_info_filesystem()
    7eca645917bc LoongArch: Automatically disable kaslr if boot from kexec_file
    846cafc4725c dm: fix NULL pointer dereference in __dm_suspend()
    ed6877417298 dm: fix queue start/stop imbalance under suspend/load/resume races
    2647603d42d9 mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
    6c21c4a425d3 mfd: rz-mtu3: Fix MTU5 NFCR register offset
    0ba68bea1e35 net: nfc: nci: Add parameter validation for packet data
    a70dcfa8d0a0 fs: udf: fix OOB read in lengthAllocDescs handling
    28d0e8af8c0a ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down
    e04aa0b00107 ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
    2af39ab5e6dc uio_hv_generic: Let userspace take care of interrupt mask
    c28b0ca029ed Squashfs: fix uninit-value in squashfs_get_parent
    3bce44b34404 bpf: Reject negative offsets for ALU ops
    78dc7362662f vhost: vringh: Modify the return value check
    aa57822ade41 Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
    ba905a567105 smb: client: fix crypto buffers in non-linear memory
    3311f0d15bb3 net/mlx5: fw reset, add reset timeout work
    3df251a65b4e net/mlx5: pagealloc: Fix reclaim race during command interface teardown
    dda27f370cde net/mlx5: Stop polling for command response if interface goes down
    ea87151df398 net: dlink: handle copy_thresh allocation failure
    5e627ae572b2 net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
    07a92ab8b479 nfp: fix RSS hash key size when RSS is not supported
    75287554a92e mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands
    53683b4d3740 drivers/base/node: fix double free in register_one_node()
    7e76fe9dfadb ocfs2: fix double free in user_cluster_connect()
    f4238064379a hwrng: ks-sa - fix division by zero in ks_sa_rng_init
    96ca6913042e KEYS: X.509: Fix Basic Constraints CA flag parsing
    2ef583b45fe7 Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements
    8fd355f54a62 Bluetooth: ISO: don't leak skb in ISO_CONT RX
    5319145a07d8 Bluetooth: ISO: Fix possible UAF on iso_conn_free
    868196cc8ba8 Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
    781226e11d5b vhost: vringh: Fix copy_to_iter return value check
    6394bade9daa net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
    7c853408ee24 RDMA/siw: Always report immediate post SQ errors
    48edf187fdd4 usb: vhci-hcd: Prevent suspending virtually attached devices
    6459dba4f350 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
    8cbe2a21d857 ipvs: Defer ip_vs_ftp unregister during netns cleanup
    0901fa02ccf7 NFSv4.1: fix backchannel max_resp_sz verification check
    9768536f8260 coresight: trbe: Return NULL pointer for allocation failures
    e926dfde8ad1 coresight: etm4x: Support atclk
    4960e17a3543 coresight-etm4x: Conditionally access register TRCEXTINSELR
    db1261fe50ff remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
    f321de0b3847 PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert()
    f22d898e080a wifi: rtw89: avoid circular locking dependency in ser_state_run()
    85288bcf7ffe RDMA/rxe: Fix race in do_task() when draining
    1750f1ec143e crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs
    f0e6e7b43511 vfio/pds: replace bitmap_free with vfree
    e7979228b3bd sparc: fix accurate exception reporting in copy_{from,to}_user for M7
    9cbb5ebf409e sparc: fix accurate exception reporting in copy_to_user for Niagara 4
    8cdeb5e482d3 sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
    dc766c4830a7 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
    674ff598148a sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
    77fe706ff086 wifi: mac80211: fix Rx packet handling when pubsta information is not available
    15bd3f0d0e99 wifi: ath10k: avoid unnecessary wait for service ready message
    12ff1858301e Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
    8410e7d65b16 IB/sa: Fix sa_local_svc_timeout_ms read race
    925ff361460b RDMA/core: Resolve MAC of next-hop device without ARP support
    eb976d02c889 Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
    e0a9a737c9a2 f2fs: fix zero-sized extent for precache extents
    8eb6dacd5c23 scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()
    111b64b98874 scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
    19a09c909372 scsi: qla2xxx: edif: Fix incorrect sign of error code
    8012e298b968 ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
    7d9b97e61350 f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()
    83a8e4efea02 f2fs: fix to truncate first page in error path of f2fs_truncate()
    045375172dd4 f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()
    ec4a608bca40 wifi: mt76: fix potential memory leak in mt76_wmac_probe()
    dac556dd2d44 RDMA/cm: Rate limit destroy CM ID timeout error message
    4a594f5c64bf drivers/base/node: handle error properly in register_one_node()
    d12f4499585a watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
    54f4da8629cf ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
    a2e10d05f5c3 netfilter: ipset: Remove unused htable_bits in macro ahash_region
    9170730674cf iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
    289cbdb27afb iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed()
    978aac54e93e fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
    a86c8b9d03f7 fs: ntfs3: Fix integer overflow in run_unpack()
    528807934790 drm/msm/dpu: fix incorrect type for ret
    f197894de2f4 ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
    29a41bf64226 ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
    d75a561ba1ea ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
    cf71834a0cfc pps: fix warning in pps_register_cdev when register device fail
    b859d612303a misc: genwqe: Fix incorrect cmd field being reported in error
    c36785f9de03 tty: n_gsm: Don't block input queue by waiting MSC
    0924d8563043 usb: gadget: configfs: Correctly set use_os_string at bind
    f0c98b011e01 usb: phy: twl6030: Fix incorrect type for ret
    a7d262359018 drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
    18897db75121 tcp: fix __tcp_close() to only send RST when required
    8120c4638416 PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
    1fc4717f5190 wifi: mwifiex: send world regulatory domain to driver
