Commit Graph

69300 Commits

Author SHA1 Message Date
Peter Marko
67e8e2cc2f libpng: patch CVE-2026-22801
Pick comit per [1].

[1] https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8

(From OE-Core rev: e7e48abaee6e6e566ef4e5f075b89038bf284714)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Peter Marko
4597dd50ee libpng: patch CVE-2026-22695
Pick commit per [1].
This CVE is regression of fix for CVE-2025-65018.

[1] https://security-tracker.debian.org/tracker/CVE-2026-22695

(From OE-Core rev: 078627f4a208623bc236887682f8a1f0c88f2626)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Vijay Anusuri
a3d6476e85 bind: Upgrade 9.18.41 -> 9.18.44
This upgrade fixes CVE-2025-13878

Changelog
==========
https://downloads.isc.org/isc/bind9/9.18.44/doc/arm/html/notes.html

(From OE-Core rev: d8e70bd838c3b399a2b7a0a7672d8f57a0315e5a)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Bruce Ashfield
82329c1ced linux-yocto/5.15: update to v5.15.199
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    7b232985052fc Linux 5.15.199
    7e6040853f5b5 wifi: cfg80211: init wiphy_work before allocating rfkill fails
    c6d143fc945f7 wifi: cfg80211: fully move wiphy work to unbound workqueue
    8930a3e1568cf wifi: cfg80211: cancel wiphy_work before freeing wiphy
    d81ebee178731 wifi: cfg80211: fix wiphy delayed work queueing
    4737cc74b2fd8 wifi: cfg80211: use system_unbound_wq for wiphy work
    c8b15b0d2eec3 team: Move team device type change at the end of team_port_add
    9b32d72687cfb pinctrl: meson: mark the GPIO controller as sleeping
    2ccfb37ef544f mptcp: avoid dup SUB_CLOSED events after disconnect
    e69e435ec6e68 writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
    52755c5680ce3 drm/imx/tve: fix probe device leak
    28f5cbcce5d9d pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
    46933b9bc76f4 net/sched: act_ife: convert comma to semicolon
    ffac9893ce8d0 btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
    e11e8a29b304c drm/amdkfd: fix a memory leak in device_queue_manager_init()
    dc934d9667399 can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
    186df821de0f3 genirq/irq_sim: Initialize work context pointers properly
    00d52b2fa6083 HID: uclogic: Add NULL check in uclogic_input_configured()
    51f49e3927ad5 HID: uclogic: Correct devm device reference for hidinput input_dev name
    c3a2e803b24eb wifi: mac80211: move TDLS work to wiphy work
    9ac16e7b0b828 wifi: mac80211: use wiphy work for sdata->work
    ddb1bfbf4ab5c wifi: cfg80211: add a work abstraction with special semantics
    e1fa25a91091b Bluetooth: Fix hci_suspend_sync crash
    b15c9a21950e1 net: stmmac: make sure that ptp_rate is not 0 before configuring EST
    65d04291adf7c usbnet: Fix using smp_processor_id() in preemptible code warnings
    49b57b98fa601 NFSD: fix race between nfsd registration and exports_proc
    98fc9c2cc45cf ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
    05db2b850a2b8 espintcp: fix skb leaks
    0561aa6033dd1 blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
    bdf38063fd15f fs/ntfs3: Initialize allocated memory before use
    446beed646b2e ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
    c4079a34c0ade drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED
    10644e8839544 ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
    f87f4de092c7a mm/pagewalk: add walk_page_range_vma()
    f569f5b8bfd51 ksmbd: smbd: fix dma_unmap_sg() nents
    2c34622d9c724 mei: trace: treat reg parameter as string
    d5e80d1f97ae5 ALSA: scarlett2: Fix buffer overflow in config retrieval
    95ab26bc462d7 nvme: fix PCIe subsystem reset controller state transition
    886d98fa48580 nvme-pci: do not directly handle subsys reset fallout
    25c6804cbde4b nvme-fc: rename free_ctrl callback to match name pattern
    937309b52ca26 xfs: set max_agbno to allow sparse alloc of last full inode chunk
    6393da54dcb34 dmaengine: stm32: dmamux: fix device leak on route allocation
    7ff0a6402741e dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
    060b08d72a38b w1: therm: Fix off-by-one buffer overflow in alarms_store
    fb6fcdc03fce4 w1: w1_therm: use swap() to make code cleaner
    7b94e4650020e arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
    427b0fb30ddec scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
    600894c7a2363 iio: adc: exynos_adc: fix OF populate on driver rebind
    f6b672daaca1c of: platform: Use default match table for /firmware
    16c806d04be13 comedi: Fix getting range information for subdevices 16 to 255
    2b1bef126bbb8 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
    10d1b3cf657d5 net: Add locking to protect skb->dev access in ip_output
    aade7df55e12e mptcp: only reset subflow errors when propagated
    461f1832a6d1c scsi: qla2xxx: edif: Fix dma_free_coherent() size
    f8cd47294b4bf scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
    df13548c0a94f ASoC: fsl: imx-card: Do not force slot width to sample width
    a4181b228db3b dma/pool: distinguish between missing and exhausted atomic pools
    1dd15630fc633 gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
    65ba13a5b3d05 scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
    478873f7324f7 net: bridge: fix static key check
    eaa5da5130ded nfc: nci: Fix race between rfkill and nci_unregister_device().
    1d8ae83e1c61b net/mlx5e: Account for netdev stats in ndo_get_stats64
    138dbe22d8854 net/mlx5e: Report rx_discards_phy via rx_dropped
    ba253d322e536 net/mlx5e: Expose rx_oversize_pkts_buffer counter
    b3f0dab4f9682 net/mlx5: Add HW definitions of vport debug counters
    5b47b402f5833 ice: stop counting UDP csum mismatch as rx_errors
    65e976e1f474a nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
    b11e6f926480a rocker: fix memory leak in rocker_world_port_post_fini()
    9fe793a779ce8 ipv6: use the right ifindex when replying to icmpv6 from localhost
    94ae00a809c07 net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
    2b65e3ae33818 net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
    ccc683f597ceb Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
    feae34c992eb7 bpf: Reject narrower access to pointer ctx fields
    e0ffb64a2d72c bpf: Do not let BPF test infra emit invalid GSO types to stack
    ad97b9a55246e migrate: correct lock ordering for hugetlb file folios
    ef6e608e5ee71 can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
    b5a1ccdc63b71 can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
    40a3334ffda47 can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
    f48eabd15194b can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
    e2f9c751f73a2 irqchip/gic-v3-its: Avoid truncating memory addresses
    ede8ce83c2184 perf/x86/intel: Do not enable BTS for guests
    6e0110ea90313 netrom: fix double-free in nr_route_frame()
    8b57bf1d3b1db uacce: ensure safe queue release with state management
    ebfa85658a39b uacce: implement mremap in uacce_vm_ops to return -EPERM
    1bc3e51367c42 uacce: fix cdev handling in the cleanup path
    64015cbf06e8b intel_th: fix device leak on output open()
    948615429c9f2 slimbus: core: fix device reference leak on report present
    00cf6f7478c9f slimbus: core: fix runtime PM imbalance on report present
    6c77ce4da447a octeontx2: Fix otx2_dma_map_page() error return code
    361df59ad0130 arm64: Set __nocfi on swsusp_arch_resume()
    0d7c9e793e351 wifi: rsi: Fix memory corruption due to not set vif driver data size
    de34a80e0d6ec wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
    fc8da65f9fe1b wifi: ath10k: fix dma_free_coherent() pointer
    c1c758ecd68bf mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
    56fb6efd5d04c ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
    afca7ff5d5d4d ALSA: ctxfi: Fix potential OOB access in audio mixer handling
    029efb5adffb1 iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
    fdc8c835c637a iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
    92a2745aa0f66 iio: adc: ad9467: fix ad9434 vref mask
    fb396ee1bc53a of: fix reference count leak in of_alias_scan()
    d117fdcb21b05 leds: led-class: Only Add LED to leds_list when it is fully ready
    f775881f99fa7 x86: make page fault handling disable interrupts properly
    dd9442aedbeae net/sched: act_ife: avoid possible NULL deref
    669bd7a54e626 octeontx2-af: Fix error handling
    3be945abdd228 bonding: provide a net pointer to __skb_flow_dissect()
    92c6dc181a18e be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
    9d02de4b2fd6d drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
    078c6eef1db5f drm/amd/pm: Don't clear SI SMC table when setting power limit
    b339601c238af usbnet: limit max_mtu based on device's hard_mtu
    4630897eb1a03 ipv6: annotate data-race in ndisc_router_discovery()
    13f3b3b870688 mISDN: annotate data-race around dev->work
    bd495244dec6e net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
    7d203254f04ff net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
    435c3bd709642 ALSA: usb: Increase volume range that triggers a warning
    766e243ae8c8b regmap: Fix race condition in hwspinlock irqsave routine
    e18ce45f5c809 iio: adc: ad7280a: handle spi_setup() errors in probe()
    bea5c8df16866 staging:iio:adc:ad7280a: Register define cleanup.
    7023a74cdb01d x86/kfence: avoid writing L1TF-vulnerable PTEs
    4daf82511496a scsi: storvsc: Process unsupported MODE_SENSE_10
    e85531cefe175 Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
    d303e5d338672 Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
    7b673faac4784 Revert "nfc/nci: Add the inconsistency check between the input data length and count"
    c49b1646cc50f w1: fix redundant counter decrement in w1_attach_slave_device()
    2081f7ba69c7b comedi: dmm32at: serialize use of paged registers
    fee86edf5803f crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
    b8c24cf5268fb net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
    ae810e6a8ac4f net/sched: Enforce that teql can only be used as root qdisc
    70feb16e3fbfb ipvlan: Make the addrs_lock be per port
    36c40a80109f1 l2tp: avoid one data-race in l2tp_tunnel_del_work()
    611ef4bd9c73d fou: Don't allow 0 for FOU_ATTR_IPPROTO.
    8568171dec862 net: fou: use policy and operation tables generated from the spec
    9e470606c4448 net: fou: rename the source for linking
    cef28f55a515b netlink: add a proto specification for FOU
    380a82d36e37d gue: Fix skb memleak with inner IP protocol 0.
    8f4e8887d43d4 amd-xgbe: avoid misleading per-packet error log
    784428ab1889e sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
    72925dbb0c8c7 bonding: limit BOND_MODE_8023AD to Ethernet devices
    e85cf62f75505 net: usb: dm9601: remove broken SR9700 support
    bef3a83a9a67c testptp: Add option to open PHC in readonly mode
    6b32d042aa825 selftest/ptp: update ptp selftest to exercise the gettimex options
    8510559c0fa1e ptp: add testptp mask test
    3d4f2eda35897 selftests/ptp: Add -X option for testing PTP_SYS_OFFSET_PRECISE
    3d58f0709a292 selftests/ptp: Add -x option for testing PTP_SYS_OFFSET_EXTENDED
    3cc43c9b568a5 testptp: Add support for testing ptp_clock_info .adjphase callback
    f33c4d3f4b3f3 testptp: add option to shift clock by nanoseconds
    7d9aa9032d0a9 ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE.
    9c46bf50b676f posix-clock: Store file pointer in struct posix_clock_context
    62a5adf57b56e Fix memory leak in posix_clock_open()
    a006fc4485159 posix-clock: introduce posix_clock_context concept
    dc84036c173cf btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
    41aac90212612 dmaengine: ti: k3-udma: fix device leak on udma lookup
    c933aa74d9f8d dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
    1d8478b31a3da dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
    68ed0d88d1a70 dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
    4532f18e4ab36 dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
    499ddae78c4ba dmaengine: lpc18xx-dmamux: fix device leak on route allocation
    b7bd948f89271 dmaengine: idxd: fix device leaks on compat bind and unbind
    4730f12a192d7 dmaengine: bcm-sba-raid: fix device leak on probe
    4c67b4f45c854 dmaengine: at_hdmac: fix device leak on of_dma_xlate()
    e8758f114a922 drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
    bb309377eece5 drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
    c775abb6cd82a drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
    eda99622e6f39 mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
    c85c550eff812 x86/resctrl: Fix memory bandwidth counter width for Hygon
    fa226f722e2fe x86/resctrl: Add missing resctrl initialization for Hygon
    d35365d8f8888 EDAC/i3200: Fix a resource leak in i3200_probe1()
    123a6bbe87cc1 EDAC/x38: Fix a resource leak in x38_probe1()
    6cf35964a8150 hrtimer: Fix softirq base check in update_needs_ipi()
    6241cd1d0acc2 ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
    e306c64bd2c56 nvme-pci: disable secondary temp for Wodposit WPBSNM8
    2e8ea7257c5fd USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
    7e4c68838c605 USB: serial: option: add Telit LE910 MBIM composition
    23defd20f98f3 USB: OHCI/UHCI: Add soft dependencies on ehci_platform
    14739a3543c8d usb: dwc3: Check for USB4 IP_NAME
    742ff37b51270 phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
    e7e87af627449 phy: rockchip: inno-usb2: fix communication disruption in gadget mode
    53b1ed2f400ee phy: rockchip: inno-usb2: fix disconnection in gadget mode
    b6923f0ffb981 x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
    adabf01c19561 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
    aab3a76c03b7c ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
    7d76380e98bfa HID: usbhid: paper over wrong bNumDescriptor field
    2b29f38f4f966 dmaengine: omap-dma: fix dma_pool resource leak in error paths
    23a52bffe415f phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
    fb9d513cdf161 phy: stm32-usphyc: Fix off by one in probe()
    d8f1e61238799 dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing
    76992310f8077 dmaengine: tegra-adma: Fix use-after-free
    b36b4c0dd281b mm, kfence: describe @slab parameter in __kfence_obj_info()
    ea46adfe5cc03 textsearch: describe @list member in ts_ops search
    209f350326c8d ASoC: tlv320adcx140: fix word length
    cff6cd703f41d net/sched: sch_qfq: do not free existing class in qfq_change_class()
    0badf6ffd2c39 selftests: drv-net: fix RPS mask handling for high CPU numbers
    bf1dfd389b6ae net/mlx5e: Restore destroying state bit after profile cleanup
    014ba8f2953c0 vsock/test: add a final full barrier after run all tests
    8d5b6b2d79c1c ipv4: ip_gre: make ipgre_header() robust
    484919832e2db macvlan: fix possible UAF in macvlan_forward_source()
    45126b1249757 net: update netdev_lock_{type,name}
    64c71d60a21a9 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
    76abc83a9d255 nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
    4fcde4590de2d nvmet-tcp: remove boilerplate code
    97250eb05e4b6 can: etas_es58x: allow partial RX URB allocation to succeed
    27c90d8ed81e7 pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

