Ubuntu
linux package

I/O performance regression on NVMes under same bridge (dual port nvme)

Questing (25.10)
Bug #2115738

Bug #2115738 reported by Ioanna Alifieraki on 2025-07-01

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	In Progress	Undecided	Massimiliano Pellizzer
Oracular	Won't Fix	Undecided	Unassigned
Plucky	Fix Released	Medium	Massimiliano Pellizzer
Questing	In Progress	Undecided	Massimiliano Pellizzer

Bug Description

[ Impact ]

iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes

The iotlb_sync_map iommu ops allows drivers to perform necessary cache
flushes when new mappings are established. For the Intel iommu driver,
this callback specifically serves two purposes:

- To flush caches when a second-stage page table is attached to a device
whose iommu is operating in caching mode (CAP_REG.CM==1).
- To explicitly flush internal write buffers to ensure updates to memory-
resident remapping structures are visible to hardware (CAP_REG.RWBF==1).

However, in scenarios where neither caching mode nor the RWBF flag is
active, the cache_tag_flush_range_np() helper, which is called in the
iotlb_sync_map path, effectively becomes a no-op.

Despite being a no-op, cache_tag_flush_range_np() involves iterating
through all cache tags of the iommu's attached to the domain, protected
by a spinlock. This unnecessary execution path introduces overhead,
leading to a measurable I/O performance regression. On systems with NVMes
under the same bridge, performance was observed to drop from approximately
~6150 MiB/s down to ~4985 MiB/s.

Introduce a flag in the dmar_domain structure. This flag will only be set
when iotlb_sync_map is required (i.e., when CM or RWBF is set). The
cache_tag_flush_range_np() is called only for domains where this flag is
set. This flag, once set, is immutable, given that there won't be mixed
configurations in real-world scenarios where some IOMMUs in a system
operate in caching mode while others do not. Theoretically, the
immutability of this flag does not impact functionality.

[ Fix ]

Backport the following commit:
- 12724ce3fe1a iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes
- b9434ba97c44 iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags()
- b33125296b50 iommu/vt-d: Create unique domain ops for each stage
- 0fa6f0893466 iommu/vt-d: Split intel_iommu_enforce_cache_coherency()
- 85cfaacc9937 iommu/vt-d: Split paging_domain_compatible()
- cee686775f9c iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain
to Plucky.

[ Test Plan ]

Run fio against two NVMEs under the same pci bridge (dual port NVMe):

$ sudo fio --readwrite=randread --blocksize=4k --iodepth=32 --numjobs=8 --time_based --runtime=40 --ioengine=libaio --direct=1 --group_reporting --new_group --name=job1 --filename=/dev/nvmeXnY --new_group --name=job2 --filename=/dev/nvmeWnZ

verify that the speed reached with the two NVMEs under the same bridge is the same that would have been reached if the two NVMEs were not under the same bridge.

[ Regression Potential ]

This fix affects the Intel IOMMU (VT-d) driver.
An issue with this fix may introduce problems such as
incorrect omission of required IOTLB cache or write buffer flushes
when attaching devices to a domain.
This could result in memory remapping structures not being visible
to hardware in configurations that actually require synchronization.
As a consequence, devices performing DMA may exhibit data corruption,
access violations, or inconsistent behavior due to stale or incomplete
translations being used by the hardware.

---

[Description]
A performance regression has been reported when running fio against two NVMe devices under the same pci bridge (dual port NVMe).
The issue was initially reported for 6.11-hwe kernel for Noble.
The performance regression was introduced in the 6.10 upstream kernel and is still present in 6.16 (build at commit e540341508ce2f6e27810106253d5).
Bisection pointed to commit 129dab6e1286 ("iommu/vt-d: Use cache_tag_flush_range_np() in iotlb_sync_map").

In our tests we observe ~6150 MiB/s when the NVMe devices are on different bridges and ~4985 MiB/s when under the same brigde.

Before the offending commit we observe ~6150 MiB/s, regardless of NVMe device placement.

[Test Case]

We can reproduce the issue on gcp on Z3 metal instance type (z3-highmem-192-highlssd-metal) [1].

You need to have 2 NVMe devices under the same bridge, e.g:

# nvme list -v
...
Device SN MN FR TxPort Address Slot Subsystem Namespaces
-------- -------------------- ---------------------------------------- -------- ------ -------------- ------ ------------ ----------------
nvme0 nvme_card-pd nvme_card-pd (null) pcie 0000:05:00.1 nvme-subsys0 nvme0n1
nvme1 3DE4D285C21A7C001.0 nvme_card 00000000 pcie 0000:3d:00.0 nvme-subsys1 nvme1n1
nvme10 3DE4D285C21A7C001.1 nvme_card 00000000 pcie 0000:3d:00.1 nvme-subsys10 nvme10n1
nvme11 3DE4D285C2027C000.0 nvme_card 00000000 pcie 0000:3e:00.0 nvme-subsys11 nvme11n1
nvme12 3DE4D285C2027C000.1 nvme_card 00000000 pcie 0000:3e:00.1 nvme-subsys12 nvme12n1
nvme2 3DE4D285C2368C001.0 nvme_card 00000000 pcie 0000:b7:00.0 nvme-subsys2 nvme2n1
nvme3 3DE4D285C22A74001.0 nvme_card 00000000 pcie 0000:86:00.0 nvme-subsys3 nvme3n1
nvme4 3DE4D285C22A74001.1 nvme_card 00000000 pcie 0000:86:00.1 nvme-subsys4 nvme4n1
nvme5 3DE4D285C2368C001.1 nvme_card 00000000 pcie 0000:b7:00.1 nvme-subsys5 nvme5n1
nvme6 3DE4D285C21274000.0 nvme_card 00000000 pcie 0000:87:00.0 nvme-subsys6 nvme6n1
nvme7 3DE4D285C21094000.0 nvme_card 00000000 pcie 0000:b8:00.0 nvme-subsys7 nvme7n1
nvme8 3DE4D285C21274000.1 nvme_card 00000000 pcie 0000:87:00.1 nvme-subsys8 nvme8n1
nvme9 3DE4D285C21094000.1 nvme_card 00000000 pcie 0000:b8:00.1 nvme-subsys9 nvme9n1

...