    531a50b2db6d drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3)
    5e64cc74159c drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
    4e27e18f64a2 drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
    1320d1e834c1 drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
    dd3d6befe7db drm/amd/pm: Fix si_upload_smc_data (v3)
    2f68f6f7cec4 drm/amd/pm: Disable ULV even if unsupported (v3)
    d0e0b2c9a2b7 drm/amdgpu: Power up UVD 3 for FW validation (v2)
    553af70d3d68 coresight: Only register perf symlink for sinks with alloc_buffer
    91e487452d5a inet: ping: check sock_net() in ping_get_port() and ping_lookup()
    3a7802716da2 crypto: hisilicon/qm - check whether the input function and PF are on the same device
    c9035e9ba528 crypto: hisilicon - re-enable address prefetch after device resuming
    94b09b0ac0b8 crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations
    30a4e81edb15 media: st-delta: avoid excessive stack usage
    6e41267d52ec ALSA: lx_core: use int type to store negative error codes
    ca61e32fcf27 RDMA/mlx5: Fix vport loopback forcing for MPV device
    f891dce0d397 media: rj54n1cb0c: Fix memleak in rj54n1_probe()
    f97f08b9351d scsi: myrs: Fix dma_alloc_coherent() error check
    e62251954a12 scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
    c1a15609eade hwrng: nomadik - add ARM_AMBA dependency
    c5d08ff97cdb crypto: keembay - Add missing check after sg_nents_for_len()
    9c5cfe544a63 drm/amd/display: Remove redundant semicolons
    ef3600c6fec3 serial: max310x: Add error checking in probe()
    ac4d189aaa93 usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls
    b0439e3762ac usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
    8de227e62a53 phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568
    20f744fea1b1 media: zoran: Remove zoran_fh structure
    d2e29c36eb5f drm/bridge: it6505: select REGMAP_I2C
    32270c3a65bd f2fs: fix condition in __allow_reserved_blocks()
    08eb6043c9e5 drm/radeon/r600_cs: clean up of dead code in r600_cs
    9c704b291d5d drm/panel: novatek-nt35560: Fix invalid return value
    08cb3dc9d2b4 bpf: Enforce expected_attach_type for tailcall compatibility
    44045b107a4e i2c: designware: Add disabling clocks when probe fails
    6d621778e378 i2c: designware: Fix clock issue when PM is disabled
    59d467bd07ee i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
    a4b5eac932ca thermal/drivers/qcom/lmh: Add missing IRQ includes
    d2e0755412bf thermal/drivers/qcom: Make LMH select QCOM_SCM
    c07e759b3f53 hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems
    c38998ed0e88 once: fix race by moving DO_ONCE to separate section
    2158121117c9 tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
    748bbe2c1673 smp: Fix up and expand the smp_call_function_many() kerneldoc
    cdeafacb4f9f bpf: Explicitly check accesses to bpf_sock_addr
    ec9a5b4f0eee selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
    5477b0045056 i3c: master: svc: Recycle unused IBI slot
    20ff7004c9a0 i3c: master: svc: Use manual response for IBI events
    060ecc81240e nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
    8963484b7e15 ACPICA: Fix largest possible resource descriptor index
    c3202fce0cea pwm: tiehrpwm: Fix corner case in clock divisor calculation
    6926fc62b777 arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
    8063e535a5a2 arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value
    7e538e84ca7d arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names
    2af05a03b1d2 cpuidle: qcom-spm: fix device and OF node leaks at probe
    aa30d3077298 firmware: firmware: meson-sm: fix compile-test default
    4f9e6ff6319d nbd: restrict sockets to TCP and UDP
    37e5190d4bfe arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0
    341a1b62a024 null_blk: Fix the description of the cache_size module argument
    70d4e6996a5d pinctrl: renesas: Use int type to store negative error codes
    82b71f330cd0 power: supply: cw2015: Fix a alignment coding style issue
    80eab6a9df7e PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
    585499f17d1d ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property
    396ee23da443 ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS
    dcc72335190c ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax
    96adc664ff27 PM: sleep: core: Clear power.must_resume in noirq suspend error path
    fa2a1c33e081 block: use int to store blk_stack_limits() return value
    12ef6fe2b4ea selftests/nolibc: fix EXPECT_NZ macro
    aac29a895144 regulator: scmi: Use int type to store negative error codes
    5ce4e7a5fe46 arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map
    e9d02b09ded8 ARM: at91: pm: fix MCKx restore routine
    06c4826b1d90 blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
    299cd1f5fdaa pinctrl: meson-gxl: add missing i2c_d pinmux
    3433843693e0 soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
    5b8ac5689739 ACPI: processor: idle: Fix memory leak when register cpuidle device failed
    24a67e7dfd03 cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
    64db56dc1fe5 leds: flash: leds-qcom-flash: Update torch current clamp setting
    ca782b2a61d6 ARM: dts: renesas: porter: Fix CAN pin group
    5c6246bc147d libbpf: Fix reuse of DEVMAP
    ab8b2403103f bpf: Remove migrate_disable in kprobe_multi_link_prog_run
    7db2f54be7d5 bpf/selftests: Fix test_tcpnotify_user
    c99c6c593ee2 regmap: Remove superfluous check for !config in __regmap_init()
    0401de6d1665 arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0
    db82a94b0c10 x86/vdso: Fix output operand size of RDPID
    8100b6c0f908 EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
    a993be82c512 smb: server: fix IRD/ORD negotiation with the client
    379cae2cb982 perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
    35e5f3759010 coresight: trbe: Prevent overflow in PERF_IDX2OFF()
    239c49a99d63 gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote
    69e2a7c30750 selftests: arm64: Check fread return value in exec_target
    00f1726e6412 seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast
    9d8b6c9f18e5 init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD
    a312ec6d768a filelock: add FL_RECLAIM to show_fl_flags() macro