(From OE-Core rev: 79dfd0a547e1c56e11360c774489bae39ae0c3c1)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Bruce Ashfield
b232dd23d6 linux-yocto/5.15: update to v5.15.198
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    9eec9a14ee10 Linux 5.15.198
    72d750886b21 NFS: add barriers when testing for NFS_FSDATA_BLOCKED
    7981cff2bee1 NFS: unlink/rmdir shouldn't call d_delete() twice on ENOENT
    220a5ee395e0 efi/cper: Fix cper_bits_to_str buffer handling and return value
    b82594248af1 firmware: imx: scu-irq: Set mu_resource_id before get handle
    bbd35608330d scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
    5517e2497d11 ASoC: fsl_sai: Add missing registers to cache default
    c3a4316e3c74 can: j1939: make j1939_session_activate() fail if device is no longer registered
    c618c4ccb79b powercap: fix sscanf() error return value handling
    7b78832aa94f powercap: fix race condition in register_control_type()
    047ea38d41d9 blk-throttle: Set BIO_THROTTLED when bio has been throttled
    7f7080c51410 pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
    3dc4b3bb4e0a pinctrl: qcom: lpass-lpi: Remove duplicate assignment of of_gpio_n_cells
    ef668c9a2261 counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
    e8bfa2401d4c nfsd: provide locking for v4_end_grace
    061158d27c46 NFSD: Remove NFSERR_EAGAIN
    530476199947 nfs_common: factor out nfs_errtbl and nfs_stat_to_errno
    eb204a6d8bad NFS: trace: show TIMEDOUT instead of 0x6e
    393525dee5c3 arp: do not assume dev_hard_header() does not change skb->head
    2caa31d02c73 net: enetc: fix build warning when PAGE_SIZE is greater than 128K
    a40af9a2904a net: usb: pegasus: fix memory leak in update_eth_regs_async()
    0809c4bc06c9 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
    303987beb595 HID: quirks: work around VID/PID conflict for appledisplay
    b4bfc8d26b96 bnxt_en: Fix potential data corruption with HW GRO/LRO
    4248fb36df8d eth: bnxt: move and rename reset helpers
    0e9a7c61978e net/mlx5e: Don't print error message due to invalid module
    ac1fd8362346 netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
    c655d2167bf0 net: sock: fix hardened usercopy panic in sock_recv_errqueue
    bee569f5fcf7 inet: ping: Fix icmp out counting
    8767f238b0e6 net: mscc: ocelot: Fix crash when adding interface under a lag
    bf1ffe5e95bd bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
    8a4333b2818f net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
    c4cde57c8aff netfilter: nf_conncount: update last_gc only when GC has been performed
    92d17b97479c netfilter: nf_tables: fix memory leak in nf_tables_newrule()
    d65b19f34c2a netfilter: nft_synproxy: avoid possible data-race on update operation
    ddd097698d8b ARM: dts: imx6q-ba16: fix RTC interrupt level
    e91cffed1c58 arm64: dts: add off-on-delay-us for usdhc2 regulator
    274dfe3b1801 scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
    ebabaddab72c scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
    5ef4392495a8 NFS: Fix up the automount fs_context to use the correct cred
    f269abad66bd NFSv4: ensure the open stateid seqid doesn't go backwards
    d4d09d18059a alpha: don't reference obsolete termio struct for TC* constants
    8c97b0183923 ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
    df9967c3b757 csky: fix csky_cmpxchg_fixup not working
    b374e9ecc92a ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
    6c94fd068ba2 ext4: introduce ITAIL helper
    5d0dc83cb9a6 libceph: make calc_target() set t->paused, not just clear it
    77229551f2cf libceph: return the handler error from mon_handle_auth_done()
    851241d3f78a libceph: make free_choose_arg_map() resilient to partial allocation
    4b106fbb1c7b libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
    194cfe2af4d2 libceph: prevent potential out-of-bounds reads in handle_auth_done()
    a3827e310b5a wifi: avoid kernel-infoleak from struct iw_point
    6a0cceb1a8b9 drm/pl111: Fix error handling in pl111_amba_probe
    250e1f9f911d lib/crypto: aes: Fix missing MMU protection for AES S-box
    e57137354d85 mei: me: add nova lake point S DID
    6cff14b831db net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
    02b79361cf97 atm: Fix dma_free_coherent() size
    7f696f15c18b usb: gadget: lpc32xx_udc: fix clock imbalance in error path
    c3ba0557ab2e net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
    f3cc921c237c Revert "iommu/amd: Skip enabling command/event buffers for kdump"
    0b956f79b2f8 firmware: arm_scmi: Fix unused notifier-block in unregister
    3079bf04d35f ext4: fix error message when rejecting the default hash
    bfac7e3ff587 ext4: factor out ext4_hash_info_init()
    86b81d4eab1c ext4: filesystems without casefold feature cannot be mounted with siphash
    e1b826e10ff9 pwm: stm32: Always program polarity
    69e4c711d3f5 x86: remove __range_not_ok()
    dd6d10e00cf4 selftests: net: test_vxlan_under_vrf: fix HV connectivity test
    20d3eb00ab81 ipv4: Fix uninit-value access in __ip_make_skb()
    40e5444a3ac3 ipv6: Fix potential uninit-value access in __ip6_make_skb()
    ef2fe0c6353b KVM: arm64: sys_regs: disable -Wuninitialized-const-pointer warning
    eeeaba737919 HID: core: Harden s32ton() against conversion to 0 bits
    5f35099fa3d5 KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
    d69f28ef7cda page_pool: Fix use-after-free in page_pool_recycle_in_ring
    aec6a1be0be1 drm/i915/selftests: fix subtraction overflow bug
    0f55ac683b27 mmc: core: use sysfs_emit() instead of sprintf()
    f51e471cb157 net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
    32ffca069d20 drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
    0a59a3895f80 wifi: mac80211: Discard Beacon frames to non-broadcast address
    7daa50a2157e ASoC: stm32: sai: fix OF node leak on probe
    ecd91855dd4f lockd: fix vfs_test_lock() calls
    86d91420bbe3 powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
    325fd00621d5 mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize()
    ed920d0feafb mm/balloon_compaction: we cannot have isolated pages in the balloon list
    f16e78225eda mm/balloon_compaction: make balloon page compaction callbacks static
    1e3a5fec4917 ASoC: stm32: sai: fix clk prepare imbalance on probe failure
    a93887d284a6 ASoC: stm32: sai: Use the devm_clk_get_optional() helper
    39e5b2de0207 ASoC: stm: Use dev_err_probe() helper
    6009167915d5 r8169: fix RTL8117 Wake-on-Lan in DASH mode
    4c0278938c36 iommu/qcom: fix device leak on of_xlate()
    2e9a95d60f1d powerpc/64s/slb: Fix SLB multihit issue during SLB preload
    374f9984edc8 PCI: brcmstb: Fix disabling L0s capability
    bf03a56d6af9 powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION
    4141049144b3 media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled
    3ccce30e5919 media: samsung: exynos4-is: fix potential ABBA deadlock on init
    75f91534f9ac NFSD: NFSv4 file creation neglects setting ACL
    2e6f384b4e6c media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
    b425cd5bc54e media: vpif_capture: fix section mismatch
    61d19d81485d media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init()
    4dedb6a11243 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
    610ef5893628 KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
    543bf004e4ea crypto: af_alg - zero initialize memory allocated via sock_kmalloc
    a22316f5e9a2 svcrdma: bound check rq_pages index in inline path
    c80b58581fad ARM: dts: microchip: sama7g5: fix uart fifo size to 32
    cbbf3f1bb9f8 fuse: fix readahead reclaim deadlock
    a6c208695220 usb: ohci-nxp: fix device leak on probe failure
    0928573aeccb usb: ohci-nxp: Use helper function devm_clk_get_enabled()
    50ee04e0ae62 mptcp: pm: ignore unknown endpoint flags
    2cf9e72ec9a4 usb: dwc3: keep susphy enabled during exit to avoid controller faults
    72c58a82e6fb f2fs: fix to avoid updating zero-sized extent in extent cache
    671910d2e5b8 f2fs: fix to propagate error from f2fs_enable_checkpoint()
    474cc3ed3743 f2fs: use global inline_xattr_slab instead of per-sb slab cache
    f30ea4a9e793 f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes()
    0e8bddb3e081 xfs: fix a memory leak in xfs_buf_item_init()
    06cad7ba5c7b KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit
    fa2dd45ce8ae NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
    d2f5d8cf1ead ALSA: wavefront: Fix integer overflow in sample size validation
    73d7bfacc5ca ALSA: wavefront: Use standard print API
    151c632b9162 ALSA: wavefront: Clear substream pointers on close
    214a854d0d99 wifi: mt76: Fix DTS power-limits on little endian systems
    8a589c56b0d6 btrfs: don't rewrite ret from inode_permission
    275c686f1e3c tpm: Cap the number of PCR banks
    ed7441ffe3fd jbd2: fix the inconsistency between checksum and data in memory for journal sb
    ee199d259349 xhci: dbgtty: fix device unregister
    4b4315ab4a14 xhci: dbgtty: use IDR to support several dbc instances.
    eee16f3ff08e usb: gadget: udc: fix use-after-free in usb_gadget_state_work
    8b586de6f03c usb: xhci: Apply the link chain quirk on NEC isoc endpoints
    d16a2857ad17 usb: xhci: move link chain bit quirk checks into one helper function.
    86aae7053d2d drm/vmwgfx: Fix a null-ptr access in the cursor snooper
    cfb82ea9cccc virtio_console: fix order of fields cols and rows
    6161d0d62351 kbuild: Use CRC32 and a 1MiB dictionary for XZ compressed modules
    94b45fddc261 mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate()
    554b17dc14d0 mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of()
    77ec39ad0ceb mm/damon/tests/core-kunit: handle memory failure from damon_test_target()
    233409d46dc5 mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two()
    3f7668f4ffd5 mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of()
    db10496b2797 mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at()
    df458acf79c6 mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions()
    c6895612b1e4 mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ()
    5629064f92f0 RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
    483b541b7ee3 mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions()
    5ff02cf6c74d mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail()
    87caa0d35aab drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb
    47a85604a761 drm/ttm: Avoid NULL pointer deref for evicted BOs
    d376aea5f101 drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
    e02a1c33f10a net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
    66d3d821a27f net: usb: sr9700: fix incorrect command used to write single register
    02a02eb93cec nfsd: Drop the client reference in client_states_open()
    96e9b4b4eebe fjes: Add missing iounmap in fjes_hw_init()
    278b7cfe0d4d e1000: fix OOB in e1000_tbi_should_accept()
    abf38398724e RDMA/cm: Fix leaking the multicast GID table reference
    bfe10318fc23 RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
    adca36b7312f idr: fix idr_alloc() returning an ID out of range
    ec9fd10b4803 media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
    d80c606877e3 media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
    3de6afefd37e media: TDA1997x: Remove redundant cancel_delayed_work in probe
    faf38cced019 media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread()
    718fd69207b6 media: cec: Fix debugfs leak on bus_register() failure
    c3548c44c3c2 fbdev: tcx.c fix mem_map to correct smem_start offset
    37fa1e7e4884 fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
    51fd9c20a530 fbdev: gbefb: fix to use physical address instead of dma address
    c9d6fc7d60c6 dm-ebs: Mark full buffer dirty even on partial write
    f913b9a2ccd6 media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
    6a483e56c1ad parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
    0a476ed7bc87 parisc: entry.S: fix space adjustment on interruption for 64-bit userspace
    76bbb99a030f media: rc: st_rc: Fix reset control resource leak
    f69506115f61 mfd: max77620: Fix potential IRQ chip conflict when probing two devices
    ef97d93d0775 mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
    a357f04e6c47 leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
    e24cad510abc leds: leds-lp50xx: Allow LED 0 to be added to module bank
    c9f0eac5745d PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
    f0ae659c9652 HID: logitech-dj: Remove duplicate error logging
    3f50e9dbfe9d iommu/tegra: fix device leak on probe_device()
    157b01742a68 iommu/sun50i: fix device leak on of_xlate()
    fa4e003b8fcf iommu/omap: fix device leaks on probe_device()
    6705d63820c6 iommu/mediatek: fix device leak on of_xlate()
    e6b0e3882ab0 iommu/mediatek-v1: fix device leak on probe_device()
    cadf7c83302f iommu/ipmmu-vmsa: fix device leak on of_xlate()
    f62661f577b3 iommu/exynos: fix device leak on of_xlate()
    ac0c50cc85ed iommu/apple-dart: fix device leak on of_xlate()
    fdb64bba6a46 ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
    d543ddcecc93 ASoC: qcom: q6adm: the the copp device only during last instance
    47587d958185 ASoC: qcom: q6asm-dai: perform correct state check before closing
    938117827bca ASoC: stm32: sai: fix device leak on probe
    d739270d09e0 selftests/ftrace: traceonoff_triggers: strip off names
    1f29db2cfb01 RDMA/bnxt_re: fix dma_free_coherent() pointer
    2d34cffaf8c9 RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
    19682d51e1b6 RDMA/bnxt_re: Fix to use correct page size for PDE table
    b299f01e464d RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
    8165f064641c RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
    af9a938b087d RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
    c8002b3a098a RDMA/efa: Remove possible negative shift
    db93ae6fa66f RDMA/irdma: avoid invalid read in irdma_net_event
    ed2639414d43 net: rose: fix invalid array index in rose_kill_by_device()
    33ff5c207c87 ipv4: Fix reference count leak when using error routes with nexthop objects
    6b7522424529 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
    4cc4cfe4d23c octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
    6b3a6cb3493f net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct
    fc96018f09f8 net: usb: asix: validate PHY address before use
    b3c214ac512e net: dsa: b53: skip multicast entries for fdb_dump()
    d55b060b6c56 firewire: nosy: Fix dma_free_coherent() size
    1fc0c943e445 genalloc.h: fix htmldocs warning
    1c4cb705e733 smc91x: fix broken irq-context in PREEMPT_RT
    2f966186b995 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
    f820e438b8ec team: fix check for port enabled in team_queue_override_port_prio_changed()
    6f935c0f549f platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
    1c423f0fcb08 platform/x86: msi-laptop: add missing sysfs_remove_group()
    41a1a3140aff ip6_gre: make ip6gre_header() robust
    052e5db5be45 net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
    214802e4caaa net: mdio: aspeed: add dummy read to avoid read-after-write issue
    6ff75a5132df net: mdio: aspeed: move reg accessing part into separate functions
    fff9206b0907 Bluetooth: btusb: revert use of devm_kzalloc in btusb
    baf0e2d1e03d crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
    5bb18bfd505c iavf: fix off-by-one issues in iavf_config_rss_reg()
    cfddf4af22a3 i40e: validate ring_len parameter against hardware-specific values
    0daf39ee1e4e i40e: Refactor argument of i40e_detect_recover_hung()
    3fec9e1bad69 i40e: Refactor argument of several client notification functions
    4f28b415a483 i40e: fix scheduling in set_rx_mode
    f7455c5f9218 hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
    bf5b03227f2e hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
    5082cdce4344 hwmon: (max16065) Use local variable to avoid TOCTOU
    ac45b270ea28 i2c: amd-mp2: fix reference leak in MP2 PCI device
    24fd02c3a479 rpmsg: glink: fix rpmsg device leak
    dd86de8f8573 soc: amlogic: canvas: fix device leak on lookup
    5527dde9ff12 soc: qcom: ocmem: fix device leak on lookup
    53693b3268c2 amba: tegra-ahb: Fix device leak on SMMU enable
    5ba8ba12920c drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
    2420ef01b2e8 io_uring: fix filename leak in __io_openat_prep()
    685889472f29 svcrdma: return 0 on success from svc_rdma_copy_inline_range
    8564deae5375 nfsd: Mark variable __maybe_unused to avoid W=1 build break
    859bdf438f01 fsnotify: do not generate ACCESS/MODIFY events on child for special files
    323e203a944b PM: runtime: Do not clear needs_force_resume with enabled runtime PM
    6d15f08e6d8d tracing: Do not register unsupported perf events
    fd4c14c7b772 KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
    d8c44d566187 KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN)
    30c71d9b4d76 KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
    d2da0df7bbc4 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
    6ae727f72be0 KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn()
    fa0c3fbc4bb5 KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0
    145d140abda8 libceph: make decode_pool() more resilient against corrupted osdmaps
    7a146f34e5be parisc: Do not reprogram affinitiy on ASP chip
    cfdf6250b63b scs: fix a wrong parameter in __scs_magic
    e1da6e399df9 platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
    d0fd1f732ea8 ocfs2: fix kernel BUG in ocfs2_find_victim_chain
    12ab6ebb3778 media: vidtv: initialize local pointers upon transfer of memory ownership
    04e5abccf5a3 tools/testing/nvdimm: Use per-DIMM device handle
    0de4977a1eea f2fs: fix return value of f2fs_recover_fsync_data()
    3d95ed8cf980 f2fs: invalidate dentry cache on failed whiteout creation
    45fd86b44410 scsi: target: Reset t_task_cdb pointer in error case
    fc3ab9b2cce5 NFSD: use correct reservation type in nfsd4_scsi_fence_client
    278455a82245 scsi: aic94xx: fix use-after-free in device removal path
    50b097d92c99 scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
    47e7c7496f5a cpufreq: nforce2: fix reference count leak in nforce2
    4f3e0af0d9a8 intel_th: Fix error handling in intel_th_output_open
    d1b045228002 char: applicom: fix NULL pointer dereference in ac_ioctl
    677f382acab1 usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
    439c8d0425bb usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
    43e58abad6c0 usb: phy: isp1301: fix non-OF device reference imbalance
    0c2b0e747010 USB: lpc32xx_udc: Fix error handling in probe
    76b52ed875d5 phy: broadcom: bcm63xx-usbh: fix section mismatches
    424dd7ef4109 media: pvrusb2: Fix incorrect variable used in trace message
    c2305b4c5fc1 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
    d14c800ec300 usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
    0ea5763a6ced media: v4l2-mem2mem: Fix outdated documentation
    048f29c90275 jbd2: use a weaker annotation in journal handling
    a973d037229b ext4: align max orphan file size with e2fsprogs limit
    2930d9cb9cd3 ext4: fix incorrect group number assertion in mb_check_buddy
    331d6f52201b ext4: clear i_state_flags when alloc inode
    3d8d22e75f7e ext4: xattr: fix null pointer deref in ext4_raw_inode()