For the output above, drives nvme1n1 and nvme10n1 are under the same bridge, and looking the SN it seems it is a dual port NVMe.

- Under the same bridge
Run fio against nvme1n1 and nvme10n1, observe 4897MiB/s after a short spike in the beginning at ~6150MiB/s.

# sudo fio --readwrite=randread --blocksize=4k --iodepth=32 --numjobs=8 --time_based --runtime=40 --ioengine=libaio --direct=1 --group_reporting --new_group --name=job1 --filename=/dev/nvme1n1 --new_group --name=job2 --filename=/dev/nvme10n1
...
Jobs: 16 (f=16): [r(16)][100.0%][r=4897MiB/s][r=1254k IOPS][eta 00m:00s]
...

- Under different bridge
Run fio against nvme1n1 and nvme11n1, observe

# sudo fio --readwrite=randread --blocksize=4k --iodepth=32 --numjobs=8 --time_based --runtime=40 --ioengine=libaio --direct=1 --group_reporting --new_group --name=job1 --filename=/dev/nvme1n1 --new_group --name=job2 --filename=/dev/nvme11n1
...
Jobs: 16 (f=16): [r(16)][100.0%][r=6153MiB/s][r=1575k IOPS][eta 00m:00s]
...

** So far, we haven't been able to reproduce it on another machine, but we suspect will be reproducible with any machine with a dual port NVMe.

[Other]

In spreadsheet [2], the are some profiling data for different kernel versions, showing consistent performance difference between kernel versions.

Offending commit : https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129dab6e1286525fe5baed860d3dfcd9c6b4b327

Report issue upstream [3].

[1] https://cloud.google.com/compute/docs/storage-optimized-machines#z3_machine_types
[2] https://docs.google.com/spreadsheets/d/19F0Vvgz0ztFpDX4E37E_o8JYrJ04iYJz-1cqU-j4Umk/edit?gid=1544333169#gid=1544333169
[3] https://lore.kernel<email address hidden>/

See original description

Tags:

CVE References

Ioanna Alifieraki (joalif) on 2025-07-01

description:	updated
description:	updated

Ioanna Alifieraki (joalif) on 2025-07-01

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2025-07-01

tags:

added: kernel-daily-bug

Ioanna Alifieraki (joalif) on 2025-07-02

description:

updated

Revision history for this message

Ural Tunaboyu (uralt) wrote on 2025-07-10:

Ubuntu 24.10 (Oracular Oriole) has reached end of life, so this bug will not be fixed for that specific release.

Changed in linux (Ubuntu Oracular):
status:	New → Won't Fix

Jose Ogando Justo (joseogando) on 2025-07-14

Changed in linux (Ubuntu Questing):
assignee:	nobody → Massimiliano Pellizzer (mpellizzer)

Massimiliano Pellizzer (mpellizzer) on 2025-07-18

Changed in linux (Ubuntu Plucky):
assignee:	nobody → Massimiliano Pellizzer (mpellizzer)
status:	New → Confirmed
Changed in linux (Ubuntu Questing):
status:	New → Confirmed

Massimiliano Pellizzer (mpellizzer) on 2025-07-18

description:	updated
Changed in linux (Ubuntu Plucky):
status:	Confirmed → In Progress

Massimiliano Pellizzer (mpellizzer) on 2025-07-18

Changed in linux (Ubuntu Questing):
status:	Confirmed → In Progress

Revision history for this message

Massimiliano Pellizzer (mpellizzer) wrote on 2025-07-18:

The upstream patch will be included in Linux 6.17 (most probably) which is the kernel version Questing will be released with.

Sent the patch for Plucky to KTML:
- https://lists.ubuntu.com/archives/kernel-team/2025-July/161401.html

Revision history for this message

Massimiliano Pellizzer (mpellizzer) wrote on 2025-07-24:

I NACKed the patch sent to the mailing list, since it introduces a regression addressed by:
- https://<email address hidden>/
I will wait for the fix to be accepted upstream to send the fixed patchset again

Massimiliano Pellizzer (mpellizzer) on 2025-08-05

description:

updated

Revision history for this message

Massimiliano Pellizzer (mpellizzer) wrote on 2025-08-05:

New patchset sent to KTML:
https://lists.ubuntu.com/archives/kernel-team/2025-August/161916.html

Massimiliano Pellizzer (mpellizzer) on 2025-08-06

description:

updated

Stefan Bader (smb) on 2025-08-29

Changed in linux (Ubuntu Plucky):
importance:	Undecided → Medium
status:	In Progress → Fix Committed

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2025-09-03:

This bug is awaiting verification that the linux/6.14.0-32.32 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-plucky-linux' to 'verification-done-plucky-linux'. If the problem still exists, change the tag 'verification-needed-plucky-linux' to 'verification-failed-plucky-linux'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: kernel-spammed-plucky-linux-v2 verification-needed-plucky-linux

Revision history for this message

Bryan Fraschetti (bryanfraschetti) wrote on 2025-09-03:

Download full text (6.7 KiB)