(From OE-Core rev: af6ac5a200e41b6de6e32b258ccae222948b989b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Dragomir, Daniel
77f60c1165 oeqa/selftest/wic: test recursive dir copy on ext partitions
Extend the wic selftests to cover recursive directory copying
into ext partitions.

Previously, copying a directory into an ext partition could
appear to succeed, but attempting to access the directory
contents would fail with:

  -l: Ext2 inode is not a directory

This was fixed in commit 4fc3b42774 ("wic/engine: fix copying
directories into wic image with ext* partition").

This test now verifies that directories copied with "wic cp"
into an ext4 partition:
  - are created with correct inode types
  - can be listed recursively with "wic ls"
  - preserve files and subdirectories
  - can be copied back out of the image without data loss

A simple directory structure is used in this test:

wic-test-cp-ext-dir/
├── topfile.txt
└── subdir/
    └── subfile.txt

(From OE-Core rev: 1e051c02bc05367d6b911ac9486403029f6f7cd8)

Signed-off-by: Daniel Dragomir <daniel.dragomir@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6de3d2602f4f4a8192d6a6040e89e814187dcf93)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Dragomir, Daniel
6c2a243d6c wic/engine: fix copying directories into wic image with ext* partition
wic uses debugfs to write on ext* partitions, but debugfs can only
write to the current working directory and it cannot copy complete
directory trees. Running 'wic ls' on a copied directory show this:
    -l: Ext2 inode is not a directory

Fix this by creating a command list for debugfs (-f parameter) when
recursive parsing the host directory in order to create a similar
directory structure (mkdir) and copy files (write) on each level
into the destination directory from the wic's ext* partition.

(From OE-Core rev: 67f08884b98576c06db8db01b093ebeee760aba0)

Signed-off-by: Daniel Dragomir <daniel.dragomir@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 1ed38aff5f810d064c87aff9cbd310906833b6ba)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi
df890007b4 vim: ignore CVE-2025-66476
Details https://nvd.nist.gov/vuln/detail/CVE-2025-66476

(From OE-Core rev: f42ed917ab6a4a91d473ef5b2107cdf0f1961c57)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi
4ed95c6c7b mobile-broadband-provider-info: upgrade 20240407 -> 20251101
Changelog:
https://gitlab.gnome.org/GNOME/mobile-broadband-provider-info/-/blob/20251101/NEWS?ref_type=tags

(From OE-Core rev: 8bad1af53b6bfcd7f1d602cdb5aeee175734e569)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
[YC: commit 99e2dea3d4328f2aaa6e6e29f5bf4aa38b64b274 upstream]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Peter Marko
4c8f687fe6 libsndfile1: patch CVE-2025-56226
Pick patches from both PRs linked in issue mentioned in NVD report.