    ea4e2ad6f612 ktest.pl: Fix uninitialized var in config-bisect.pl
    1c0e2617b51c fs/ntfs3: fix mount failure for sparse runs in run_unpack()
    7f24094db7af floppy: fix for PAGE_SIZE != 4KB
    2f945c9892b0 block: rate-limit capacity change info log
    3c35608d6577 lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
    d685237855bf mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
    3fd7df4636d8 KEYS: trusted: Fix a memory leak in tpm2_load_cmd
    8a69b95bc8c4 vhost/vsock: improve RCU read sections around vhost_vsock_get()
    94476ed97e38 platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks
    4099d8f057f2 nvme-fc: don't hold rport lock when putting ctrl
    8cb8a84f7af3 serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
    db963adebdf5 usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive.
    6ddc1cf758b2 usb: xhci: limit run_graceperiod for only usb 3.0 devices
    58941bbb0050 usb: typec: ucsi: Handle incorrect num_connectors capability
    f3f0303b5330 usbip: Fix locking bug in RT-enabled kernels
    c4034574f87a exfat: fix remount failure in different process environments
    c7b986adc9e9 via_wdt: fix critical boot hang due to unnamed resource allocation
    36fe06f5a292 scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
    8416236b992f scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
    80e898a3c614 scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
    46778b34e021 powerpc/addnote: Fix overflow on 32-bit builds
    c49300043e7b clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
    a5622f46f4fc ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
    92f285834099 firmware: imx: scu-irq: Init workqueue before request mbox channel
    22292508e1c9 ipmi: Fix __scan_channels() failing to rescan channels
    5c7d972756d4 ipmi: Fix the race between __scan_channels() and deliver_response()
    2168866396bd ALSA: usb-mixer: us16x08: validate meter packet indices
    19b626d36aed ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
    9f490d2f5dc9 ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
    c851e43b88b4 net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
    2b4aa7f24820 mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
    9c34a4a2ead0 spi: fsl-cpm: Check length parity before switching to 16 bit mode
    b5e70e7fa904 ACPI: CPPC: Fix missing PCC check for guaranteed_perf
    d16cc7a2b3ed Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table
    136abe173a3c Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
    ac6b3033d1e5 HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
    42c91dfa772c net: hns3: add VLAN id validation before using
    c9bbeca124e9 net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx
    de631a0f9872 net: hns3: Align type of some variables with their print type
    bcefdb288eed net: hns3: using the num_tqps in the vf driver to apply for resources
    42406760b28c net/mlx5: fw_tracer, Handle escaped percent properly
    768d559f466c net/mlx5: fw_tracer, Validate format string parameters
    a59e9812aca1 net/mlx5: fw_tracer, Add support for unrecognized string
    f9dc0f45d2cd ethtool: Avoid overflowing userspace buffer on stats query
    72d1c4a07780 net/ethtool/ioctl: split ethtool_get_phy_stats into multiple helpers
    c8666be7c338 net/ethtool/ioctl: remove if n_stats checks from ethtool_get_phy_stats
    78f0d7353bdf ethtool: use phydev variable
    7bf3910b82f6 nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
    02783a37cb1c net/sched: ets: Remove drr class from the active list if it changes to strict
    c54091eec6fe caif: fix integer underflow in cffrml_receive()
    312d7cd88882 ipvs: fix ipv4 null-ptr-deref in route error path
    e1ac8dce3a89 netfilter: nf_conncount: fix leaked ct in error paths
    a94493dd78b4 broadcom: b44: prevent uninitialized value usage
    3bc2efff20a3 net: openvswitch: fix middle attribute validation in push_nsh() action
    6e367c361a52 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
    9e0a0d9eeb0d mlxsw: spectrum_router: Fix neighbour use-after-free
    194cd36ec05d ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
    c7f6e7cc14df net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
    09efbf54eeae netrom: Fix memory leak in nr_sendmsg()
    e0f859d5035a Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
    ca91db4f8979 btrfs: scrub: always update btrfs_scrub_progress::last_physical
    eb6a4e7e3d04 hfsplus: fix volume corruption issue for generic/073
    d92333c7a358 hfsplus: Verify inode mode when loading from disk
    39e149d58ef4 hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
    1432a4819917 hfsplus: fix volume corruption issue for generic/070
    f6ca2faa3f3e fs/ntfs3: Support timestamps prior to epoch
    3d4e15ef5ccb livepatch: Match old_sympos 0 and 1 in klp_find_func()
    a0f5ffc01af5 cpufreq: s5pv210: fix refcount leak
    08ba2b9983ad ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only
    ecb296286c87 ACPICA: Avoid walking the Namespace if start_node is NULL
    0144d18dd96d x86/ptrace: Always inline trivial accessors
    9019e399684e sched/deadline: only set free_cpus for online runqueues
    fe293b7b0759 btrfs: fix memory leak of fs_devices in degraded seed device path
    b3f937e8912d bpf, arm64: Do not audit capability check in do_jit()
    2ed5e0ca5d9a spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
    36cb73c557d1 spi: tegra210-quad: Fix validate combined sequence
    fcf4ad3208e9 coresight: etm4x: Correct polling IDLE bit
    754512b096b9 netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
    460fd9a9e820 NFS: Fix missing unlock in nfs_unlink()
    434b84ecb8ff ASoC: fsl_xcvr: get channel status data when PHY is not exists
    3cf854cec0eb ALSA: dice: fix buffer overflow in detect_stream_formats()
    ce205e480799 usb: phy: Initialize struct usb_phy list_head
    b3c4465f2519 usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
    8877bbb620a9 ocfs2: fix memory leak in ocfs2_merge_rec_left()
    c5a352071f83 efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
    ec7b34401123 efi/cper: Adjust infopfx size to accept an extra space
    095ebf8277b5 efi/cper: Add a new helper function to print bitmasks
    de9f85fdf7eb dm log-writes: Add missing set_freezable() for freezable kthread
    8d656002fa38 dm-raid: fix possible NULL dereference with undefined raid type
    a9bfe4eb0103 ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
    ceb5dff91c86 ALSA: uapi: Fix typo in asound.h comment
    7f031777be02 dma/pool: eliminate alloc_pages warning in atomic_pool_expand
    d8b52fa40fc8 block: fix comment for op_is_zone_mgmt() to include RESET_ALL
    8fe7de5d1c7f blk-mq: Abort suspend when wakeup events are pending
    f123e1fad3a8 ASoC: ak5558: Disable regulator when error happens
    8cb3ed1b5669 ASoC: ak4458: Disable regulator when error happens
    5a38a44815e0 ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
    97044043d531 platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
    680f72890147 fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
    ba1495aefd22 NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
    1b44528bf4a1 fs_context: drop the unused lsm_flags member
    ce578fbf8e83 Revert "nfs: ignore SB_RDONLY when mounting nfs"
    8e921550cc85 Revert "nfs: clear SB_RDONLY before getting superblock"
    dca481c17f81 Revert "nfs: ignore SB_RDONLY when remounting nfs"
    b6e4e3a08c03 NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
    3dc5156ad61a NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
    e77419cbb547 NFS: Fix the verifier for case sensitive filesystem in nfs_atomic_open()
    19bac87dd821 NFSv4: Add some support for case insensitive filesystems
    3e367777b69c fs/nls: Fix utf16 to utf8 conversion
    2093051b4698 NFS: Avoid changing nlink when file removes and attribute updates race
    777564417810 NFS: don't unhash dentry during unlink/rename
    186072b7a23c NFS: Label the dentry with a verifier in nfs_rmdir() and nfs_unlink()
    5f1bc99ea831 fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
    007408ab8449 pinctrl: single: Fix incorrect type for error return variable
    184146300f78 pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
    8609287a2646 perf tools: Fix split kallsyms DSO counting
    38abf6e931b1 net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
    140e6cd7b092 remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
    0d39bd3ef77a mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
    1d6155900a69 net: stmmac: fix rx limit check in stmmac_rx_zc()
    53bc0ac47f4f netfilter: nft_connlimit: update the count if add was skipped
    b160895d6bc9 netfilter: nf_conncount: rework API to use sk_buff directly
    be69850b461e netfilter: nf_conncount: reduce unnecessary GC
    aea811b4cf6c netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
    9d041a7ba13f regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
    4a79a1d496b9 ASoC: Intel: catpt: Fix error path in hw_params()
    c6035886b9d8 virtio: fix virtqueue_set_affinity() docs
    9410895c0e5f virtio_vdpa: fix misleading return in void function
    a9f01f0776f0 vdpa: Sync calls set/get config/status with cf_mutex
    447092100c7e vdpa: Introduce query of device config layout
    3ca8c7a6f9a0 vdpa: Introduce and use vdpa device get, set config helpers
    eed1541ff09d ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
    c082093313c0 ext4: remove unused return value of __mb_check_buddy
    99e011a78210 ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
    1e8124068c93 drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
    212825c1c8cb ASoC: fsl_xcvr: clear the channel status control memory
    650127b100b1 ASoC: fsl_xcvr: Add support for i.MX93 platform
    c464a9e42def ASoC: fsl_xcvr: Add Counter registers
    9cfb946f51ce RDMA/irdma: Fix data race in irdma_free_pble
    04050bf1a767 RDMA/irdma: Fix data race in irdma_sc_ccq_arm
    5c494997d09e iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
    342b2c26e5ac backlight: lp855x: Fix lp855x.h kernel-doc warnings
    cd01a24b3e52 backlight: led-bl: Add devlink to supplier LEDs
    d0deba37ac85 backlight: led_bl: Take led_access lock when required
    53072791efe8 wifi: ieee80211: correct FILS status codes
    67d15b5ea082 PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
    7547755997b3 staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
    d6c91fc73269 mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
    f57925f0c498 crypto: ccree - Correctly handle return of sg_nents_for_len
    76fc288ce114 selftests/bpf: Improve reliability of test_perf_branches_no_hw()
    1d2e267f4331 selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
    90bb940f1c2f usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
    7b1766b525da usb: dwc2: fix hang during suspend if set as peripheral
    316a067b2769 usb: dwc2: fix hang during shutdown if set as peripheral
    16514b403f0a usb: dwc2: disable platform lowlevel hw resources during shutdown
    5c94f6e84aec usb: chaoskey: fix locking for O_NONBLOCK
    f2f4627b74c1 ima: Handle error code returned by ima_filter_rule_match()
    6a96bd0d9430 wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
    81f087859c97 mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
    68715d885bb6 mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
    d705f1c35080 pwm: bcm2835: Make sure the channel is enabled after pwm_request()
    9a76b3b33e52 drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
    e1c7bb405edc fs/ntfs3: Prevent memory leaks in add sub record
    e910114bdbd8 fs/ntfs3: out1 also needs to put mi
    925e825f0c8e fs/ntfs3: Make ni_ins_new_attr return error
    83177ae96486 fs/ntfs3: Add new argument is_mft to ntfs_mark_rec_free
    d29f1ea12adf fs/ntfs3: Remove unused mi_mark_free
    e0a6dcbb8ce5 powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
    89caaeee8dd9 wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
    01f1e3015a77 NFSD/blocklayout: Fix minlength check in proc_layoutget
    dbeddfaaa3c0 watchdog: wdat_wdt: Fix ACPI table leak in probe function
    dbe2bb24ac4c watchdog: wdat_wdt: Stop watchdog when uninstalling module
    f93b75779dc0 selftests/bpf: Fix failure paths in send_signal test
    cf31d9fc454f ps3disk: use memcpy_{from,to}_bvec index
    4174c6409e51 PCI: keystone: Exit ks_pcie_probe() for invalid mode
    b6fa2843b30f leds: netxbig: Fix GPIO descriptor leak in error paths
    6682d122e88e scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
    b9f141eb4182 ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
    08b93c1c12c6 ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
    3e764e8a055b lib/vsprintf: Check pointer before dereferencing in time_and_date()
    a6189b555ccc clk: renesas: r9a06g032: Fix memory leak in error path
    8368be8a5072 coresight: etm4x: Add context synchronization before enabling trace
    368466234b54 coresight: etm4x: Extract the trace unit controlling
    d4b7290c1b5f coresight-etm4x: add isb() before reading the TRCSTATR
    35d756da2d7e coresight: etm4x: Use Trace Filtering controls dynamically
    53511743c5a8 coresight: etm4x: Save restore TRFCR_EL1
    cd93db1b1b44 nbd: defer config unlock in nbd_genl_connect
    40e6a1ebe430 wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
    14c209835e47 macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
    3061b299fced powerpc/32: Fix unpaired stwcx. on interrupt exit
    79c8a77b1782 ntfs3: init run lock for extend inode
    9794c1a99a3a RDMA/rtrs: server: Fix error handling in get_or_create_srv
    5e9a106883c6 dt-bindings: PCI: amlogic: Fix the register name of the DBI region
    558222badffe dt-bindings: PCI: convert amlogic,meson-pcie.txt to dt-schema
    f0988e776c64 scsi: stex: Fix reboot_notifier leak in probe error path
    d3ba31267591 nbd: defer config put in recv_work
    6b4b2d939537 nbd: partition nbd_read_stat() into nbd_read_reply() and nbd_handle_reply()
    41ecdc2097b1 nbd: clean up return value checking of sock_xmit()
    85db50d9662b regulator: core: disable supply if enabling main regulator fails
    c0763fe31cfe perf/x86/intel: Correct large PEBS flag check
    de33b4593b81 ext4: correct the checking of quota files before moving extents
    8de56b96de2d ext4: minor defrag code improvements
    c23ea1f28855 mfd: da9055: Fix missing regmap_del_irq_chip() in error path
    88db8bb7ed1b spi: tegra210-quad: Fix timeout handling
    f603efe72a28 spi: tegra210-quad: modify chip select (CS) deactivation
    c6d33b46ce13 spi: tegra210-quad: combined sequence mode
    f64a36c44896 spi: tegra210-quad: add new chips to compatible
    036d15dbee1a spi: tegra210-quad: use device_reset method
    5a26b3e8b811 scsi: target: Do not write NUL characters into ASCII configfs output
    43428053153f power: supply: apm_power: only unset own apm_get_power_status
    7158890e3692 power: supply: wm831x: Check wm831x_set_bits() return value
    bf5e04401a10 i3c: master: svc: Prevent incomplete IBI transaction
    763d194b13be i3c: fix refcount inconsistency in i3c_master_register
    fe067c65f760 pinctrl: stm32: fix hwspinlock resource leak in probe function
    9ff4cea267ef x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
    898581813aaf x86: kmsan: don't instrument stack walking functions
    49c6b5e1e7fa kmsan: introduce __no_sanitize_memory and __no_kmsan_checks
    bd4bcf2d97a8 compiler-gcc.h: Define __SANITIZE_ADDRESS__ under hwaddress sanitizer
    4af48d5cb642 sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
    59a797709dcb phy: mscc: Fix PTP for VSC8574 and VSC8572
    3c149ffe83d5 firmware: imx: scu-irq: fix OF node leak in
    9c5c10b32f48 s390/ap: Don't leak debug feature files if AP instructions are not available
    fc09726c9213 s390/smp: Fix fallback CPU detection
    0049c460c57c crypto: hisilicon/qm - restore original qos values
    c13c6e9de91d crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
    5c56bbed31e4 uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
    d27289e628bf arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
    15c09dad9a82 iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
    5fbae4ee1d2a iio: imu: st_lsm6dsx: discard samples during filters settling time
    830c8336db60 iio: imu: st_lsm6dsx: introduce st_lsm6dsx_device_set_enable routine
    0314de967578 inet: Avoid ehash lookup race in inet_ehash_insert()
    1600b14e3c41 rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
    90e23db1a859 ntfs3: Fix uninit buffer allocated by __getname()
    afb144bc8e92 ntfs3: fix uninit memory after failed mi_read in mi_format_new
    7bf22893398e irqchip/qcom-irq-combiner: Fix section mismatch
    50fde089fb8a USB: Fix descriptor count when handling invalid MBIM extended descriptor
    489b2158aec9 drm/vgem-fence: Fix potential deadlock on release
    ea0fd5535b0b drm/panel: visionox-rm69299: Don't clear all mode flags
    ca9388fba50d gpu: host1x: Fix race in syncpt alloc/free
    6b1e45e13546 smack: fix bug: unprivileged task can create labels
    c03cb1116289 staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
    4445adedae77 staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
    7141915bf0c4 comedi: check device's attached status in compat ioctls
    4cde9a7e025c comedi: multiq3: sanitize config options in multiq3_attach()
    f7fa1f4670c3 comedi: c6xdigio: Fix invalid PNP driver unregistration
    606f57e57267 HID: elecom: Add support for ELECOM M-XT3URBK (018F)
    2aa1485eff98 platform/x86: huawei-wmi: add keys for HONOR models
    090003de3f6c platform/x86: acer-wmi: Ignore backlight event
    d8dcf8e8852b pinctrl: qcom: msm: Fix deadlock in pinmux configuration
    aeccd6743ee4 bfs: Reconstruct file type when loading from disk
    93536b1d8478 spi: imx: keep dma request disabled before dma transfer setup
    9106a929628f spi: xilinx: increase number of retries before declaring stall
    e86288cb0a8c USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
    5882a3fe61d3 USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
    c032ddd06fe1 serial: add support of CPCI cards
    999138bc35b8 USB: serial: ftdi_sio: match on interface number for jtag
    141ed16ab9b7 USB: serial: option: move Telit 0x10c7 composition in the right place
    2d5855509140 USB: serial: option: add Telit Cinterion FE910C04 new compositions
    97c9ba42d178 USB: serial: option: add Foxconn T99W760
    b2a5b172dc05 comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
    61e03dc3794e ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
    c228cb699a07 locking/spinlock/debug: Fix data-race in do_raw_write_lock
    43bf001f0fe4 ext4: refresh inline data size before write operations
    ed62fd8c15d4 jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
    5821b648480a Documentation: process: Also mention Sasha Levin as stable tree maintainer
    d76c2063db44 leds: spi-byte: Use devm_led_classdev_register_ext()
    fdcf33b9738c leds: Replace all non-returning strlcpy with strscpy
    799e37e49cb6 drm/i915/selftests: Fix inconsistent IS_ERR and PTR_ERR
    a647db560793 dpaa2-mac: bail if the dpmacs fwnode is not found
    e1d414c5719a xfrm: flush all states in xfrm_state_fini
    1dad653643f2 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
    9f2d85ead8ff Revert "xfrm: destroy xfrm_state synchronously on net exit path"
    4b2c17d0f9be xfrm: delete x->tunnel as we delete x