Verification
============

Performance results without the patch:
--------------------------------------

Ubuntu Release:
lsb_release -rc
Release: 25.04
Codename: plucky

Kernel in use:
uname -srvm
Linux 6.14.0-1015-gcp #16-Ubuntu SMP Tue Aug 19 00:02:17 UTC 2025 x86_64

nvme topology:
sudo lstopo | grep -A 4 NVMExp
          PCI 05:00.1 (NVMExp)
            Block(Disk) "nvme0n1"
      HostBridge
        PCI 6b:00.0 (Co-Processor)
      HostBridge
--
          PCI 3d:00.0 (NVMExp)
            Block(Disk) "nvme1n1"
          PCI 3d:00.1 (NVMExp)
            Block(Disk) "nvme10n1"
        PCIBridge
          PCI 3e:00.0 (NVMExp)
            Block(Disk) "nvme11n1"
          PCI 3e:00.1 (NVMExp)
            Block(Disk) "nvme12n1"
  Package L#1 + L3 L#1 (105MB)
    Group0 L#2
      NUMANode L#2 (P#2 378GB)
--
          PCI 86:00.0 (NVMExp)
            Block(Disk) "nvme2n1"
          PCI 86:00.1 (NVMExp)
            Block(Disk) "nvme4n1"
        PCIBridge
          PCI 87:00.0 (NVMExp)
            Block(Disk) "nvme7n1"
          PCI 87:00.1 (NVMExp)
            Block(Disk) "nvme9n1"
      HostBridge
        PCI e8:00.0 (Co-Processor)
      HostBridge
--
          PCI b7:00.0 (NVMExp)
            Block(Disk) "nvme3n1"
          PCI b7:00.1 (NVMExp)
            Block(Disk) "nvme5n1"
        PCIBridge
          PCI b8:00.0 (NVMExp)
            Block(Disk) "nvme6n1"
          PCI b8:00.1 (NVMExp)
            Block(Disk) "nvme8n1"
...

- From the topology we see nvme1n1 and nvme3n1 are under different bridges. Run the fio benchmark against these nvmes and observe the read perf is 6152MiB/s

sudo fio --readwrite=randread --blocksize=4k --iodepth=32 --numjobs=8 --time_based --runtime=40 --ioengine=libaio --direct=1 --group_reporting --new_group --name=job1 --filename=/dev/nvme1n1 --new_group --name=job2 --filename=/dev/nvme3n1
...
Jobs: 16 (f=16): [r(16)][100.0%][r=6152MiB/s][r=1575k IOPS][eta 00m:00s]
job1: (groupid=0, jobs=8): err= 0: pid=12326: Wed Sep 3 15:12:38 2025
  read: IOPS=787k, BW=3073MiB/s (3222MB/s)(120GiB/40001msec)
...
job2: (groupid=1, jobs=8): err= 0: pid=12334: Wed Sep 3 15:12:38 2025
  read: IOPS=787k, BW=3073MiB/s (3222MB/s)(120GiB/40001msec)
...
Run status group 0 (all jobs):
   READ: bw=3073MiB/s (3222MB/s), 3073MiB/s-3073MiB/s (3222MB/s-3222MB/s), io=120GiB (129GB), run=40001-40001msec
Run status group 1 (all jobs):
   READ: bw=3073MiB/s (3222MB/s), 3073MiB/s-3073MiB/s (3222MB/s-3222MB/s), io=120GiB (129GB), run=40001-40001msec
Disk stats (read/write):
  nvme1n1: ios=31460219/0, sectors=251681752/0, merge=0/0, ticks=10023925/0, in_queue=10023925, util=99.46%
  nvme3n1: ios=31460291/0, sectors=251682328/0, merge=0/0, ticks=10039463/0, in_queue=10039463, util=99.49%

- We see that nvme1n1 is under the same bridge as nvme10n1. Run the same benchmark against these two nvmes and note the degraded performance (4947MiB/s), despite initially bursting at around the same performance of ~6150MiB/s

Verification
============

Performance results without the patch:
--------------------------------------

Ubuntu Release:
lsb_release -rc
Release:        25.04
Codename:       plucky

Kernel in use:
uname -srvm
Linux 6.14.0-1015-gcp #16-Ubuntu SMP Tue Aug 19 00:02:17 UTC 2025 x86_64

- From the topology we see nvme1n1 and nvme3n1 are under different bridges. Run the fio benchmark against these nvmes and observe the read perf is 6152MiB/s

sudo fio --readwrite=randread --blocksize=4k --iodepth=32 --numjobs=8 --time_based --runtime=40 --ioengine=libaio --direct=1 --group_reporting --new_group --name=job1 --filename=/dev/nvme1n1 --new_group --name=job2 --filename=/dev/nvme3n1
...
Jobs: 16 (f=16): [r(16)][100.0%][r=6152MiB/s][r=1575k IOPS][eta 00m:00s]
job1: (groupid=0, jobs=8): err= 0: pid=12326: Wed Sep  3 15:12:38 2025
  read: IOPS=787k, BW=3073MiB/s (3222MB/s)(120GiB/40001msec)
...
job2: (groupid=1, jobs=8): err= 0: pid=12334: Wed Sep  3 15:12:38 2025
  read: IOPS=787k, BW=3073MiB/s (3222MB/s)(120GiB/40001msec)
...
Run status group 0 (all jobs):
   READ: bw=3073MiB/s (3222MB/s), 3073MiB/s-3073MiB/s (3222MB/s-3222MB/s), io=120GiB (129GB), run=40001-40001msec
Run status group 1 (all jobs):
   READ: bw=3073MiB/s (3222MB/s), 3073MiB/s-3073MiB/s (3222MB/s-3222MB/s), io=120GiB (129GB), run=40001-40001msec
Disk stats (read/write):
  nvme1n1: ios=31460219/0, sectors=251681752/0, merge=0/0, ticks=10023925/0, in_queue=10023925, util=99.46%
  nvme3n1: ios=31460291/0, sectors=251682328/0, merge=0/0, ticks=10039463/0, in_queue=10039463, util=99.49%