(From OE-Core rev: e0ac318128b8f78efddc0b748b1db3e96873c532)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 327546cc0f0bdffcbb4be690ee0b9b469db64842)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi
34deee3e52 avahi: patch CVE-2026-24401
Details https://nvd.nist.gov/vuln/detail/CVE-2026-24401

(From OE-Core rev: 030a3fff4b05b785f6ed1a97310b8386628adbf9)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 183d0ee54f1c194e245a7bbf243c19b3c2acf4f5)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Amaury Couderc
49dc4dd983 avahi: patch CVE-2025-68471
(From OE-Core rev: bfd12b872d922116c1a793cd9debb5ee773bfeaf)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5ec4156330c765bc52dbce28dbba6def9868d30f)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Amaury Couderc
0d954471b5 avahi: patch CVE-2025-68468
(From OE-Core rev: 1eebd6d5bd5d930aa8ec68f73789ff0bd742441c)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9f2ed8adc37a42b561b3c4853cf8106fba39889e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi
a57370d30c avahi: patch CVE-2025-68276
Backport the patch[1] from the PR[2] mentioned in the nvd[3].

[1] 2d48e42d44
[2] https://github.com/avahi/avahi/pull/806
[3] https://nvd.nist.gov/vuln/detail/CVE-2025-68276

Dropped CI changes from the original PR during backport.

(From OE-Core rev: 4da15f7fad8df7ba5fae29bc72156b189e993d58)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Yoann Congal
65c3ebea05 pseudo: Update to include a fix for systems with kernel <5.6
$ git log --oneline --no-decorate  9ab513512d8b5180a430ae4fa738cb531154cdef..43cbd8fb4914328094ccdb4bb827d74b1bac2046
43cbd8f ports/linux: define __NR_openat2 if missing

(From OE-Core rev: fe2666749094e896736ff24d6885419905488723)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e9a35f32b983de724d2c2e436c017b49d5b70469)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Richard Purdie
1d54d1c473 build-appliance-image: Update to scarthgap head revision
(From OE-Core rev: a1f4ae4e569bc0e36c27c1e4651e502e54d63b28)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
yocto-5.0.16 scarthgap-5.0.16
2026-02-16 09:52:49 +00:00
Richard Purdie
99047ec235 pseudo: Update to include an openat2 fix
We're seeing occasional autobuilder failures with tar issues related to openat2.
It appears there are definitions missing on debian 11 and opensuse 15.5 systems
which mean the openat2 syscall intercept isn't compiled in. This then triggers
on systems using the openat2 syscall, such as alma9 where it is used in a tar
CVE fix.

This updates to include the fix from upstream pseudo (along with a compile warning
fix).

This was tested by taking sstate for pseudo-native from a debian 11 system and using
it in a build of "bitbake nativesdk-git -c install" on a alma9 system where that task
failed. After this fix, it completes.

(From OE-Core rev: 34b74540ee497e2cc89211d7aa2772097b6fa79b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c20c05b324e5d6564c8554381019170839509bb)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Ken Kurematsu
5eddd0f7fc libtheora: set CVE_PRODUCT
In the NVD database, the product name of libtheora is theora.
This was set to ensure that cve-check works correctly.

(From OE-Core rev: e86e50b8c5b16065dcb35ebf4b00eff59c5da78c)

Signed-off-by: Ken Kurematsu <k.kurematsu@nskint.co.jp>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a8ddda60332e2a3219e905c1545b5da917f855c6)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Richard Purdie
4f4691984a pseudo: Update to 1.9.3 release
Pulls in the following changes:

  Makefile.in: Bump version to 1.9.3
  configure: Minor code quality changes
  pseudo: code quality scan - resolved various potential issues
  makewrappers: improve error handling and robustness
  Update COPYRIGHT files
  ports/linux/pseudo_wrappers.c: Call the wrappers where possible
  ports/linux/pseudo_wrappers.c: Workaround compile error on Debian 11
  ports/linux/pseudo_wrappers.c: Reorder the syscall operations
  ports/unix/guts/realpath.c: Fix indents
  pseudo_util.c: Skip realpath like expansion for /proc on Linux
  test/test-proc-pipe.sh: Add test case for proc pipes
  ports/unix/guts/realpath.c: realpath fails if the resolved path doesn't exist

(From OE-Core rev: 7a05347a6418bfb6126e3a601489dc71efb0d2fc)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 524f4bbb11f9c7e0126e8bd46af217b452d48f5e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Khai Dang
d02f35223e docbook-xml-dtd4: fix the fetching failure
Updating SRC_URI, the old archive url is deprecated.