(From OE-Core rev: 9d8037c4c28478fb8d3686648db423f0261dfe87)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:02 +00:00
Bruce Ashfield
bcf7200a12 linux-yocto/5.15: update to v5.15.197
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    68efe5a6c16a Linux 5.15.197
    3b7841a78357 libbpf: Fix invalid return address register in s390
    46d78c07ce40 libbpf, riscv: Use a0 for RC register
    9e11d30ab096 libbpf: Fix riscv register names
    aadc10434cd1 selftests/bpf: Don't rely on preserving volatile in PT_REGS macros in loop3
    a5d954802bda scsi: pm80xx: Set phy->enable_completion only when we
    f7b814a132c5 Bluetooth: Add more enc key size check
    4df96f1f47a4 usb: typec: ucsi: psy: Set max current to zero when disconnected
    cd5e86e34c66 usb: renesas_usbhs: Fix synchronous external abort on unbind
    bd6a1b29fa31 usb: renesas_usbhs: Convert to platform remove callback returning void
    d146e96fef87 smb: client: fix memory leak in cifs_construct_tcon()
    7ee8f015eb47 mptcp: Fix proto fallback detection with BPF
    dad1e44ed940 mptcp: avoid unneeded subflow-level drops
    5bd1d0ca17f0 selftests: mptcp: join: rm: set backup flag
    85cc2f990287 staging: rtl8712: Remove driver using deprecated API wext
    f22c55a20a2d libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
    05ec43e9a9de libceph: fix potential use-after-free in have_mon_and_osd_map()
    09092269cb76 drm/amd/display: Check NULL before accessing
    c9a315a56da2 drm: sti: fix device leaks at component probe
    6176101b519f USB: serial: option: add support for Rolling RW101R-GL
    6738408111c2 USB: serial: ftdi_sio: add support for u-blox EVK-M101
    593d93b871dc xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
    67192e8cb7f9 usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
    66ac05e7b0d6 usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
    26e9b5da3231 usb: storage: sddr55: Reject out-of-bound new_pba
    4aa7426f5326 USB: storage: Remove subclass and protocol overrides from Novatek quirk
    4ba515dfff7e usb: storage: Fix memory leak in USB bulk transport
    5a1628283cd9 usb: gadget: f_eem: Fix memory leak in eem_unwrap
    7fb4b54bbf07 usb: cdns3: Fix double resource release in cdns3_pci_probe
    a4c4118c2af2 most: usb: fix double free on late probe failure
    1f9ba65b019f serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
    354fb03002da firmware: stratix10-svc: fix bug in saving controller data
    113f10c86d7d slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
    db0835dfac45 thunderbolt: Add support for Intel Wildcat Lake
    5a0dcabc8a14 drivers/usb/dwc3: fix PCI parent check
    ed69c3db499c dm-verity: fix unreliable memory allocation
    6fdcd310f92a can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
    e36369dfa2e7 can: sja1000: fix max irq loop handling
    bd1415efbab5 atm/fore200e: Fix possible data race in fore200e_open()
    19f3ace94943 MIPS: mm: Prevent a TLB shutdown on initial uniquification
    aad9d048a321 iio: accel: bmc150: Fix irq assumption regression
    17a38b85226c iio:common:ssp_sensors: Fix an error handling path ssp_probe()
    57f759d399e7 iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
    5b9790d2009e Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
    891775b1b4ed spi: bcm63xx: fix premature CS deassertion on RX-only transactions
    f231314b64c5 mailbox: mailbox-test: Fix debugfs_create_dir error checking
    b0c4d5135b04 net: atlantic: fix fragment overflow handling in RX path
    05c51c116e0b net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
    0bd2b12b3ca9 net: dsa: sja1105: simplify static configuration reload
    1989e6ecee91 net: dsa: sja1105: Convert to mdiobus_c45_read
    18ef3ad1bb57 net: sxgbe: fix potential NULL dereference in sxgbe_rx()
    3c11ac20b5fd net/mlx5e: Fix validation logic in rate limiting
    58a8e250d5b6 net: aquantia: Add missing descriptor cache invalidation on ATL2
    15d560cdf5b3 platform/x86: intel: punit_ipc: fix memory corruption
    4475bac8224c Bluetooth: SMP: Fix not generating mackey and ltk when repairing
    69c7825df64e can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
    0e2d3a8d9fff Revert "block: don't add or resize partition on the disk with GENHD_FL_NO_PART"
    91db2663893a Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()"
    0b6a100efd9b mptcp: do not fallback when OoO is present
    e2d1ad207174 mptcp: fix a race in mptcp_pm_del_add_timer()
    2cc425276ccb mptcp: fix premature close in case of fallback
    4c3d91386d18 mptcp: fix ack generation for fallback msk
    fab9232b3f27 dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
    444c875c347c ata: libata-scsi: Fix system suspend for a security locked drive
    015b71996269 Input: pegasus-notetaker - fix potential out-of-bounds access
    7bf70ce0a08e Input: remove third argument of usb_maxpacket()
    78acf73dfc30 usb: deprecate the third argument of usb_maxpacket()
    c22cedbc18dd mptcp: Disallow MPTCP subflows from sockmap
    4a4f32f3185a selftests: mptcp: connect: fix fallback note due to OoO
    f3737fc3b8d9 pmdomain: samsung: plug potential memleak during probe
    582f48d22eb5 pmdomain: arm: scmi: Fix genpd leak on provider registration failure
    1d3f3d4c1faf pmdomain: imx: Fix reference count leak in imx_gpc_remove
    890472d6fbf0 net: netpoll: fix incorrect refcount handling causing incorrect cleanup
    e9af27d1880a mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
    e24a45da635b net: qede: Initialize qede_ll_ops with designated initializer
    c993fd02ba47 btrfs: fix crash on racing fsync and size-extending write into prealloc
    bff4d06c38a7 btrfs: add helper to truncate inode items when logging inode
    707d49dd441a Makefile.compiler: replace cc-ifversion with compiler-specific macros
    4c019e93f0e5 uio_hv_generic: Set event for all channels on the device
    80fe72069168 tracing/tools: Fix incorrcet short option in usage text for --threads
    3afeb909c3e2 net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
    75ccdb4afe41 ALSA: usb-audio: fix uac2 clock source at terminal parser
    bb1c19636aed mm/secretmem: fix use-after-free race in fault handler
    2ef178413183 mm/mm_init: fix hash table order logging in alloc_large_system_hash()
    dcf80cb1bf88 kconfig/nconf: Initialize the default locale at startup
    87297ab1e783 kconfig/mconf: Initialize the default locale at startup
    699c6cc0f18e net: tls: Cancel RX async resync request on rcd_delta overflow
    fbbcd769c800 selftests: net: use BASH for bareudp testing
    804b5b8e3545 scsi: core: Fix a regression triggered by scsi_host_busy()
    674329151458 vsock: Ignore signal/timeout on connect() if already established
    ecbb12caf399 net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
    597bbbe023d9 kernel.h: Move ARRAY_SIZE() to a separate header
    ca4452aa69ab platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
    7616e2eee679 s390/ctcm: Fix double-kfree
    f95bef5ba0b8 net: openvswitch: remove never-working support for setting nsh fields
    20d7e6bce8e2 net: dsa: hellcreek: fix missing error handling in LED registration
    ba8d3df04c00 mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
    5fb232c76334 drm/tegra: dc: Fix reference leak in tegra_dc_couple()
    99908e2d6012 mptcp: fix race condition in mptcp_schedule_work()
    7536472a4575 MIPS: Malta: Fix !EVA SOC-it PCI MMIO
    f449a1edd7a1 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
    109afbd88ecc scsi: sg: Do not sleep in atomic context
    60ba31330faf nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
    4ce5218b1012 Input: imx_sc_key - fix memory corruption on unload
    729d21c82c1b Input: cros_ec_keyb - fix an invalid memory access
    630360c6724e be2net: pass wrb_params in case of OS2BMC
    f2e52a9d10d8 exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
    9c58c64ec412 mtd: rawnand: cadence: fix DMA device NULL pointer dereference
    de9dc8cbeea0 HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
    652b24f07bae net/sched: act_connmark: handle errno on tcf_idr_check_alloc
    b70c24827e11 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
    bf51f26c5bcc EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
    76eb3ac2f01a EDAC/altera: Handle OCRAM ECC enable after warm reset
    4b63d3858a1e spi: Try to get ACPI GPIO IRQ earlier
    8af069dc2fbf ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
    217d47255a2e ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
    4cba73c4c892 fs/proc: fix uaf in proc_readdir_de()
    298f1e0694ab ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
    5fb4722507b7 strparser: Fix signed/unsigned mismatch bug
    3b9447e68777 gcov: add support for GCC 15
    b114996a095d NFSD: free copynotify stateid in nfs4_free_ol_stateid()
    d0ee0b42a9c0 HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
    4681960bc0f4 netfilter: nf_tables: reject duplicate device on updates
    cbbe9170ca2a mtd: onenand: Pass correct pointer to IRQ handler
    20067f737dc0 lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
    b69f19244c2b mm/ksm: fix flag-dropping behavior in ksm_madvise
    1a6ed803c4b1 mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
    c4cdd143c359 bpf: Add bpf_prog_run_data_pointers()
    9f282104627b ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
    6ec3bfe0ad73 NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
    709e5c088f9c drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
    bfa4f33f0a43 ASoC: cs4271: Fix regulator leak on probe failure
    ee29c2319ee8 regulator: fixed: fix GPIO descriptor leak on register failure
    5c1fd2b81e13 acpi,srat: Fix incorrect device handle check for Generic Initiator
    9d1d7858fc5b Bluetooth: L2CAP: export l2cap_chan_hold for modules
    8b1551cacb66 hsr: Fix supervision frame sending on HSRv0
    f8706e15710f net_sched: limit try_bulk_dequeue_skb() batches
    5af7ec404e85 net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
    727f158d9a8a net/mlx5e: Fix maxrate wraparound in threshold between units
    37f0680887c5 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
    218b67c8c824 net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
    def0860b2caf net_sched: act_connmark: use RCU in tcf_connmark_dump()
    0d14e8ba20cf net/sched: act_connmark: transition to percpu stats and rcu
    b99642817f60 net: sched: act_connmark: get rid of tcf_connmark_walker and tcf_connmark_search
    6a45a97e0099 net: sched: act: move global static variable net_id to tc_action_ops
    659e94c35a3f wifi: mac80211: skip rate verification for not captured PSDUs
    1040834078ac net: mdio: fix resource leak in mdiobus_register_device()
    51b8f0ab888f tipc: Fix use-after-free in tipc_mon_reinit_self().
    8a695769c1e8 net/smc: fix mismatch between CLC header and proposal
    abb086b9a95d sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
    17ef29586b76 Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
    2f2b940e7fa3 Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
    d566e9a2bfc8 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
    7a6d1e740220 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
    d11c10bce6f4 net: fec: correct rx_bytes statistic for the case SHIFT16 is set
    dd60d0ba60f8 ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
    652585576866 NFS: check if suid/sgid was cleared after a write as needed
    9727b5dc98c3 HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
    d2560884113c NFS4: Fix state renewals missing after boot
    e5d5b4228e05 RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors
    be5a8537b2b9 compiler_types: Move unused static inline functions warning to W=2
    e988634d7aae drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
    7d316c3c9e53 selftests: netdevsim: set test timeout to 10 minutes
    3694a618609b extcon: adc-jack: Cleanup wakeup source only if it was enabled
    d3eaf1052cd8 lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
    3a9f46f5d467 rtc: rx8025: fix incorrect register reference
    38771ab159d9 tracing: Fix memory leaks in create_field_var()
    a304aa581895 bnxt_en: Fix a possible memory leak in bnxt_ptp_init
    25979f34feec bnxt_en: PTP: Refactor PTP initialization functions
    4e6b9004f01d net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
    82b5ddac0843 sctp: Hold sock lock while iterating over address list
    72e3fea68eac sctp: Prevent TOCTOU out-of-bounds write
    ad5ddc33af9f sctp: Hold RCU read lock while iterating over address list
    6618c36f6d86 net: dsa: b53: stop reading ARL entries if search is done
    ae52ba1ad2ed net: dsa: b53: fix enabling ip multicast
    cd8c2419b50b net: dsa: b53: fix resetting speed and pause on forced link
    48df5cc7fd7c net: vlan: sync VLAN features with lower device
    82acad39d05c selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh
    f3903664c883 netdevsim: add Makefile for selftests
    c2ce8d37e49e selftests/net: use destination options instead of hop-by-hop
    32c3e1cbc2e6 selftests/net: fix GRO coalesce test and add ext header coalesce tests
    e4603c1c4fd1 selftests/net: fix out-of-order delivery of FIN in gro:tcp test
    a8d549eb5aca net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
    f8d974a0e8c2 riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
    53c7a2110285 Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
    b345e06f2d35 ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
    676ee2061f72 ceph: add checking of wait_for_completion_killable() return value
    8bff07a8fc0a ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
    1943b69e87b0 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
    6da480c32392 ACPI: property: Return present device nodes only on fwnode interface
    a66596cf5643 9p: sysfs_init: don't hardcode error to ENOMEM
    879f6a7e75c3 cpufreq: tegra186: Initialize all cores to max frequencies
    435b42a10995 9p: fix /sys/fs/9p/caches overwriting itself
    66f257db400a clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
    c50651c205f6 clk: at91: clk-master: Add check for divide by 3
    e7322da6c50f ARM: at91: pm: save and restore ACR during PLL disable/enable
    a02f2dbdd77a rtc: pcf2127: clear minute/second interrupt
    cebc9f5ee3e3 um: Fix help message for ssl-non-raw
    64ef62fb1c4a fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
    f7af3813ccff btrfs: mark dirty extent range for out of bound prealloc extents
    8a139fe903f3 RDMA/hns: Fix wrong WQE data when QP wraps around
    63bb04cda173 RDMA/irdma: Set irdma_cq cq_num field during CQ create
    e8805e90ff0c RDMA/irdma: Remove unused struct irdma_cq fields
    2380d634959a RDMA/irdma: Fix SD index calculation
    cc9ab6e1a375 ACPICA: Update dsmethod.c to get rid of unused variable warning
    15afebb95974 orangefs: fix xattr related buffer overflow...
    c12ebeacfbae page_pool: Clamp pool size to max 16K pages
    2acf073edeb7 exfat: limit log print for IO error
    c70926971b36 ALSA: usb-audio: add mono main switch to Presonus S1824c
    b65ca9708bfb Bluetooth: bcsp: receive data only if registered
    d2850f037c2a Bluetooth: SCO: Fix UAF on sco_conn_free
    d4d90a419b55 net: macb: avoid dealing with endianness in macb_set_hwaddr()
    bb7d0d13c6e1 fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
    b2eef65a3be2 scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
    fa4daf7d11e4 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
    a8a97e0d0b60 NFSv4.1: fix mount hang after CREATE_SESSION failure
    679fd67bac26 NFSv4: handle ERR_GRACE on delegation recalls
    ca806ebc497b remoteproc: qcom: q6v5: Avoid handling handover twice
    e50066336660 sparc/module: Add R_SPARC_UA64 relocation handling
    eb3d29ca0820 PCI: cadence: Check for the existence of cdns_pcie::ops before using it
    c3f99fd7ed17 r8169: set EEE speed down ratio to 1
    826ad86e1270 net: intel: fm10k: Fix parameter idx set but not used
    eb0c150d0279 wifi: ath10k: Fix connection after GTK rekeying
    0f7f34292071 iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
    f878bfd2c14c net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
    a2aa97cde985 jfs: fix uninitialized waitqueue in transaction manager
    46c76cfa17d1 jfs: Verify inode mode when loading from disk
    14b6f0b3cfe2 ipv6: np->rxpmtu race annotation
    318aeeb3f8fe usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
    7a219cbbc9e8 usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
    311df10cca0e allow finish_no_open(file, ERR_PTR(-E...))
    ffae0417168e scsi: lpfc: Define size of debugfs entry for xri rebalancing
    57225d17cd8d scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
    430e3ca0a53d scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
    41cd00665c99 selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
    0ec2cd5c5879 page_pool: always add GFP_NOWARN for ATOMIC allocations
    a58098c6b91c drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
    fd62e1a94cff net/cls_cgroup: Fix task_get_classid() during qdisc run
    45e4e4a8772f udp_tunnel: use netdev_warn() instead of netdev_WARN()
    d276a6c3bb74 selftests: Replace sleep with slowwait
    fbf410aafc85 eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
    ff4cd9564dc3 selftests: Disable dad for ipv6 in fcnal-test.sh
    b16a010338bf x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
    56c832864e5e netfilter: nf_reject: don't reply to icmp error messages
    0858b8e38884 selftests: traceroute: Use require_command()
    9d2e3da0a0e8 media: redrat3: use int type to store negative error codes
    ffb663e41dde net: sh_eth: Disable WoL if system can not suspend
    eab8d5e5e1d0 phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
    04f057e4c156 phy: cadence: cdns-dphy: Enable lower resolutions in dphy
    63eb6730ce06 ntfs3: pretend $Extend records as regular files
    8a8d07553583 net: phy: marvell: Fix 88e1510 downshift counter errata
    0f30019f5a58 drm/msm: make sure to not queue up recovery more than once
    0cf9a50af91f usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
    2dc7bcc0b112 usb: gadget: f_hid: Fix zero length packet transfer
    bb8f9de71c9b iommu/amd: Skip enabling command/event buffers for kdump
    66bcd6c577d8 net: call cond_resched() less often in __release_sock()
    07ae8cc64557 net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
    fdfd91ac1f44 ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
    1452d49956d9 drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
    b4a4bf4b4452 drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
    bda8e00b354a dmaengine: dw-edma: Set status for callback_result
    35e42324c21f dmaengine: mv_xor: match alloc_wc and free_wc
    e12a50e3621f dmaengine: sh: setup_xref error handling
    774e8d44ac88 ptp: Limit time setting of PTP clocks
    48c1d49c64d0 scsi: pm8001: Use int instead of u32 to store error codes
    7ce10ef9a9b6 mips: lantiq: xway: sysctrl: rename stp clock
    e1f79a12bd62 mips: lantiq: danube: add missing device_type in pci node
    a39c88bedb0f mips: lantiq: danube: add missing properties to cpu node
    69f04cdd1a50 media: fix uninitialized symbol warnings
    b751b7f87acb drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
    92071a422131 extcon: adc-jack: Fix wakeup source leaks on device unbind
    62443e7d827a scsi: pm80xx: Fix race condition caused by static variables
    866d93632daa scsi: mpi3mr: Fix controller init failure on fault during queue creation
    9650cd59f4e1 rds: Fix endianness annotation for RDS_MPATH_HASH
    fb4f59e66952 ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
    30cc10a05b22 PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
    38edfa2a5a7a net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
    f80a71a29f2d net: When removing nexthops, don't call synchronize_net if it is not necessary
    d2ee1c7fc9c2 char: misc: Does not request module for miscdevice with dynamic minor
    e14d3af189de usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
    f979f913b99c iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
    ad22eebd7177 drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
    26f6a1dd5d81 media: imon: make send_packet() more robust
    0bf756ae1e69 net: ipv6: fix field-spanning memcpy warning in AH output
    15def75e75a7 bridge: Redirect to backup port when port is administratively down
    a65cbffb0e81 powerpc/eeh: Use result of error_detected() in uevent
    e269b500b23f thunderbolt: Use is_pciehp instead of is_hotplug_bridge
    157b7b41a5d2 net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
    d178723da249 x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
    5ba991865cee drm/tidss: Set crtc modesetting parameters with adjusted mode
    603c103f9e30 drm/tidss: Use the crtc_* timings when programming the HW
    965813f1afaf media: pci: ivtv: Don't create fake v4l2_fh
    556da2856798 drm/amdkfd: return -ENOTTY for unsupported IOCTLs
    e04e3165bc8b selftests/net: Ensure assert() triggers in psock_tpacket.c
    634d43ee1d23 selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
    be80a71699b4 PCI: Disable MSI on RDC PCI to PCIe bridges
    31caf9efba7e drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
    19096bddf873 drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
    b9d1d32766d3 drm/amd/pm: Use cached metrics data on arcturus
    89af20042ea5 drm/amd/pm: Use cached metrics data on aldebaran
    446631df0714 mfd: da9063: Split chip variant reading in two bus transactions
    adde0c657c90 mfd: madera: Work around false-positive -Wininitialized warning
    d7bc1931a256 mfd: stmpe-i2c: Add missing MODULE_LICENSE
    72f7a31793bb mfd: stmpe: Remove IRQ domain upon removal
    fa0d842eea8c tools/power x86_energy_perf_policy: Prefer driver HWP limits
    1c0eb3211e17 tools/power x86_energy_perf_policy: Enhance HWP enable
    87de7b4213c1 tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
    2ba32bd019cf tools/cpupower: Fix incorrect size in cpuidle_state_disable()
    481e609c7854 hwmon: (dell-smm) Add support for Dell OptiPlex 7040
    2617ae62f086 uprobe: Do not emulate/sstep original instruction when ip is changed
    cf3e51d388e1 clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
    39805c732891 cpuidle: Fail cpuidle device registration if there is one already
    7f6993bd3224 tools/cpupower: fix error return value in cpupower_write_sysfs()
    6e9e9558da65 video: backlight: lp855x_bl: Set correct EPROM start for LP8556
    e8cde03de867 nvme-fc: use lock accessing port_state and rport state
    2f4852db87e2 nvmet-fc: avoid scheduling association deletion twice
    75a98126757e tee: allow a driver to allocate a tee_device without a pool
    5a7e2d5d1b68 ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
    13257496a496 mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
    e3f7173df91b power: supply: sbs-charger: Support multiple devices
    a59c9c1370db hwmon: (sbtsi_temp) AMD CPU extended temperature range support
    9545f5ef8258 ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
    799f75a894a6 ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
    2ca16b41e88b irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
    1ba13dde6a45 arc: Fix __fls() const-foldability via __builtin_clzl()
    55cf586b9556 cpufreq/longhaul: handle NULL policy in longhaul_exit
    916f62bf6964 selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
    76ab1edadf69 ACPI: video: force native for Lenovo 82K8
    edc0b38f26fc memstick: Add timeout to prevent indefinite waiting
    9e18372fcf17 mmc: host: renesas_sdhi: Fix the actual clock
    fd031d98081e pinctrl: single: fix bias pull up/down handling in pin_config_set
    13ce905f0777 bpf: Don't use %pK through printk
    49be75e00d21 soc: ti: pruss: don't use %pK through printk
    ed7b7fbf2d5f spi: loopback-test: Don't use %pK through printk
    d06bbd6f5cd8 soc: qcom: smem: Fix endian-unaware access of num_entries
    9a0d4017a138 soc: aspeed: socinfo: Add AST27xx silicon IDs
    04dde9a7cb73 block: make REQ_OP_ZONE_OPEN a write operation
    6abeff03cb79 drm/sysfb: Do not dereference NULL pointer in plane reset
    afd6e9fe377f drm/sched: Fix race in drm_sched_entity_select_rq()
    9ec40fba7357 usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
    e6f1413b1cfb Revert "docs/process/howto: Replace C89 with C11"
    518eadd15f7e arch: back to -std=gnu89 in < v5.18
    f28b14d235a8 x86/boot: Compile boot code with -std=gnu11 too
    8050bbc2a2b9 xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
    fe9092c42877 xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
    79d7094ecd75 xhci: dbc: Improve performance by removing delay in transfer event polling.
    2f5c3743466f xhci: dbc: Allow users to modify DbC poll interval via sysfs
    d596d39e16e3 xhci: dbc: poll at different rate depending on data transfer activity
    902f900b46e9 xhci: dbc: Provide sysfs option to configure dbc descriptors
    42ccfa662c2e x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
    12a895faa0c9 net: phy: dp83867: Disable EEE support as not implemented
    56612e80a80b can: gs_usb: increase max interface to U8_MAX
    941285def6f6 net: ravb: Enforce descriptor type ordering
    6664de2a13b5 ravb: Exclude gPTP feature support for RZ/G2L
    381eb91874a6 dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
    bfb5e825c206 serial: 8250_dw: handle reset control deassert error
    3299a39f9a09 serial: 8250_dw: Use devm_add_action_or_reset()
    d979639f099c regmap: slimbus: fix bus_context pointer in regmap init calls
    c5279b8c91c9 block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
    c674a191ada3 drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
    f64e5bdde3be drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
    ca8cc1ae1425 drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
    e5e712518b29 net: hns3: return error code when function fails
    8814f060d364 drm/etnaviv: fix flush sequence logic
    43005002b60e usbnet: Prevents free active kevent
    18652ab01a20 libbpf: Fix powerpc's stack register definition in bpf_tracing.h
    e5996b15ab1d libbpf: Normalize PT_REGS_xxx() macro definitions
    82a674170040 riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h
    9450d2fe01d0 bpf: Do not audit capability check in do_jit()
    de2ce6b14bc3 bpf: Sync pending IRQ work before freeing ring buffer
    29b6987bdea3 ALSA: usb-audio: fix control pipe direction
    ea48293df43b drm/msm/a6xx: Fix GMU firmware parser
    488f3206325e wifi: ath10k: Fix memory leak on unsupported WMI command
    641e47ea2831 ASoC: qdsp6: q6asm: do not sleep while atomic
    cca3958c5565 mptcp: restore window probe
    90d835caf3eb fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
    9c78e8179a14 fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
    55f60a72a178 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
    db5c9a162d2f fbdev: bitblit: bound-check glyph index in bit_putcs*
    bc78a4f51d54 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
    4b05bd1d75d3 fbdev: atyfb: Check if pll_ops->init_pll failed
    c7bf258321a1 net: usb: asix_devices: Check return value of usbnet_get_endpoints
    375fdd8993ce NFSD: Fix crash in nfsd4_read_release()
    5fa8b4382c01 btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
    5a6f9727ae78 btrfs: always drop log root tree reference in btrfs_replay_log()
    f5c926c9e7fe btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
    a740e71c2344 x86/bugs: Fix reporting of LFENCE retpoline
    1bed56f089f0 net/sched: sch_qfq: Fix null-deref in agg_dequeue