sudo fio --readwrite=randread --blocksize=4k --iodepth=32 --numjobs=8 --time_based --runtime=40 --ioengine=libaio --direct=1 --group_reporting --new_group --name=job1 --filename=/dev/nvme1n1 --new_group --name=job2 --filename=/dev/nvme10n1
...
Jobs: 16 (f=16): [r(16)][100.0%][r=4947MiB/s][r=1266k IOPS][eta 00m:00s]
job1: (groupid=0, jobs=8): err= 0: pid=12547: Wed Sep  3 15:13:55 2025
...
job2: (groupid=1, jobs=8): err= 0: pid=12555: Wed Sep  3 15:13:55 2025
  read: IOPS=675k, BW=2636MiB/s (2764MB/s)(103GiB/40001msec)
Run status group 0 (all jobs):
   READ: bw=2618MiB/s (2745MB/s), 2618MiB/s-2618MiB/s (2745MB/s-2745MB/s), io=102GiB (110GB), run=40001-40001msec
Run status group 1 (all jobs):
   READ: bw=2636MiB/s (2764MB/s), 2636MiB/s-2636MiB/s (2764MB/s-2764MB/s), io=103GiB (111GB), run=40001-40001msec
Disk stats (read/write):
  nvme1n1: ios=26789594/0, sectors=214316752/0, merge=0/0, ticks=2449737/0, in_queue=2449737, util=99.42%
  nvme10n1: ios=26972471/0, sectors=215779776/0, merge=0/0, ticks=2500999/0, in_queue=2500999, util=99.48%

Performance results with the patch:
-----------------------------------

Upgrade to the -proposed -generic kernel

Kernel in use:

uname -srvm
Linux 6.14.0-32-generic #32-Ubuntu SMP PREEMPT_DYNAMIC Fri Aug 29 14:21:26 UTC 2025 x86_64

- Rerun the same job for nvmes under different bridges and observe no regression in the performance compared to the previous kernel (it remains at 6153MiB/s)

sudo fio --readwrite=randread --blocksize=4k --iodepth=32 --numjobs=8 --time_based --runtime=40 --ioengine=libaio --direct=1 --group_reporting --new_group --name=job1 --filename=/dev/nvme1n1 --new_group --name=job2 --filename=/dev/nvme3n1
...
Jobs: 16 (f=16): [r(16)][100.0%][r=6153MiB/s][r=1575k IOPS][eta 00m:00s]
job1: (groupid=0, jobs=8): err= 0: pid=18197: Wed Sep  3 22:12:26 2025
  read: IOPS=786k, BW=3070MiB/s (3219MB/s)(120GiB/40001msec)
...
job2: (groupid=1, jobs=8): err= 0: pid=18205: Wed Sep  3 22:12:26 2025
  read: IOPS=786k, BW=3071MiB/s (3220MB/s)(120GiB/40001msec)
...
Run status group 0 (all jobs):
   READ: bw=3070MiB/s (3219MB/s), 3070MiB/s-3070MiB/s (3219MB/s-3219MB/s), io=120GiB (129GB), run=40001-40001msec
Run status group 1 (all jobs):
   READ: bw=3071MiB/s (3220MB/s), 3071MiB/s-3071MiB/s (3220MB/s-3220MB/s), io=120GiB (129GB), run=40001-40001msec
Disk stats (read/write):
  nvme1n1: ios=31385500/0, sectors=251084000/0, merge=0/0, ticks=9980787/0, in_queue=9980787, util=99.23%
  nvme3n1: ios=31395528/0, sectors=251164224/0, merge=0/0, ticks=9984572/0, in_queue=9984572, util=99.35%

- Rerun the benchmark again for nvmes under the same PCI bridge and see that now this performs as well as nvmes under different bridges (6153MiB/s):

sudo fio --readwrite=randread --blocksize=4k --iodepth=32 --numjobs=8 --time_based --runtime=40 --ioengine=libaio --direct=1 --group_reporting --new_group --name=job1 --filename=/dev/nvme1n1 --new_group --name=job2 --filename=/dev/nvme10n1
...
Jobs: 16 (f=16): [r(16)][100.0%][r=6153MiB/s][r=1575k IOPS][eta 00m:00s]
job1: (groupid=0, jobs=8): err= 0: pid=91963: Wed Sep  3 22:17:41 2025
  read: IOPS=786k, BW=3072MiB/s (3221MB/s)(120GiB/40001msec)
...
job2: (groupid=1, jobs=8): err= 0: pid=91971: Wed Sep  3 22:17:41 2025
  read: IOPS=787k, BW=3075MiB/s (3224MB/s)(120GiB/40001msec)
...
Run status group 0 (all jobs):
   READ: bw=3072MiB/s (3221MB/s), 3072MiB/s-3072MiB/s (3221MB/s-3221MB/s), io=120GiB (129GB), run=40001-40001msec
Run status group 1 (all jobs):
   READ: bw=3075MiB/s (3224MB/s), 3075MiB/s-3075MiB/s (3224MB/s-3224MB/s), io=120GiB (129GB), run=40001-40001msec
Disk stats (read/write):
  nvme1n1: ios=31433923/0, sectors=251471400/0, merge=0/0, ticks=9988587/0, in_queue=9988587, util=99.38%
  nvme10n1: ios=31432262/0, sectors=251458128/0, merge=0/0, ticks=9974708/0, in_queue=9974708, util=99.45%

The I/O performance regression for nvmes under the same PCI bridge is fixed in this kernel

tags:

added: verification-done-plucky-linux
removed: verification-needed-plucky-linux

Revision history for this message

Launchpad Janitor (janitor) wrote on 2025-09-22:

Download full text (119.7 KiB)

This bug was fixed in the package linux - 6.14.0-32.32

---------------
linux (6.14.0-32.32) plucky; urgency=medium

* plucky/linux: 6.14.0-32.32 -proposed tracker (LP: #2121653)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.08.11)

  * Pytorch reports incorrect GPU memory causing "HIP Out of Memory" errors
    (LP: #2120454)
    - drm/amdkfd: add a new flag to manage where VRAM allocations go
    - drm/amdkfd: use GTT for VRAM on APUs only if GTT is larger

* nvme no longer detected on boot after upgrade to 6.8.0-60 (LP: #2111521)
- SAUCE: PCI: Disable RRS polling for Intel SSDPE2KX020T8 nvme

  * kernel panic when reloading apparmor 5.0.0 profiles (LP: #2120233)
    - SAUCE: apparmor5.0.0 [59/53]: apparmor: prevent profile->disconnected
      double free in aa_free_profile

* [SRU] Add support for ALC1708 codec on TRBL platform (LP: #2116247)
- ASoC: Intel: soc-acpi-intel-lnl-match: add rt1320_l12_rt714_l0 support

  * [SRU] Add waiting latency for USB port resume (LP: #2115478)
    - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
    - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime
      pm
    - usb: hub: Fix flushing of delayed work used for post resume purposes

  * minimal kernel lacks modules for blk disk in arm64 openstack environments
    where config_drive is required (LP: #2118499)
    - [Config] Enable SYM53C8XX_2 on arm64

  * Support xe2_hpg (LP: #2116175)
    - drm/xe/xe2_hpg: Add PCI IDs for xe2_hpg
    - drm/xe/xe2_hpg: Define additional Xe2_HPG GMD_ID
    - drm/xe/xe2_hpg: Add set of workarounds
    - drm/xe/xe2hpg: Add Wa_16025250150

  * drm/xe: Lite restore breaks fdinfo drm-cycles-rcs reporting (LP: #2119526)
    - drm/xe: Add WA BB to capture active context utilization
    - drm/xe/lrc: Use a temporary buffer for WA BB

  * No IP Address assigned after hot-plugging Ethernet cable on HP Platform
    (LP: #2115393)
    - Revert "e1000e: change k1 configuration on MTP and later platforms"

  * I/O performance regression on NVMes under same bridge (dual port nvme)
    (LP: #2115738)
    - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes
    - iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags()
    - iommu/vt-d: Create unique domain ops for each stage
    - iommu/vt-d: Split intel_iommu_enforce_cache_coherency()
    - iommu/vt-d: Split paging_domain_compatible()
    - iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain

* BPF header file in wrong location (LP: #2118965)
- [Packaging] Install bpf header to correct location

  * Internal microphone not working on ASUS VivoBook with Realtek ALC256
    (Ubuntu 24.04 + kernel 6.15) (LP: #2112330)
    - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA

  * Documentation update for [Ubuntu25.04] "virsh attach-interface" requires
    a reboot to reflect the attached interfaces on the guest (LP: #2111231)
    - powerpc/pseries/dlpar: Search DRC index from ibm, drc-indexes for IO add

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603)
- tools/x86/kcpuid: Fix e...

This bug was fixed in the package linux - 6.14.0-32.32

---------------
linux (6.14.0-32.32) plucky; urgency=medium

* plucky/linux: 6.14.0-32.32 -proposed tracker (LP: #2121653)

* Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.08.11)

* nvme no longer detected on boot after upgrade to 6.8.0-60 (LP: #2111521)
    - SAUCE: PCI: Disable RRS polling for Intel SSDPE2KX020T8 nvme

* kernel panic when reloading apparmor 5.0.0 profiles (LP: #2120233)
    - SAUCE: apparmor5.0.0 [59/53]: apparmor: prevent profile->disconnected
      double free in aa_free_profile

* [SRU] Add support for ALC1708 codec on TRBL platform (LP: #2116247)
    - ASoC: Intel: soc-acpi-intel-lnl-match: add rt1320_l12_rt714_l0 support

* minimal kernel lacks modules for blk disk in arm64 openstack environments
    where config_drive is required (LP: #2118499)
    - [Config] Enable SYM53C8XX_2 on arm64

* drm/xe: Lite restore breaks fdinfo drm-cycles-rcs reporting (LP: #2119526)
    - drm/xe: Add WA BB to capture active context utilization
    - drm/xe/lrc: Use a temporary buffer for WA BB

* No IP Address assigned after hot-plugging Ethernet cable on HP Platform
    (LP: #2115393)
    - Revert "e1000e: change k1 configuration on MTP and later platforms"

* BPF header file in wrong location (LP: #2118965)
    - [Packaging] Install bpf header to correct location

* Internal microphone not working on ASUS VivoBook with Realtek ALC256
    (Ubuntu 24.04 + kernel 6.15) (LP: #2112330)
    - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA

* Documentation update for  [Ubuntu25.04] "virsh attach-interface" requires
    a reboot to reflect the attached interfaces on the guest (LP: #2111231)
    - powerpc/pseries/dlpar: Search DRC index from ibm, drc-indexes for IO add