(From OE-Core rev: 65ead4efec955b1b8877ec39eba44ca4da8cfff3)

Signed-off-by: Khai Dang <khai.dang@lge.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c137d3637b6171fbd3bfd671a56096e7f2b3c318)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Fred Bacon
c7084e7f05 lighttpd: Fix trailing slash on files in mod_dirlisting
Fixes [YOCTO #16128]

Backport of upstream bug fix from lighttpd-1.4.75. Version 1.4.74 introduced a bug that
would append a trailing slash to files in a directory listing. When the user attempts to
download one of these files, the web browser could not save the file with a trailing
slash. As a consequence, every web browser tested would generate a random character string
for the saved file name.

(From OE-Core rev: 797f15116901328a9a58868edeea44614dc29043)

Signed-off-by: Fred Bacon <bacon@aerodyne.com>
[Yoann: Fixed Upstream-Status: Backport URL]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Daniel Turull
7ba5e4b416 improve_kernel_cve_report: add script for postprocesing of kernel CVE data
Adding postprocessing script to process data from linux CNA that includes more accurate metadata and it is updated directly by the source.

Example of enhanced CVE from a report from cve-check:

{
  "id": "CVE-2024-26710",
  "status": "Ignored",
  "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-26710",
  "summary": "In the Linux kernel, the following vulnerability [...]",
  "scorev2": "0.0",
  "scorev3": "5.5",
  "scorev4": "0.0",
  "modified": "2025-03-17T15:36:11.620",
  "vector": "LOCAL",
  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "detail": "not-applicable-config",
  "description": "Source code not compiled by config. ['arch/powerpc/include/asm/thread_info.h']"
},

And same from a report generated with vex:
{
  "id": "CVE-2024-26710",
  "status": "Ignored",
  "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-26710",
  "detail": "not-applicable-config",
  "description": "Source code not compiled by config. ['arch/powerpc/include/asm/thread_info.h']"
},

For unpatched CVEs, provide more context in the description:
Tested with 6.12.22 kernel
{
  "id": "CVE-2025-39728",
  "status": "Unpatched",
  "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-39728",
  "summary": "In the Linux kernel, the following vulnerability has been [...],
  "scorev2": "0.0",
  "scorev3": "0.0",
  "scorev4": "0.0",
  "modified": "2025-04-21T14:23:45.950",
  "vector": "UNKNOWN",
  "vectorString": "UNKNOWN",
  "detail": "version-in-range",
  "description": "Needs backporting (fixed from 6.12.23)"
},

CC: Peter Marko <peter.marko@siemens.com>
CC: Marta Rybczynska <rybczynska@gmail.com>
(From OE-Core rev: 7637af0a94764ac0c6c4f02f383992bcb4753af0)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e60b1759c1aea5b8f5317e46608f0a3e782ecf57)
Signed-off-by: Suresh H A <suresh.ha@bmwtechworks.in>

[Yoann: Stable policy exception: This change is clearly a new feature
and thus should be rejected from stables by policy. But, since this is
contrib/ an exception can be made]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Benjamin Robin (Schneider Electric)
9628ed0111 meta/classes: fix missing vardeps for CVE status variables
Several CVE helper functions (get_patched_cves() and decode_cve_status())
implicitly depend on the CVE_STATUS and CVE_CHECK_STATUSMAP variables, but
these were not declared in the vardeps of their callers.

On Scarthgap, the upstream fix (2cc43c72ff28aa39a417dd8d57cd7c8741c0e541)
cannot be cherry-picked cleanly, as it also requires BitBake changes.

As a workaround, explicitly add CVE_STATUS and CVE_CHECK_STATUSMAP to the
vardeps of all tasks invoking these helpers, ensuring correct task
re-execution when CVE status changes.

This keeps CVE-related metadata generation consistent without requiring
BitBake modifications.

(From OE-Core rev: 111e1f2febade3c34649f33676f7f7e7cc8e0bd0)