(From OE-Core rev: 873cfb3c627738d4ab03eb3a5e1e3fb42f9f32b9)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Bruce Ashfield
ff90622dfc linux-yocto/5.15: update to v5.15.196
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    cc5ec87693063 Linux 5.15.196
    59c78e8fddc1f PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
    83a563fab563f net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg
    c5d116862dd3e usb: gadget: f_acm: Refactor bind path to use __free()
    185193a4714aa usb: gadget: f_ncm: Refactor bind path to use __free()
    d44e82f46cd0e usb: gadget: Introduce free_usb_request helper
    97fc7aa654e30 usb: gadget: Store endpoint pointer in usb_request
    02fbea0864fd4 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
    9b82da54a0305 xfs: always warn about deprecated mount options
    b57a3760d12bd devcoredump: Fix circular locking dependency with devcd->mutex.
    11300f645870a PCI: tegra194: Reset BARs when running in PCIe endpoint mode
    61d6249ea441b PCI: rcar-host: Drop PMSR spinlock
    9e14fb714ebf5 PCI: rcar: Finish transition to L1 state in rcar_pcie_config_access()
    97ab6a90c72d9 PCI: tegra194: Handle errors in BPMP response
    13981b0555ab4 f2fs: fix wrong block mapping for multi-devices
    ba88a53d7f5df NFSD: Define a proc_layoutcommit for the FlexFiles layout type
    8004d4b8cbf1b vfs: Don't leak disconnected dentries on umount
    0157c469edac2 drm/amdgpu: use atomic functions with memory barriers for vm fault info
    c6fa15fa94016 PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
    0e143e87264db wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
    ddcfc52965c19 PCI: j721e: Fix programming sequence of "strap" settings
    2ddb51e228192 PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
    cfd1aa3e2b71f fuse: fix livelock in synchronous file put from fuseblk workers
    a39f70d63f437 fuse: allocate ff->release_args only if release is needed
    6012804a77860 padata: Reset next CPU when reorder sequence wraps around
    38d702a06487c iio: imu: inv_icm42600: Simplify pm_runtime setup
    be16df3c3c5dd PM: runtime: Add new devm functions
    0f9f51390c866 iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
    f35ab1ba853ab iio: imu: inv_icm42600: use = { } instead of memset()
    8e69c8f3ae1c5 NFSD: Fix last write offset handling in layoutcommit
    0570c78e6c707 NFSD: Minor cleanup in layoutcommit processing
    68d615f4b00ab NFSD: Rework encoding and decoding of nfsd4_deviceid
    2dc2bc27578c3 xfs: fix log CRC mismatches between i386 and other architectures
    71f9402044636 xfs: rename the old_crc variable in xlog_recover_process
    6e7f06895db6e s390/cio: Update purge function to unregister the unused subchannels
    dc9f91f849860 arm64: errata: Apply workarounds for Neoverse-V3AE
    a6ef05314d5a8 arm64: cputype: Add Neoverse-V3AE definitions
    1bff561ebe700 serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
    ad2be44882716 most: usb: hdm_probe: Fix calling put_device() before device initialization
    578eb18cd111a most: usb: Fix use-after-free in hdm_disconnect
    cee4ab233f895 mei: me: add wildcat lake P DID
    2670932f24657 comedi: fix divide-by-zero in comedi_buf_munge()
    97a71d277e759 binder: remove "invalid inc weak" check
    55c7290b1a2af xhci: dbc: enable back DbC in resume if it was enabled before suspend
    6d0edbdb0bf72 usb: raw-gadget: do not limit transfer length
    f9bfb3fc7ffa3 usb/core/quirks: Add Huawei ME906S to wakeup quirk
    1a5afa2b586ee USB: serial: option: add Telit FN920C04 ECM compositions
    443bc87ec125a USB: serial: option: add Quectel RG255C
    57bb21f4e7b1d USB: serial: option: add UNISOC UIS7720
    2c651b835b9f6 net: ravb: Ensure memory write completes before ringing TX doorbell
    a63ab2c3c48a2 net: usb: rtl8150: Fix frame padding
    09bba278ccde2 vsock: fix lock inversion in vsock_assign_transport()
    93b1ab422f196 ocfs2: clear extent cache after moving/defragmenting extents
    f2ef52fbdc5f0 MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
    5666bcc3c00f7 Revert "cpuidle: menu: Avoid discarding useful information"
    f49962e51a428 net: bonding: fix possible peer notify event loss or dup issue
    03e80a4b04ef1 sctp: avoid NULL dereference when chunk data buffer is missing
    8a2375b0e9b89 arm64, mm: avoid always making PTE dirty in pte_mkwrite()
    c42dbdcde7220 dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
    00daafde87d2e net: enetc: correct the value of ENETC_RXB_TRUESIZE
    e7a8c57671a1f rtnetlink: Allow deleting FDB entries in user namespace
    bde6afe89ac15 net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del
    7cd416cc0220c net: add ndo_fdb_del_bulk
    31017cda9928e net: rtnetlink: add bulk delete support flag
    a36130f7921c9 net: netlink: add NLM_F_BULK delete request modifier
    40ffa6a8c1907 net: rtnetlink: use BIT for flag values
    fc69b00561e49 net: rtnetlink: add helper to extract msg type's kind
    a6c202c341624 m68k: bitops: Fix find_*_bit() signatures
    1701af4d10b4f hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
    2a112cdd66f5a hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
    450ac1c490f8d dlm: check for defined force value in dlm_lockspace_release
    9df3c241fbf69 hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
    418e48cab99c5 hfs: validate record offset in hfsplus_bmap_alloc
    c135b8dca6552 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
    725522af093ff hfs: make proper initalization of struct hfs_find_data
    b92904866b9f3 hfs: clear offset and space out of valid records in b-tree node
    25f09699edd36 nios2: ensure that memblock.current_limit is set when setting pfn limits
    45ec13d6ce557 exec: Fix incorrect type for ret
    3324e5e3ac97a Revert "perf test: Don't leak workload gopipe in PERF_RECORD_*"
    ae9ad3b673252 PCI/sysfs: Ensure devices are powered for config reads (part 2)
    7ab44236b32ed hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
    736159f7b296d ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
    3c77e994e4ecd ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
    fdccb3adc59d7 sched/fair: Fix pelt lost idle time detection
    15fda76f7a57a sched/balancing: Rename newidle_balance() => sched_balance_newidle()
    343e991e2596a drm/amd/powerplay: Fix CIK shutdown temperature
    d38aec7cd3502 riscv: kprobes: Fix probe address validation
    6a90c8381c333 net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
    50b2fb48a4733 net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
    a6b33d9edf260 net: usb: use eth_hw_addr_set() instead of ether_addr_copy()
    bab04baafc1c5 tls: don't rely on tx_work during send()
    09b1c01df5d46 tls: always set record_type in tls_process_cmsg
    669d389ed231b tls: wait for async encrypt in case of error during latter iterations of sendmsg
    2cb75c87428e0 net: tls: wait for async completion on last message
    4de9057aebb15 splice, net: Add a splice_eof op to file-ops and socket-ops
    01abf7b445062 tg3: prevent use of uninitialized remote_adv and local_adv variables
    c43fe40e67d69 tcp: fix tcp_tso_should_defer() vs large RTT
    14c9047ad5165 amd-xgbe: Avoid spurious link down messages during interface toggle
    402b6985e872b net/ip6_tunnel: Prevent perpetual tunnel growth
    1095322a7e014 r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
    5b9c949c66846 doc: fix seg6_flowlabel path
    06477bbe26e04 net: dlink: handle dma_map_single() failure properly
    97760193e892b can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
    aca91cae0c917 dax: skip read lock assertion for read-only filesystems
    77711d850bed7 HID: multitouch: fix sticky fingers
    a510364e8cac0 cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
    9699fd9e13df2 crypto: rockchip - Fix dma_unmap_sg() nents value
    df808a1f1550b drm/exynos: exynos7_drm_decon: remove ctx->suspended
    d6a3c53eebd1f drm/exynos: exynos7_drm_decon: properly clear channels during bind
    0e212fdcea59c drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
    4b354a29166a3 blk-crypto: fix missing blktrace bio split events
    5918d914a3a67 media: lirc: Fix error handling in lirc_register()
    ddb9a92a999b6 media: rc: Directly use ida_free()
    723e7084497ef media: s5p-mfc: remove an unused/uninitialized variable
    78f6eaf14fe3d btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
    2e9e10657b041 ext4: detect invalid INLINE_DATA + EXTENTS flag combination
    14476553253b2 jbd2: ensure that all ongoing I/O complete before freeing blocks
    34033f75d0ccb r8152: add error handling in rtl8152_driver_init