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603)
    - tools/x86/kcpuid: Fix error handling
    - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in
      mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
    - crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
    - sched: Fix trace_sched_switch(.prev_state)
    - perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member
    - perf/x86/amd/uncore: Prevent UMC counters from saturating
    - gfs2: replace sd_aspace with sd_inode
    - gfs2: gfs2_create_inode error handling fix
    - perf/core: Fix broken throttling when max_samples_per_tick=1
    - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
    - powerpc: do not build ppc_save_regs.o always
    - powerpc/crash: Fix non-smp kexec preparation
    - sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed
      tasks
    - x86/microcode/AMD: Do not return error when microcode update is not
      necessary
    - crypto: sun8i-ce - undo runtime PM changes during driver removal
    - x86/cpu: Sanitize CPUID(0x80000000) output
    - x86/insn: Fix opcode map (!REX2) superscript tags
    - brd: fix aligned_sector from brd_do_discard()
    - brd: fix discard end sector
    - kselftest: cpufreq: Get rid of double suspend in rtcwake case
    - crypto: marvell/cesa - Avoid empty transfer descriptor
    - erofs: fix file handle encoding for 64-bit NIDs
    - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
    - btrfs: scrub: update device stats when an error is detected
    - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
    - btrfs: fix invalid data space release when truncating block in NOCOW
      mode
    - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
    - crypto: lrw - Only add ecb if it is not already there
    - crypto: xts - Only add ecb if it is not already there
    - crypto: sun8i-ce - move fallback ahash_request to the end of the struct
    - kunit: Fix wrong parameter to kunit_deactivate_static_stub()
    - crypto: api - Redo lookup on EEXIST
    - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
    - ASoC: tas2764: Enable main IRQs
    - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo
      channel 0
    - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
    - spi: tegra210-quad: remove redundant error handling code
    - spi: tegra210-quad: modify chip select (CS) deactivation
    - power: reset: at91-reset: Optimize at91_reset()
    - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
    - ASoC: SOF: amd: add missing acp descriptor field
    - PM: wakeup: Delete space in the end of string shown by
      pm_show_wakelocks()
    - ACPI: resource: fix a typo for MECHREVO in
      irq1_edge_low_force_override[]
    - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
    - PM: sleep: Print PM debug messages during hibernation
    - thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure
    - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
    - spi: sh-msiof: Fix maximum DMA transfer size
    - ASoC: apple: mca: Constrain channels according to TDM mask
    - ALSA: core: fix up bus match const issues.
    - drm/vmwgfx: Add seqno waiter for sync_files
    - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource
    - drm/vmwgfx: Fix dumb buffer leak
    - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3
    - drm/vc4: tests: Use return instead of assert
    - media: rkvdec: Fix frame size enumeration
    - arm64/fpsimd: Avoid RES0 bits in the SME trap handler
    - arm64/fpsimd: Don't corrupt FPMR when streaming mode changes
    - arm64/fpsimd: Reset FPMR upon exec()
    - arm64/fpsimd: Fix merging of FPSIMD state during signal return
    - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions
    - drm/panthor: Update panthor_mmu::irq::mask when needed
    - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support
    - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
    - fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr
    - kunit/usercopy: Disable u64 test on 32-bit SPARC
    - watchdog: exar: Shorten identity name to fit correctly
    - m68k: mac: Fix macintosh_config for Mac II
    - firmware: psci: Fix refcount leak in psci_dt_init
    - arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
    - selftests/seccomp: fix syscall_restart test for arm compat
    - drm/msm/dpu: enable SmartDMA on SM8150
    - drm/msm/dpu: enable SmartDMA on SC8180X
    - drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
    - drm/vkms: Adjust vkms_state->active_planes allocation type
    - drm/tegra: rgb: Fix the unbound reference count
    - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
    - arm64/fpsimd: Do not discard modified SVE state
    - overflow: Fix direct struct member initialization in _DEFINE_FLEX()
    - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
    - selftests/seccomp: fix negative_ENOSYS tracer tests on arm32
    - drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3
    - drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
    - drm/mediatek: Fix kobject put for component sub-drivers
    - drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
    - media: verisilicon: Free post processor buffers on error
    - svcrdma: Reduce the number of rdma_rw contexts per-QP
    - xen/x86: fix initial memory balloon target
    - wifi: ath12k: Fix memory leak during vdev_id mismatch
    - wifi: ath12k: Fix invalid memory access while forming 802.11 header
    - IB/cm: use rwlock for MAD agent lock
    - bpf: Check link_create.flags parameter for multi_kprobe
    - selftests/bpf: Fix bpf_nf selftest failure
    - bpf, sockmap: fix duplicated data transmission
    - wifi: ath12k: fix cleanup path after mhi init
    - wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
    - f2fs: clean up unnecessary indentation
    - f2fs: prevent the current section from being selected as a victim during
      GC
    - page_pool: Move pp_magic check into helper functions
    - page_pool: Track DMA-mapped pages and unmap them when destroying the
      pool
    - net: ncsi: Fix GCPS 64-bit member variables
    - libbpf: Fix buffer overflow in bpf_object__init_prog
    - net/mlx5: Avoid using xso.real_dev unnecessarily
    - xfrm: Use xdo.dev instead of xdo.real_dev
    - wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
    - wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
    - wifi: rtw88: do not ignore hardware read error during DPK
    - wifi: ath12k: Add MSDU length validation for TKIP MIC error
    - wifi: ath12k: Fix the QoS control field offset to build QoS header
    - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
    - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
    - libbpf: Fix event name too long error
    - libbpf: Remove sample_period init in perf_buffer
    - Use thread-safe function pointer in libbpf_print
    - iommu: Protect against overflow in iommu_pgsize()
    - bonding: assign random address if device address is same as bond