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
af8b964e9b glibc: stable 2.39 branch updates
git log --oneline 58cbbd43fe82910cf8ae9008351b0b0665104500..ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc
ce65d944e3 (HEAD -> release/2.39/master, origin/release/2.39/master) posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)
831f63b94c resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
fb22fd3f5b memalign: reinstate alignment overflow check (CVE-2026-0861)
10c0bcb3d3 support: Exit on consistency check failure in resolv_response_add_name
f47dd22366 support: Fix FILE * leak in check_for_unshare_hints in test-container
4a53354eaf sprof: fix -Wformat warnings on 32-bit hosts
beb8267909 sprof: check pread size and offset for overflow
c07002038f getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]
ae5fb93559 nptl: Optimize trylock for high cache contention workloads (BZ #33704)
efff7cb659 ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)
f6becd8ae8 ppc64le: Restore optimized strncmp for power10
0daa4e46b8 ppc64le: Restore optimized strcmp for power10
28c1de6580 AArch64: Fix instability in AdvSIMD tan
03d0393343 AArch64: Optimise SVE scalar callbacks
0d05a895f1 aarch64: fix includes in SME tests
c1dc4412f8 aarch64: fix cfi directives around __libc_arm_za_disable
d60f15dc89 aarch64: tests for SME
d1d0d09e9e aarch64: clear ZA state of SME before clone and clone3 syscalls
dbe1904b7c aarch64: define macro for calling __libc_arm_za_disable
58cf4aa421 aarch64: update tests for SME
1b3bd9a9a6 aarch64: Disable ZA state of SME in setjmp and sigsetjmp
38942a336b linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)
c74d59a656 aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)
323ad087a1 x86: fix wmemset ifunc stray '!' (bug 33542)

Testing Results:
             Before    After    Diff
PASS         4926      4921     -5
XPASS        4         4         0
FAIL         223       229      +6
XFAIL        16        16        0
UNSUPPORTED  224       224       0

Changes in failed testcases:

testcase-name                                before  after
elf/tst-audit21                              PASS    FAIL
malloc/tst-malloc-too-large                  PASS    FAIL
malloc/tst-malloc-too-large-malloc-check     PASS    FAIL
malloc/tst-malloc-too-large-malloc-hugetlb1  PASS    FAIL
malloc/tst-malloc-too-large-malloc-hugetlb2  PASS    FAIL
malloc/tst-malloc-too-large-mcheck           PASS    FAIL

(From OE-Core rev: a49b898ed6d571391d90cc3ba150a0421642be23)

Signed-off-by: Peter Marko <peter.marko@siemens.com>

[Yoann: When run on the autobuilder, all those new FAIL tests are PASS:
https://valkyrie.yocto.io/pub/non-release/20260209-10/testresults/qemux86-64-tc/testresults.json]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Ankur Tyagi
b617f833e5 ffmpeg: ignore CVE-2025-25469
Details https://nvd.nist.gov/vuln/detail/CVE-2025-25469

This vulnerability exists in IAMF (Immersive Audio Model and Formats demuxer)
which was introduced in version 7.0 [1]

$ git tag --contains 4ee05182b7cccfa6928dcb0a45c2b50b7d9ea39b
n7.0
n7.0.1
n7.0.2
n7.0.3
n7.1
n7.1-dev
n7.1.1
n7.1.2
n7.1.3
n7.2-dev
n8.0
n8.0.1
n8.1-dev

[1] 4ee05182b7

(From OE-Core rev: 935bd46fab333a29a8bf4bb511fb55d5d02b3a71)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Ankur Tyagi
b8600b66e4 ffmpeg: upgrade 6.1.3 -> 6.1.4
Dropped patches that are part of the upstream version.

Changelog:
34277e12e8:/Changelog

(From OE-Core rev: f9f054faca45a08507b510c8982f170edd6bf83a)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
463172affb zlib: ignore CVE-2026-22184
This is CVE for example tool contrib/untgz.
This is not compiled in Yocto zlib recipe.

This CVE has controversial CVSS3 score of 9.8.

(From OE-Core rev: b00a1990237d473971076c4f92a1060911b8b323)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b0592c51b6ad038d737d2f6b30977bd0c5c50058)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Yoann Congal
028444d608 zlib: cleanup CVE_STATUS[CVE-2023-45853]
CVE-2023-45853: Version is now higher than NVD CPE

This is a partial cherry-pick from 73ee9789183a ("recipes: cleanup
CVE_STATUS which are resolved now").

Cc: Peter Marko <peter.marko@siemens.com>
(From OE-Core rev: 2e05844a70f97399e323f967e926075428cb5233)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Het Patel
a2c9f142ed zlib: Add CVE_PRODUCT to exclude false positives
To avoid false positives (such as CVE-2023-6992, cloudflare:zlib), add a
CVE_PRODUCT to identify the vendors that have been used.

Removing the present existing CVE_STATUS for CVE-2023-6992.

(From OE-Core rev: 85427d225416b3b12bf05513c9427370309b2127)

Signed-off-by: Het Patel <hetpat@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 119b775b36dfd51286493763cffb6e965893b8fd)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Adarsh Jagadish Kamini
54e7eb5951 python-urllib3: Backport fix for CVE-2026-21441
Include the patch linked in the NVD report : https://nvd.nist.gov/vuln/detail/CVE-2026-21441
(From OE-Core rev: bf85dff7bf4340a691df3da21f04a651fff11a17)

Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
534b2c966a python3: patch CVE-2025-13837
Pick patch from 3.12 branch per NVD report.