(From OE-Core rev: 35316957236f12cda3a164d85177ecb4dc5fa434)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Bruce Ashfield
f1a1393dd0 linux-yocto/5.15: update to v5.15.195
Updating linux-yocto/5.15 to the latest korg -stable release that comprises
the following commits:

    ac56c046adf41 Linux 5.15.195
    636e7d6bdf205 selftests: mptcp: join: validate C-flag + def limit
    4b9b376856a95 mptcp: pm: in-kernel: usable client side with C-flag
    946771c2a2b11 mm/slab: make __free(kfree) accept error pointers
    81d0664bed91a media: pci: ivtv: Add check for DMA map result
    71285c029dcc4 xen/events: Update virq_to_irq on migration
    9c1df18612fbb media: pci: ivtv: Add missing check after DMA map
    66c8a83bf1de2 media: pci/ivtv: switch from 'pci_' to 'dma_' API
    55a954a54ffc8 arm64: mte: Do not flag the zero page as PG_mte_tagged
    26ea9b6a93a54 media: cx18: Add missing check after DMA map
    cb044864188cc media: switch from 'pci_' to 'dma_' API
    9339cf38762ce writeback: Avoid excessively long inode switching times
    6483eabc195dc writeback: Avoid softlockup when switching many inodes
    9b902f370b93e cramfs: Verify inode mode when loading from disk
    5c64e8be2a7ef fs: Add 'initramfs_options' to set initramfs mount options
    c3b654021931d pid: Add a judgment for ns null in pid_nr_ns
    1d144b4cdde08 minixfs: Verify inode mode when loading from disk
    3fb4c19233a0e minmax.h: remove some #defines that are only expanded once
    092036da9b6d5 minmax.h: simplify the variants of clamp()
    64394017d091a minmax.h: move all the clamp() definitions after the min/max() ones
    4942fcc84a1ee minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
    5011c410f9670 minmax.h: reduce the #define expansion of min(), max() and clamp()
    b7ae5d8baa5ca minmax.h: update some comments
    2524736951b23 minmax.h: add whitespace around operators and after commas
    82b39b1090b0e minmax: fix up min3() and max3() too
    b1094b4b54b0f minmax: improve macro expansion and type checking
    3854a23090858 minmax: simplify min()/max()/clamp() implementation
    89f6bf22d039a minmax: don't use max() in situations that want a C constant expression
    e035ca130ff7f minmax: make generic MIN() and MAX() macros available everywhere
    4b5dda7f8b02a minmax: simplify and clarify min_t()/max_t() implementation
    3d1169785a9c1 minmax: add a few more MIN_T/MAX_T users
    e73a9333cdaee minmax: avoid overly complicated constant expressions in VM code
    9ed1e4221cb67 minmax: fix indentation of __cmp_once() and __clamp_once()
    d16b73f6c5939 minmax: deduplicate __unconst_integer_typeof()
    e3774f3281ed1 minmax: Introduce {min,max}_array()
    9c88de0e0c1e5 arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
    d238fee82dd83 btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
    f2bd5493ef501 fscontext: do not consume log entries when returning -EMSGSIZE
    f550466949e82 locking: Introduce __cleanup() based infrastructure
    a0e54bd8d7ea7 dm: fix NULL pointer dereference in __dm_suspend()
    95dd33361061f tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
    41acc922c7811 ksmbd: fix error code overwriting in smb2_get_info_filesystem()
    71a0ba7fdaf8d net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
    32097a08ab5de mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
    21d79eac5f953 mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
    715f4914fdd3e mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
    5d327391f9faf media: mc: Clear minor number before put device
    fbfc745db628d Squashfs: reject negative file sizes in squashfs_read_inode()
    2ec88c3d9f8fe Squashfs: add additional inode sanity checking
    49f3a867d948c ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
    44cee8ef325c0 ASoC: codecs: wcd934x: Simplify with dev_err_probe
    e0ce3ed1048a4 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
    6836714a08756 lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
    a4e7273a45e85 ext4: free orphan info with kvfree
    505e69f76ac49 ext4: guard against EA inode refcount underflow in xattr update
    b975b3607605f ext4: correctly handle queries for metadata mappings
    32702f1ce389f ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
    95a21611b14ae ext4: verify orphan file size is not too big
    550e0bccec100 nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
    8c5b1200596ce NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
    735457683e235 mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
    fff24a9c116d2 x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
    46a986888a149 x86/umip: Check that the instruction opcode is at least two bytes
    eaa16de419692 spi: cadence-quadspi: Flush posted register writes before DAC access
    5a6c760bc332f spi: cadence-quadspi: Flush posted register writes before INDAC access
    f104a67b28053 PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
    870457e7b7229 PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
    5533169bb2539 PCI/AER: Support errors introduced by PCIe r6.0
    09adece72b8c8 PCI/AER: Fix missing uevent on recovery when a reset is requested
    1f06b4864177b PCI/ERR: Fix uevent on failure to recover
    a645ca21de09e PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
    690f307a81954 PCI/sysfs: Ensure devices are powered for config reads
    b167bfa432e3c rseq/selftests: Use weak symbol reference, not definition, to link with glibc
    aaaa92ab55f13 rtc: interface: Fix long-standing race when setting alarm
    fa1bdbefe1f46 rtc: interface: Ensure alarm irq is enabled when UIE is enabled
    c19b29291f21c memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
    e5caecea44a7a mmc: core: SPI mode remove cmd7
    e614975f9b5df mtd: rawnand: fsmc: Default to autodetect buswidth
    971009a25fb8b sparc: fix error handling in scan_one_device()
    365282fc60155 sparc64: fix hugetlb for sun4u
    1cd60e0d0fb8f sctp: Fix MAC comparison to be constant-time
    d906e61d4d81b scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
    9ee5eb3d09217 pwm: berlin: Fix wrong register in suspend/resume
    40c86afc81b51 powerpc/pseries/msi: Fix potential underflow and leak issue
    7bb05500a3ad3 powerpc/powernv/pci: Fix underflow and leak issue
    aa18f55365e93 nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
    6195d15fe4888 parisc: don't reference obsolete termio struct for TC* constants
    ef84ddf89dab4 openat2: don't trigger automounts with RESOLVE_NO_XDEV
    c2b88b66bc359 lib/genalloc: fix device leak in of_gen_pool_get()
    4ce6902cc67d7 KEYS: trusted_tpm1: Compare HMAC values in constant time
    e94c99c026179 iommu/vt-d: PRS isn't usable if PDS isn't supported
    d202d1ac609bc iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
    3ed42a6686f4f init: handle bootloader identifier in kernel parameters
    06d81ce319242 iio: frequency: adf4350: Fix prescaler usage.
    0016356ebd6a3 iio: dac: ad5421: use int type to store negative error codes
    c71fd8dcb7ae6 iio: dac: ad5360: use int type to store negative error codes
    8df273ef0f5ad fs/ntfs3: Fix a resource leak bug in wnd_extend()
    459d819648fe6 crypto: atmel - Fix dma_unmap_sg() direction
    ad4e8f9bdbef1 cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
    83b594504d64f copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
    816bb8b4e5c46 bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
    d3a9a8e1275eb btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
    184b0aab791a5 drm/nouveau: fix bad ret code in nouveau_bo_move_prep
    a812fc67d8855 media: i2c: mt9v111: fix incorrect type for ret
    e57d98c02ec84 firmware: meson_sm: fix device leak at probe
    0c2ac5a03a209 xen/manage: Fix suspend error path
    6f8e37bff9119 xen/events: Cleanup find_virq() return codes
    846f911295b2a ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
    267801317911b arm64: dts: qcom: msm8916: Add missing MDSS reset
    3a0f197dd8e5f ACPI: debug: fix signedness issues in read/write helpers
    85580cbac5d4b ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
    e28616ca3d67e bpf: Avoid RCU context warning when unpinning htab with internal structs
    28112b3d86b15 gpio: wcd934x: mark the GPIO controller as sleeping
    512aa949666ef gpio: wcd934x: Remove duplicate assignment of of_gpio_n_cells
    33e49de5dc09b tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
    df58651968f82 crypto: essiv - Check ssize for decryption and in-place encryption
    4331a0ba2d15c bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
    fa391f17a819f drm/amd/display: Properly disable scaling on DCE6
    cc857ceb2b3b4 drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
    736153f3c4933 drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
    32ee65934d6b7 drm/amdgpu: Add additional DCE6 SCL registers
    057764172fcc6 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
    b2986d63303d3 mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
    e3602ddfcc2f9 mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
    325425b0d066f tools build: Align warning options with perf
    b1d073728ef60 net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
    eb85ad5f23268 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
    dbceedc0213e7 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
    4c918f9d1cccc drm/vmwgfx: Fix Use-after-free in validation
    fb5df8006adde drm/vmwgfx: Copy DRM hash-table code into driver
    4139b1e435e3f s390/cio: unregister the subchannel while purging
    2dbf27f672c03 net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
    6ba7e73cafd15 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
    c1f8a7e6efe58 scsi: mvsas: Use sas_task_find_rq() for tagging
    77798c6e94fd2 scsi: mvsas: Delete mvs_tag_init()
    43c3e8ce2f5f0 scsi: libsas: Add sas_task_find_rq()
    9ecd496233772 cpufreq: tegra186: Set target frequency for all cpus in policy
    bb78ef6dc7470 clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
    7d9eee92ed67a clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
    b7e5c59f3b097 perf test: Don't leak workload gopipe in PERF_RECORD_*
    24e296d087f7d perf session: Fix handling when buffer exceeds 2 GiB
    3e97394445a0f rtc: x1205: Fix Xicor X1205 vendor prefix
    8dac32c17b01c perf util: Fix compression checks returning -1 as bool
    250cd976bbda0 clk: at91: peripheral: fix return value
    fcb3b7c30486d libperf event: Ensure tracing data is multiple of 8 sized
    1450bbb0ccd7f perf evsel: Avoid container_of on a NULL leader
    2977f02ee25a1 iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
    86e23d78ec177 clocksource/drivers/clps711x: Fix resource leaks in error paths
    ed43bf13a6ac8 fs: always return zero on success from replace_fd()
    70322caf9f193 usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
    8a4dd74fe413d bus: fsl-mc: Check return value of platform_get_resource()
    d77ef2f621cd1 pinctrl: check the return value of pinmux_ops::get_function_name()
    e63aade22a33e Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
    9eed157e5e27f Input: atmel_mxt_ts - allow reset GPIO to sleep
    972cbba5cd384 nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
    547e123e9d342 mm: hugetlb: avoid soft lockup when mprotect to large memory area
    26b1bfbd84172 ext4: fix checks for orphan inodes
    3901ae3c75a11 mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
    8fcc7315a10a8 net: nfc: nci: Add parameter validation for packet data
    1d1847812a1a5 fs: udf: fix OOB read in lengthAllocDescs handling
    a44f61f878f32 uio_hv_generic: Let userspace take care of interrupt mask
    61d38b5ce2782 Squashfs: fix uninit-value in squashfs_get_parent
    21c58835634df Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
    5aa9b88560281 net: dlink: handle copy_thresh allocation failure
    7973555560eb0 net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
    3fa52104e4797 nfp: fix RSS hash key size when RSS is not supported
    0eddc0e5aebcc drivers/base/node: fix double free in register_one_node()
    827c8efa0d1af ocfs2: fix double free in user_cluster_connect()
    d76b099011fa0 hwrng: ks-sa - fix division by zero in ks_sa_rng_init
    eb682b765533d Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
    54f8ef1a970a8 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
    5c06bc0b44ed8 RDMA/siw: Always report immediate post SQ errors
    8f67d2506f0ca usb: vhci-hcd: Prevent suspending virtually attached devices
    a89253eb4e648 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
    1d79471414d7b ipvs: Defer ip_vs_ftp unregister during netns cleanup
    eb5da8e9db25a NFSv4.1: fix backchannel max_resp_sz verification check
    cef047e0a55cb coresight: trbe: Return NULL pointer for allocation failures
    0e9ec3bab4622 remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
    58ce0b1bc2711 sparc: fix accurate exception reporting in copy_{from,to}_user for M7
    b43c208c40179 sparc: fix accurate exception reporting in copy_to_user for Niagara 4
    37547d8e6eba8 sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
    1857cdca12c4a sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
    59424dc0d0e04 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
    4acb786042da4 wifi: ath10k: avoid unnecessary wait for service ready message
    c6d3da43b8540 Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
    c15829a1fb0b0 IB/sa: Fix sa_local_svc_timeout_ms read race
    d77fb0bdce411 RDMA/core: Resolve MAC of next-hop device without ARP support
    77edaeb4dde29 Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
    523d184a495be scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
    ce75dfd1748e7 scsi: qla2xxx: edif: Fix incorrect sign of error code
    54ded576045ef ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
    248776651cef4 wifi: mt76: fix potential memory leak in mt76_wmac_probe()
    795c8dbc82827 RDMA/cm: Rate limit destroy CM ID timeout error message
    1bdb3bc5bfd33 drivers/base/node: handle error properly in register_one_node()
    eeeaa4b5a5f52 watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
    6a9c2fcf6de54 netfilter: ipset: Remove unused htable_bits in macro ahash_region
    581ba44117ed7 iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
    f6b36cfd25cba fs: ntfs3: Fix integer overflow in run_unpack()
    95e29db33b5f7 ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
    dea9c8c9028c9 ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
    fbd79072f1cab ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
    125527db41805 pps: fix warning in pps_register_cdev when register device fail
    f77e91b4283b5 misc: genwqe: Fix incorrect cmd field being reported in error
    c2024c8abd742 usb: gadget: configfs: Correctly set use_os_string at bind
    fe9fdc066c8cf usb: phy: twl6030: Fix incorrect type for ret
    650368aacbc78 drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
    82448110ee625 tcp: fix __tcp_close() to only send RST when required
    14ebe743b9647 PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
    94aa9bf2ddfcb wifi: mwifiex: send world regulatory domain to driver
    8b3589d7a763a drm/amdgpu: Power up UVD 3 for FW validation (v2)
    e00d07d780b3d ALSA: lx_core: use int type to store negative error codes
    39d0e7fd73efb media: rj54n1cb0c: Fix memleak in rj54n1_probe()
    916c7891b59b9 scsi: myrs: Fix dma_alloc_coherent() error check
    eef5ef400893f scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
    e0e0ce06f3571 usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
    2cd9c97ad5529 drm/radeon/r600_cs: clean up of dead code in r600_cs
    666da97c49c2d i2c: designware: Add disabling clocks when probe fails
    90fb83f7863b6 i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
    31660d4d93057 thermal/drivers/qcom/lmh: Add missing IRQ includes
    32240232b2a3b thermal/drivers/qcom: Make LMH select QCOM_SCM
    ae7b1443f4746 tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
    0b515a2839980 smp: Fix up and expand the smp_call_function_many() kerneldoc
    6d8b1a21fd5c3 bpf: Explicitly check accesses to bpf_sock_addr
    e822f368f758a selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
    7ac8f7a186451 i3c: master: svc: Recycle unused IBI slot
    11269c08013f4 nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
    ebf97395b0a0b pwm: tiehrpwm: Fix corner case in clock divisor calculation
    cc2b2a8c18a96 arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
    3c8ceb2d4dbdb firmware: firmware: meson-sm: fix compile-test default
    5cfaadc902249 pinctrl: renesas: Use int type to store negative error codes
    45052d922054c PM: sleep: core: Clear power.must_resume in noirq suspend error path
    22863772e94fd block: use int to store blk_stack_limits() return value
    a04120b2d187b regulator: scmi: Use int type to store negative error codes
    2927ef93169a0 ARM: at91: pm: fix MCKx restore routine
    4b97e99b87a77 blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
    29db98243205b pinctrl: meson-gxl: add missing i2c_d pinmux
    8b063076fa7e1 soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
    1955c776a6077 ACPI: processor: idle: Fix memory leak when register cpuidle device failed
    ce780f740cf44 cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
    3a502b0eefcfc libbpf: Fix reuse of DEVMAP
    c6552fac71990 regmap: Remove superfluous check for !config in __regmap_init()
    64f14b1ab6f39 x86/vdso: Fix output operand size of RDPID
    5d01f2b815682 perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
    90ea4c0484ebb coresight: trbe: Prevent overflow in PERF_IDX2OFF()
    0ddd59d58b597 selftests: arm64: Check fread return value in exec_target
    cf038b6bb9ed5 filelock: add FL_RECLAIM to show_fl_flags() macro
    c1db864270eb7 net/9p: fix double req put in p9_fd_cancelled
    3fe58fa612052 minmax: add in_range() macro
    bd903c25b652c crypto: rng - Ensure set_ent is always present
    46263a0b687a0 platform/x86: int3472: Check for adev == NULL
    823671bb8b05d driver core/PM: Set power.no_callbacks along with power.no_pm
    53dab62cda6e7 staging: axis-fifo: flush RX FIFO on read errors
    82e0bb28a060c staging: axis-fifo: fix maximum TX packet length check
    e18cfcb828ed2 serial: stm32: allow selecting console when the driver is module
    48685b39f2fed hid: fix I2C read buffer overflow in raw_event() for mcp2221
    c094712e40488 perf subcmd: avoid crash in exclude_cmds when excludes is empty
    0eb762f420b25 dm-integrity: limit MAX_TAG_SIZE to 255
    8ed134c2520d7 wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
    6c7c5b465a7b8 USB: serial: option: add SIMCom 8230C compositions
    663faf1179db9 media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
    3f876cd47ed8b media: tuner: xc5000: Fix use-after-free in xc5000_release
    3fdeb807b93d0 media: tunner: xc5000: Refactor firmware load
    c3ad8c30b6b10 udp: Fix memory accounting leak.
    20fc1431bcdf4 KVM: arm64: Fix softirq masking in FPSIMD register saving sequence
    71c52b073922d media: rc: fix races with imon_disconnect()
    120e221b4bbe9 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
    ddc79fba132b8 scsi: target: target_core_configfs: Add length check to avoid buffer overflow
    9407809b44dc6 iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support