    - f2fs: clean up w/ fscrypt_is_bounce_page()
    - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
    - libbpf: Use proper errno value in linker
    - bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps
    - netfilter: bridge: Move specific fragmented packet to slow_path instead
      of dropping it
    - netfilter: nft_quota: match correctly when the quota just depleted
    - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
    - tracing: Move histogram trigger variables from stack to per CPU
      structure
    - clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
    - clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
    - clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
    - clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
    - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels
    - wifi: iwlfiwi: mvm: Fix the rate reporting
    - efi/libstub: Describe missing 'out' parameter in efi_load_initrd
    - selftests/bpf: Fix caps for __xlated/jited_unpriv
    - tracing: Rename event_trigger_alloc() to trigger_data_alloc()
    - tracing: Fix error handling in event_trigger_parse()
    - of: unittest: Unlock on error in unittest_data_add()
    - ktls, sockmap: Fix missing uncharge operation
    - libbpf: Use proper errno value in nlattr
    - dt-bindings: soc: fsl,qman-fqd: Fix reserved-memory.yaml reference
    - clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
    - s390/bpf: Store backchain even for leaf progs
    - wifi: rtw89: pci: enlarge retry times of RX tag to 1000
    - wifi: rtw89: fix firmware scan delay unit for WiFi 6 chips
    - iommu: remove duplicate selection of DMAR_TABLE
    - wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
    - hisi_acc_vfio_pci: add eq and aeq interruption restore
    - scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
    - Bluetooth: ISO: Fix not using SID from adv report
    - wifi: mt76: mt7925: prevent multiple scan commands
    - wifi: mt76: mt7925: refine the sniffer commnad
    - wifi: mt76: mt7925: ensure all MCU commands wait for response
    - wifi: mt76: mt7996: set EHT max ampdu length capability
    - wifi: mt76: mt7996: fix RX buffer size of MCU event
    - bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-
      uprobe attach logic"
    - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft
      only builds
    - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
    - vfio/type1: Fix error unwind in migration dirty bitmap allocation
    - Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
    - netfilter: nf_tables: nft_fib: consistent l3mdev handling
    - netfilter: nft_tunnel: fix geneve_opt dump
    - RISC-V: KVM: lock the correct mp_state during reset
    - vsock/virtio: fix `rx_bytes` accounting for stream sockets
    - net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
    - net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in
      dmaengine xmit
    - net: phy: fix up const issues in to_mdio_device() and to_phy_device()
    - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
    - net: lan743x: Fix PHY reset handling during initialization and WOL
    - octeontx2-pf: QOS: Perform cache sync on send queue teardown
    - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
    - f2fs: use d_inode(dentry) cleanup dentry->d_inode
    - f2fs: fix to correct check conditions in f2fs_cross_rename
    - arm64: dts: qcom: sm8650: setup gpu thermal with higher temperatures
    - arm64: dts: qcom: sm8650: add missing cpu-cfg interconnect path in the
      mdss node
    - arm64: dts: qcom: x1e80100-romulus: Keep L12B and L15B always on
    - arm64: dts: qcom: sdm845-starqltechn: remove wifi
    - arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
    - arm64: dts: qcom: sdm845-starqltechn: refactor node order
    - arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
    - arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
    - arm64: dts: qcom: sm8250: Fix CPU7 opp table
    - arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
    - arm64: dts: qcom: ipq9574: Fix USB vdd info
    - arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588
    - ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
    - ARM: dts: at91: at91sam9263: fix NAND chip selects
    - arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
    - arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect
      GPIO
    - arm64: dts: mt8183: Add port node to mt8183.dtsi
    - arm64: dts: imx8mm-beacon: Fix RTC capacitive load
    - arm64: dts: imx8mn-beacon: Fix RTC capacitive load
    - arm64: dts: imx8mp-beacon: Fix RTC capacitive load
    - arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI
      audio
    - arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI
      audio
    - arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
    - arm64: dts: mt6359: Add missing 'compatible' property to regulators node
    - arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
    - arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
    - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c
    - arm64: dts: rockchip: Update eMMC for NanoPi R5 series
    - arm64: tegra: Drop remaining serial clock-names and reset-names
    - arm64: tegra: Add uartd serial alias for Jetson TX1 module
    - arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
    - soc: qcom: smp2p: Fix fallback to qcom,ipc parse
    - ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
    - nilfs2: add pointer check for nilfs_direct_propagate()
    - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
    - dt-bindings: vendor-prefixes: Add Liontron name
    - ARM: dts: qcom: apq8064: add missing clocks to the timer node
    - ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon
      device
    - ARM: dts: qcom: apq8064: move replicator out of soc node
    - arm64: defconfig: mediatek: enable PHY drivers
    - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399
      Puma with Haikou
    - arm64: dts: qcom: qcm2290: fix (some) of QUP interconnects
    - arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
    - arm64: dts: mt6359: Rename RTC node to match binding expectations
    - ARM: aspeed: Don't select SRAM
    - soc: aspeed: lpc: Fix impossible judgment condition
    - randstruct: gcc-plugin: Remove bogus void member
    - randstruct: gcc-plugin: Fix attribute addition
    - perf build: Warn when libdebuginfod devel files are not available
    - perf ui browser hists: Set actions->thread before calling
      do_zoom_thread()
    - dm: don't change md if dm_table_set_restrictions() fails
    - dm: free table mempools if not used in __bind
    - x86/irq: Ensure initial PIR loads are performed exactly once
    - perf symbol-minimal: Fix double free in filename__read_build_id
    - dm-flakey: error all IOs when num_features is absent
    - dm-flakey: make corrupting read bios work
    - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