(From OE-Core rev: 37936e0e93ab5c236d8cc8e709ba1faf8380577c)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
8d61eb390a libxml2: add follow-up patch for CVE-2026-0992
References:
* https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
* https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/377

(From OE-Core rev: 2c8e455148e12e097ff757bcf0a57d7d5bd77c30)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
bd21ac68d0 libxml2: patch CVE-2026-0992
Pick patch which closed [1].
Adapt for missing xmlCatalogPrintDebug per [2].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
[2] 728869809e

(From OE-Core rev: 826dd15a99433c4066d2cd4546515d174d443350)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00
Peter Marko
57126cdaa7 libxml2: patch CVE-2026-0990
Pick patch which closed [1].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018

(From OE-Core rev: f1bb433bbdb0fa19d7d8cbe15d4180c9d18cca5a)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
35fca9ec35 libxml2: patch CVE-2026-0989
Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374
[2] https://gitlab.gnome.org/GNOME/libxml2/-/issues/998

(From OE-Core rev: d201a09eee8efca8a889f0b7a60133e850256369)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Hugo SIMELIERE
308c5dd2c9 libtasn1: Fix CVE-2025-13151
Upstream-Status: Backport from d276cc495a

(From OE-Core rev: 3f9f51783597a682efdf989bebac2934b1f7040c)

Signed-off-by: Bruno VERNAY <bruno.vernay@se.com>
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
005e0f6daf libpng: patch CVE-2026-22801
Pick comit per [1].

[1] https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8

(From OE-Core rev: fc0f0ecb694ae3042cff4472c62c78a7389662c6)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
f824456616 libpng: patch CVE-2026-22695
Pick commit per [1].
This CVE is regression of fix for CVE-2025-65018.

[1] https://security-tracker.debian.org/tracker/CVE-2026-22695

(From OE-Core rev: cdfeb4e55f856b1020caf58f380d3a1e7eb5cd97)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Vijay Anusuri
2541663fd1 inetutils: Fix CVE-2026-24061
Upstream-Status: Backport from
https://cgit.git.savannah.gnu.org/cgit/inetutils.git/commit/?id=ccba9f748aa8d50a38d7748e2e60362edd6a32cc
& https://cgit.git.savannah.gnu.org/cgit/inetutils.git/commit/?id=fd702c02497b2f398e739e3119bed0b23dd7aa7b

Ref: https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html

(From OE-Core rev: da89012029cb110f6d2768248981ab9c4872d871)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
53dbc9c218 glib-2.0: patch CVE-2026-0988
Pick relevant commit from [2] linked from [1].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3851
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4944

(From OE-Core rev: 9df34167c74267b63d46c354efe9b3874efa062e)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
236069b7e0 expat: patch CVE-2026-25210
Pick patches from [1].

[1] https://github.com/libexpat/libexpat/pull/1075

(From OE-Core rev: 97cf4b2341449b34e61a09437e2159b279f9f848)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Peter Marko
46fdae1b0f expat: patch CVE-2026-24515
Pick commits from PR linked in NVD report.

(From OE-Core rev: 7c4fb02b8d8668ec85f5d4ba98db5d69e1e6b712)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Amaury Couderc
cc5e0688c0 curl: patch CVE-2025-14524
(From OE-Core rev: 951113a6e8185969444b5e28292f23434dba1f6c)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Hitendra Prajapati
68f03e2a9f curl: fix CVE-2025-10148
curl's websocket code did not update the 32 bit mask pattern
for each new outgoing frame as the specification says. Instead
it used a fixed mask that persisted and was used throughout
the entire connection.

A predictable mask pattern allows for a malicious server to induce
traffic between the two communicating parties that could be
interpreted by an involved proxy (configured or transparent) as
genuine, real, HTTP traffic with content and thereby poison its
cache. That cached poisoned content could then be served to all
users of that proxy.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-10148

Upstream patch:
https://github.com/curl/curl/commit/84db7a9eae8468c0445b15aa806fa

(From OE-Core rev: 3793ee12d8da4f8f90a0ffcad180ef8122251491)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Zoltan Boszormenyi
be8cc4137c bitbake: knotty: Make sure getTerminalColumns() returns two integers
Python 3.14 complains about these:

Traceback (most recent call last):
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 722, in main
    termfilter.updateFooter()
    ~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 339, in updateFooter
    lines = self.getlines(content)
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 370, in getlines
    lines = lines + 1 + int(len(line) / (self.columns + 1))
                                         ~~~~~~~~~~~~~^~~
TypeError: can only concatenate str (not "int") to str

and

Traceback (most recent call last):
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 722, in main
    termfilter.updateFooter()
    ~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/mnt2/zozo/yocto-5.3/bitbake/lib/bb/ui/knotty.py", line 341, in updateFooter
    for tasknum, task in enumerate(tasks[:(self.rows - 1 - lines)]):
                                           ~~~~~~~~~~^~~
TypeError: unsupported operand type(s) for -: 'str' and 'int'

Make sure getting the number of rows and columns from the terminal
via the environment variables LINES and COLUMNS are returned as a
pair of integers. This matches the return value of ioctl_GWINSZ().