(From OE-Core rev: a6b566b362d8d4f200d48bfa4c97297c45c9443e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Aleksandar Nikolic
1d5c8af9c4 scripts/install-buildtools: Update to 4.0.32
Update to the 4.0.32 release of the 4.0 series for buildtools

(From OE-Core rev: 7c3f192e5f29eb54c1aa64d31b92255d13e4605a)

Signed-off-by: Aleksandar Nikolic <aleksandar.nikolic22@pm.me>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
9a24d18f40 inetutils: patch CVE-2026-24061
Pick patches per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2026-24061

(From OE-Core rev: 042f02ff7072e9cf4b02a335d1d3186d68ba669b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Vijay Anusuri
7cdc92f5cb openssl: upgrade 3.0.18 -> 3.0.19
This release incorporates the following bug fixes and mitigations:

Fixed Stack buffer overflow in CMS AuthEnvelopedData parsing. (CVE-2025-15467)
Fixed Heap out-of-bounds write in BIO_f_linebuffer on short writes. (CVE-2025-68160)
Fixed Unauthenticated/unencrypted trailing bytes with low-level OCB function calls. (CVE-2025-69418)
Fixed Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion. (CVE-2025-69419)
Fixed Missing ASN1_TYPE validation in TS_RESP_verify_response() function. (CVE-2025-69420)
Fixed NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex() function. (CVE-2025-69421)
Fixed Missing ASN1_TYPE validation in PKCS#12 parsing. (CVE-2026-22795)
Fixed ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function. (CVE-2026-22796)

Changelog:
https://github.com/openssl/openssl/blob/openssl-3.0.19/NEWS.md

Refreshed CVE-2023-50781 patches for openssl-3.0.19

Reference: https://openssl-library.org/news/secadv/20260127.txt

(From OE-Core rev: 9b419ead79a1c137ba98d86969fd29808d6da49e)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
99c192aae2 expat: patch CVE-2026-25210
Pick patches from [1].

[1] https://github.com/libexpat/libexpat/pull/1075

(From OE-Core rev: 406471f765fd1ce6bc5aab51c724476684e40d21)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
3a7aa79ca2 expat: patch CVE-2026-24515
Pick fix commit from PR linked in NVD report.

(From OE-Core rev: e3c0ac137e50d35e83e8e4ed2c4e09f2eb9d3bca)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
a8c5e5e573 libxml2: add follow-up patch for CVE-2026-0992
References:
* https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
* https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/377

(From OE-Core rev: 957244b2861f394237b8a3ec4d549d5118627955)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
9998d74d24 libxml2: patch CVE-2026-0992
Pick patch which closed [1].
Adapt for missing xmlCatalogPrintDebug per [2].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019
[2] 728869809e

(From OE-Core rev: efef4d450500eb3a43b9f1f399ca84f9ca837d8b)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
bd6c85cfa6 libxml2: patch CVE-2026-0990
Pick patch which closed [1].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018

(From OE-Core rev: 3af64204dec407546bed8f1dc0cb8b4a1501e471)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
e7b549ecaa python3: patch CVE-2025-12084
Pick patch for this CVE merged into 3.10 branch.