(Bitbake rev: 10118785e4a670bce4980e1044c0888a8b6e84af)

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a4e0b6f8077276a0bfb9d05c759bc752a84d1f76)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Enrico Scholz
c0ba29bb80 bitbake: knotty: fix TIOCGWINSZ call for Python 3.14 and later
Python 3.14 enforces stricter type and size checking for fcntl.ioctl()
buffer arguments. The previous code passed a short 4-byte string ('1234')
to TIOCGWINSZ, which worked by accident in older Python versions but causes
a SystemError ("buffer overflow") in 3.14.

TIOCGWINSZ expects an 8-byte (4x 16-bit) buffer corresponding to
(rows, cols, xpix, ypix). Use an 8-byte bytes literal instead and unpack
the first two values.

Tested with Python 3.11, 3.13, and 3.14.

(Bitbake rev: 9127359eb116827a1e0debe69f84e57717436847)

Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 415e9e329cf8cc0c2caa01cba80c21cfac9e2414)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:34 +00:00
Lee Chee Yang
727b18ba30 migration-guides: add release notes for 4.0.32
(From yocto-docs rev: 369f3307368eaea605983e80047377fd19ebd6bf)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 095981c08b9d63905472df5d1d60c07af96f0250)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:10 +00:00
Antonin Godard
8c8141abd8 dev-manual/packages.rst: fix example recipe version
The example recipe taken above is hello-world on version 1.0 (because
PV equals "1.0+git". Fix this issue.

(From yocto-docs rev: 2d765587de2a2f3383a400d9bdecf64d9b182af9)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 411122812ced4ec32127a823896a73aacf6eb97c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:10 +00:00
Antonin Godard
5cd6c94c3f dev-manual/packages.rst: rename r0.0 to r0 when PR server is not enabled
When we don't have a PR server enabled, we don't have leading ".0" to
the PKGR variable, as this is added by the PR server.

(From yocto-docs rev: e5aaccf54494978bc8c24b4920dad7135837edb7)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7a0324b6a10e64ee250945747db10ca88040b1ce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:10 +00:00
Antonin Godard
476bdedb21 dev-manual/packages.rst: pr server: fix and explain why r0.X increments on SRCREV change
The current example of the SRCREV change triggering a gitX bump is
wrong, as both gitX and r0.X get incremented.

Why this is happening is explained in bug 15729, which I copy here:

> +gitX+ is indeed related to changes in the source code.
>
> r0.X is bumped each time the checksum of the do_package task of the
> simple-hello-world-git recipe changes. This happens here:
> https://git.openembedded.org/openembedded-core/tree/meta/classes-global/package.bbclass?id=235e6d49e5888ad04416219e10b6df91a738661a#n306
>
> This line sets the value of PRAUTO and represents the number X found in
> r0.X. It will in the end make it into EXTENDPRAUTO, which itself makes
> to PKGR == r0.X.
>
> This line calls getPR(version, pkgarch, checksum). Between test case 5
> and 6, only the checksum changes. This checksum is the checksum of the
> do_package task (gotten from get_do_package_hash() above).
>
> Now, let's dump what changed with regards to this task between two
> consecutive runs, using the sigdata file in build/tmp/stamps/:
>
> ```
> [...]
> Variable fetcher_hashes_dummyfunc value changed from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to '4af682a50174f5deb0397847da97d7cdba4ad067'
> ```
>
> The last line shows that the value of fetcher_hashes_dummyfunc changed
> from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to
> '4af682a50174f5deb0397847da97d7cdba4ad067'. Those are the commit hashes
> in the git history of the simple-hello-world-git repository.
>
> Now you can see why this 0.X gets bumped, is because of the SRCREV change.

Fix the example, and detail what gets changed and why.

[YOCTO #15729]

Cc: Robert Berger <pokylinux@reliableembeddedsystems.com>
(From yocto-docs rev: 11fe7dbc49a8062cda8062d320dcb2be70a3b6f3)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 09f0430bc69024b9854c31ba6783ddd807aa4f19)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:10 +00:00