(From OE-Core rev: 8888cd14eb102574d530b6c683ce5beaad1aaa39)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
4ad238e9c1 python3: patch CVE-2025-13837
Pick patch from 3.12 branch per NVD report.

(From OE-Core rev: cfbac1d5edae4b0204ec4c01b5f710d100ceb2ad)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Peter Marko
ad756dec39 zlib: ignore CVE-2026-22184
This is CVE for example tool contrib/untgz.
This is not compiled in Yocto zlib recipe.

This CVE has controversial CVSS3 score of 9.8.

(From OE-Core rev: 1bdcd62d34b0b060b0e1e5142c5f3e7075f21cc2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-02-27 15:54:01 +00:00
Lee Chee Yang
58f9b898da migration-guides: add release notes for 4.0.32
(From yocto-docs rev: 398a2a080361eb22b9c447dbde31fca58bf4e0bb)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 095981c08b9d63905472df5d1d60c07af96f0250)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
e60019c6eb dev-manual/packages.rst: fix example recipe version
The example recipe taken above is hello-world on version 1.0 (because
PV equals "1.0+git". Fix this issue.

(From yocto-docs rev: a48ab61034d50be1026b939112f4a5c58bed7b88)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 411122812ced4ec32127a823896a73aacf6eb97c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
7794952de8 dev-manual/packages.rst: rename r0.0 to r0 when PR server is not enabled
When we don't have a PR server enabled, we don't have leading ".0" to
the PKGR variable, as this is added by the PR server.

(From yocto-docs rev: 4c64db73fa68b6dbc11fe4b64452b0d6b7ee0280)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 7a0324b6a10e64ee250945747db10ca88040b1ce)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
7bb35f44d9 dev-manual/packages.rst: pr server: fix and explain why r0.X increments on SRCREV change
The current example of the SRCREV change triggering a gitX bump is
wrong, as both gitX and r0.X get incremented.

Why this is happening is explained in bug 15729, which I copy here:

> +gitX+ is indeed related to changes in the source code.
>
> r0.X is bumped each time the checksum of the do_package task of the
> simple-hello-world-git recipe changes. This happens here:
> https://git.openembedded.org/openembedded-core/tree/meta/classes-global/package.bbclass?id=235e6d49e5888ad04416219e10b6df91a738661a#n306
>
> This line sets the value of PRAUTO and represents the number X found in
> r0.X. It will in the end make it into EXTENDPRAUTO, which itself makes
> to PKGR == r0.X.
>
> This line calls getPR(version, pkgarch, checksum). Between test case 5
> and 6, only the checksum changes. This checksum is the checksum of the
> do_package task (gotten from get_do_package_hash() above).
>
> Now, let's dump what changed with regards to this task between two
> consecutive runs, using the sigdata file in build/tmp/stamps/:
>
> ```
> [...]
> Variable fetcher_hashes_dummyfunc value changed from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to '4af682a50174f5deb0397847da97d7cdba4ad067'
> ```
>
> The last line shows that the value of fetcher_hashes_dummyfunc changed
> from '2650ad6714c3f3248abfe9d3daf1196f307ed494' to
> '4af682a50174f5deb0397847da97d7cdba4ad067'. Those are the commit hashes
> in the git history of the simple-hello-world-git repository.
>
> Now you can see why this 0.X gets bumped, is because of the SRCREV change.

Fix the example, and detail what gets changed and why.

[YOCTO #15729]

Cc: Robert Berger <pokylinux@reliableembeddedsystems.com>
(From yocto-docs rev: 8d7b549d095c2ca04d4c7ff5a92f6de9fceb8496)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 09f0430bc69024b9854c31ba6783ddd807aa4f19)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Richard Purdie
c3b734f0a7 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: e2994ca0076ec99038790e7a40936236a5078135)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-12 17:00:21 +00:00
Antonin Godard
ff118ede82 contributor-guide/recipe-style-guide.rst: explain difference between layer and recipe license(s)
Explain that the LICENSE set in a recipe does not apply to the recipe
file itself, but to the underlying software. The license of the recipe
file is the license provided in the layer itself. Give OpenEmbedded-Core
as an example for this.

Fixes [YOCTO #14410]

(From yocto-docs rev: 6799b1be5d48f4bf5dcd0b16c2dbc2e297d4ecd9)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b8a56b8b2e8c0417b2f7204f80c79b05d95e9ce4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
yocto-4.0.33 kirkstone-4.0.33
2026-01-26 18:54:18 +00:00
Antonin Godard
d5bcc413d0 ref-manual/variables.rst: document the CCACHE_TOP_DIR variable
Added by commit 35d7fe73bba1 ("ccache.bbclass: Make it can be shared
between different builds") in OE-Core.

Fixes [YOCTO #16052]

(From yocto-docs rev: e4f5ba7bb34586cd7bee7f0fe69c39b36dabb357)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 550ef8340b550f8d4e9c3d0672190dc09592c621)
Fix conflicts: CCLD variable in master not on kirkstone.
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
72eb266009 overview-manual: convert YP-flow-diagram.png to SVG
Based on diagrams/poky-buildprocess/Pokyarch_diag.svg, replace the PNG
graphic for the YP flow to an SVG graphic.

(From yocto-docs rev: 2983418bec7a2faeaae4e831b8f642ff0cd95980)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d2aaf54bee49295bdf81021648cb27499930edc6)
Fix conflicts (different alignment on master, keep one from kirkstone)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
d66f9ee0ef overview-manual/yp-intro.rst: fix SDK type in bullet list
The YP generates an SDK by default, which can be meta-toolchain, an
image-specific one, or an extensible SDK (eSDK). Don't be specific in
this bullet list.

(From yocto-docs rev: 3c455c5a2892611d2323610170f9600ceb953f6c)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit f02c64286504353e97c7e5fe5c0d193776469ad1)
Fix conflict (#. on master, 7. on kirkstone)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
5489d2b5b6 ref-manual/release-process.rst: add a "Development Cycle" section
Add a new section to release-process.rst to document the development
cycle of each release and namely the milestones and feature freeze
occuring after M3.

Fixes [YOCTO #15979]

(From yocto-docs rev: f7888e3c3267ec7c39374f694f86088598bea649)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 77c04cc5944acda7575546a7434e014e4a75ba58)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
e3fdce60c0 test-manual/ptest.rst: detail the exit code and output requirements
A ptest must emit at least one test result on the console, as this is
required by the testimage class (which ignores the exit code).
ptest-runner on the other hand, ignore the output and only cares about
the exit code.

Add these two items as requirements for a ptest to be valid.

Fixes [YOCTO #15832]

Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
(From yocto-docs rev: 916be11467d87d39e4ad5ea218237258523f3953)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9292f61d7ba89598c89033ea7ee3b11a20d873f3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
a4aa1bc237 ref-manual/classes.rst: document the image-container class
Add documentation for the image-container class, which is a simple class
to generate an image suitable for creating a container.

This answers in part to questions asked in [YOCTO #14368].

It also adds documentation for IMAGE_CONTAINER_NO_DUMMY, which was added
in OE-Core with commit f0645e172bb8 ("image-container.bbclass: Error if
not using linux-dummy").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: cebe8ff0508e0fc2de8378a1cf93eb8054e12699)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6ce00e5875eb3469fefd55cc22acaaeaf620053a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
cb99d0b1c5 Add a new "Security" section
The current security-related documentation is a bit hard to find and
hidden within the development manual. However these are processes that
are not part of a development task but is rather a vulnerability
reporting process.

Create a new "Security" section in the documentation to gather this
information. This will be directly visible in the sidebar when opening
the documentation.

Split the previous security-subjects.rst document into 2 documents:

- security-team.rst: defines the roles of the security teams and its
  members.

- reporting-vulnerabilities.rst: guide to report vulnerabilities to the
  security team.

The plan is to backport these documents to active releases. As a
consequence, this section should be free of instructions and information
that only make sense for a specific release. It should _not_ contain
documents on how to enable security features with Yocto on target
devices, this is unrelated and can be left in the development manual
(for example: dev-manual/vulnerabilities.rst to deal with CVEs).

(From yocto-docs rev: 3fd0f37d708d88534dd6dbb51dc264911c349352)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 81e14ca2d5cff9e2104c556655144b069633790c)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
e1c9a5d58f ref-manual/svg/releases.svg: mark whinlatter as current release
Whinlatter is the new current Yocto Project release, mark it as an
active one. Move it as released in December 2025.

(From yocto-docs rev: 7f6dff5c3d549cbd5040c15261bdb38a54dbd69e)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 6f8e97c6e529f3c47f45f34d9e04e3ad7bddd587)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
0071164ce8 ref-manual/svg/releases.svg: mark styhead and walnascar EOL
Walnascar has stopped being updated a while ago, and Styhead is EOL
since May 2025.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 2425f0cf64c35b9f7d0676dd31c2ea94fcdb3a31)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 834de77b543de43ee3c1c12ca1d6277e67e126de)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
10233e97f7 overview-manual/yp-intro.rst: link to YP members and participants
Instead of a fixed list of commercial vendors, link to existing lists on
the YP website.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 69ad32040baf8ca7c79265fd83041b3241353e2d)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9d394db4f88b66500e4d5a2a518d25f08a0c9472)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Antonin Godard
941d1d47c1 overview-manual/yp-intro.rst: change removed ECOSYSTEM to ABOUT
The ABOUT tab is where the members/participants are listed now.

Reported-by: Robert P. J. Day <rpjday@crashcourse.ca>
(From yocto-docs rev: 8e216cd6e17fe4bc367c11d2ad3e3d7a29701af8)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit a8a8d810f0505529aaaa90678e03152c8ac0c00b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 18:54:18 +00:00
Richard Purdie
5abd143cb5 build-appliance-image: Update to kirkstone head revision
(From OE-Core rev: 036f76ea35c49a78d612093dcd8eb1fac7ded8d7)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:42 +00:00
Paul Barker
71ae82a596 poky.conf: Bump version for 4.0.33 release
(From meta-yocto rev: 677379f21941363d50f9d946963542b4ccb7e27c)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:50:26 +00:00
Khem Raj
6f2c1098a6 oeqa: Use 2.14 release of cpio instead of 2.13
2.13 may not be buildable with latest compilers without patching

(From OE-Core rev: 64d56cf416b31ae92438deefe4028402120ed998)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(cherry picked from commit 406a33f896accc35a9cb6ab156f1e0f42dda67d8)
Backport: Fix [YOCTO #16137] by using the same archive as the cpio
recipe, ensuring the archive is in DL_DIR and so, avoiding reaching
unreliable upstream server.
This upgrade is safe to do because this archive is only use to test that
it compiles.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
74924f0891 pseudo: Update to pull in 'makewrappers: Fix EFAULT implementation'
The pseudo update was causing hangs in builds, pull in the fix.

(From OE-Core rev: e514b1ac74ae8a69b15e3459cb3b327a35cabff8)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8acdbefd0a148c8b7713f46066ae8489984c5d2d)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
d087748248 pseudo: Update to pull in openat2 and efault return code changes
Pulls in the following fixes:

 * makewrappers: Enable a new efault option
 * ports/linux/openat2: Add dummy wrapper
 * test-syscall: Add a syscall test
 * ports/linux/pseudo_wrappers: Avoid openat2 usage via syscall

which should fix issues with the tar CVE fix on Centos/Alma/Rocky 9 distros
that uses openat2 as well as the efault issue breaking rust based uutils.

(From OE-Core rev: edc8c8e0ae511b03cb9d0501d472bb42fbea2c8b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

(cherry picked from commit 51f1388dd1679a28ec3ca468cf16aa0ea32bccf9)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Paul Barker
401a9cdd7d pseudo: Add hard sstate dependencies for pseudo-native
Where a task (such as do_package) runs under fakeroot, the corresponding
setscene task (do_package_setscene) will also run under fakeroot when
restoring from sstate. Assuming pseudo is used as the fakeroot
implementation, we need pseudo-native and all its runtime dependencies
to be available in the sysroot before running any setscene tasks under
fakeroot.

We already add a hard dependency from all do_package_setscene tasks to
virtual/fakeroot-native:do_populate_sysroot in base.bbclass, but this
does not cover transitive dependencies. So, extend the dependencies of
pseudo-native:do_populate_sysroot_setscene to ensure that the sqlite3
library is also available in the sysroot before running fakeroot
setscene tasks.

[YOCTO #15963]

(From OE-Core rev: e3c07672d22343cd7ac68cb84716b05ec7cd438b)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2c146ca657440550e00bc5e53d13502ef7aa945b)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
42eb45b3a0 pseudo: Update to pull in memleak fix
(From OE-Core rev: d789b03d33d9a0fce335080f667c29ed45515726)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 42137b6f97da0672af365cd841678f39ce5907d2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Robert Yang
3a3b526edb pseudo: 1.9.0 -> 1.9.2
(From OE-Core rev: 2093a9c80e391795abbac8766569583a3547e43b)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 48a42747fd280ce68283e1491971d22273e3bdf2)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Richard Purdie
8a6b3d82f6 pseudo: Upgrade to version 1.9.1
This brings in:
 * nftw, nftw64: add wrapper
 * ftw, nftw, ftw64, nftw64: add tests
 * Move ftw and ftw64 to calling ntfw and nftw64
 * makewrappers: Introduce 'array' support
 * pseudo_util.c: Avoid warning when we intentionally discard const
 * pseudo_client.c: Fix warning
 * yocto-older-glibc-symbols.path: Add as a reference patch
 * pseudo/pseudo_client: Add wrapper functions to operate correctly with glibc 2.38 onwards
 * configure: Prune PIE flags
 * test/test-parallel-rename.sh: Add parallel rename test
 * test/test-parallel-symlinks.sh: Add parallel symlink test
 * ports/linux/guts: Add .gitignore to ignore generated files

(From OE-Core rev: b3140c624504b19a2b2faec8df89f57a99cefce1)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 994e508b2a0ede8b5cc4fe39444cf25dc9a53faf)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Vijay Anusuri
2c23fc4f0e binutils: Fix CVE-2025-1181
import patch from ubuntu to fix
 CVE-2025-1181

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/binutils/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24
&
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=18cc11a2771d9e40180485da9a4fb660c03efac3]

(From OE-Core rev: 55d4b81b15b6eb2e221ff69dc791d2e319fad234)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>

[Yoann Congal: Corrected the second patch SHA1 in URLs "18cc11a..."]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
71966f1bad gnupg: patch CVE-2025-68973
Pick patch from 2.4 branch per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2025-68973

(From OE-Core rev: 403a9bc3da3574d828cfbce805df48d0181eafed)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
cd8f4444b2 curl: patch CVE-2025-15224
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15224.html

(From OE-Core rev: db87200a8ae19d40e7a8f038d9fe4e426f159ad3)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
2bf97e4e41 curl: patch CVE-2025-15079
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-15079.html

(From OE-Core rev: 8ce2a761c2f00e9c7782654cf6d6384ccd3f6e16)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00
Peter Marko
fd21399bac curl: patch CVE-2025-14017
Pick patch per [1].

[1] https://curl.se/docs/CVE-2025-14017.html

(From OE-Core rev: ae23e163f7399e957a100dc13d9cd0b829eef2f4)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-01-26 09:49:25 +00:00