    - perf tests: Fix 'perf report' tests installation
    - perf intel-pt: Fix PEBS-via-PT data_src
    - perf scripts python: exported-sql-viewer.py: Fix pattern matching with
      Python 3
    - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
    - remoteproc: k3-r5: Drop check performed in
      k3_r5_rproc_{mbox_callback/kick}
    - remoteproc: k3-dsp: Drop check performed in
      k3_dsp_rproc_{mbox_callback/kick}
    - rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
    - mfd: exynos-lpass: Fix an error handling path in exynos_lpass_probe()
    - mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in
      exynos_lpass_remove()
    - mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
    - perf tests switch-tracking: Fix timestamp comparison
    - mailbox: imx: Fix TXDB_V2 sending
    - mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting
    - perf symbol: Fix use-after-free in filename__read_build_id
    - perf record: Fix incorrect --user-regs comments
    - perf trace: Always print return value for syscalls returning a pid
    - nfs: clear SB_RDONLY before getting superblock
    - nfs: ignore SB_RDONLY when remounting nfs
    - perf trace: Set errpid to false for rseq and set_robust_list
    - perf callchain: Always populate the addr_location map when adding IP
    - cifs: Fix validation of SMB1 query reparse point response
    - rust: alloc: add missing invariant in Vec::set_len()
    - rtc: sh: assign correct interrupts with DT
    - phy: rockchip: samsung-hdptx: Fix clock ratio setup
    - phy: rockchip: samsung-hdptx: Do no set rk_hdptx_phy->rate in case of
      errors
    - PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
    - PCI: rcar-gen4: set ep BAR4 fixed size
    - PCI: cadence: Fix runtime atomic count underflow
    - PCI: apple: Use gpiod_set_value_cansleep in probe flow
    - PCI/DPC: Initialize aer_err_info before using it
    - PCI/DPC: Log Error Source ID only when valid
    - rtc: loongson: Add missing alarm notifications for ACPI RTC events
    - PCI: endpoint: Retain fixed-size BAR size as well as aligned size
    - thunderbolt: Fix a logic error in wake on connect
    - iio: filter: admv8818: fix band 4, state 15
    - iio: filter: admv8818: fix integer overflow
    - iio: filter: admv8818: fix range calculation
    - iio: filter: admv8818: Support frequencies >= 2^32
    - iio: adc: ad7124: Fix 3dB filter frequency reading
    - MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
    - coresight: Fixes device's owner field for registered using
      coresight_init_driver()
    - coresight: catu: Introduce refcount and spinlock for enabling/disabling
    - counter: interrupt-cnt: Protect enable/disable OPs with mutex
    - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
    - mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array()
    - iio: adc: PAC1934: fix typo in documentation link
    - iio: adc: mcp3911: fix device dependent mappings for conversion result
      registers
    - USB: gadget: udc: fix const issue in gadget_match_driver()
    - USB: typec: fix const issue in typec_match()
    - loop: add file_start_write() and file_end_write()
    - drm/xe: Make xe_gt_freq part of the Documentation
    - Fix sock_exceed_buf_limit not being triggered in
      __sk_mem_raise_allocated
    - net: stmmac: platform: guarantee uniqueness of bus_id
    - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
    - net: tipc: fix refcount warning in tipc_aead_encrypt
    - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
    - net/mlx4_en: Prevent potential integer overflow calculating Hz
    - net: lan966x: Make sure to insert the vlan tags also in host mode
    - spi: bcm63xx-spi: fix shared reset
    - spi: bcm63xx-hsspi: fix shared reset
    - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
    - ice: create new Tx scheduler nodes for new queues only
    - ice: fix rebuilding the Tx scheduler tree for large queue counts
    - idpf: fix a race in txq wakeup
    - idpf: avoid mailbox timeout delays during reset
    - net: dsa: tag_brcm: legacy: fix pskb_may_pull length
    - drm/i915/guc: Check if expecting reply before decrementing
      outstanding_submission_g2h
    - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP
    - drm/i915/guc: Handle race condition where wakeref count drops below 0
    - vmxnet3: correctly report gso type for UDP tunnels
    - selftests: net: build net/lib dependency in all target
    - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
    - nvme: fix command limits status code
    - drm/panel-simple: fix the warnings for the Evervision VGG644804
    - netfilter: nf_nat: also check reverse tuple to obtain clashing entry
    - net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces.
    - net: dsa: b53: do not enable RGMII delay on bcm63xx
    - net: dsa: b53: allow RGMII for bcm63xx RGMII ports
    - net: dsa: b53: do not touch DLL_IQQD on bcm53115
    - wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
    - net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing
    - wireguard: device: enable threaded NAPI
    - scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
    - ASoC: codecs: hda: Fix RPM usage count underflow
    - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
    - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
    - iov_iter: use iov_offset for length calculation in iov_iter_aligned_bvec
    - path_overmount(): avoid false negatives
    - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
    - do_change_type(): refuse to operate on unmounted/not ours mounts
    - tools/power turbostat: Fix AMD package-energy reporting
    - ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA
    - ALSA: hda/realtek - Support mute led function for HP platform
    - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
    - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
    - Input: synaptics-rmi - fix crash with unsupported versions of F34
    - pmdomain: core: Introduce dev_pm_genpd_rpm_always_on()
    - mmc: sdhci-of-dwcmshc: add PD workaround on RK3576
    - pinctrl: samsung: refactor drvdata suspend & resume callbacks
    - pinctrl: samsung: add dedicated SoC eint suspend/resume callbacks
    - pinctrl: samsung: add gs101 specific eint suspend/resume callbacks
    - Bluetooth: hci_core: fix list_for_each_entry_rcu usage
    - Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers
    - Bluetooth: btintel_pcie: Increase the tx and rx descriptor count
    - Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race
      condition
    - Bluetooth: MGMT: Remove unused mgmt_pending_find_data
    - net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0
    - ath10k: snoc: fix unbalanced IRQ enable in crash recovery
    - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
    - wifi: ath11k: don't use static variables in
      ath11k_debugfs_fw_stats_process()
    - wifi: ath11k: don't wait when there is no vdev started
    - wifi: ath11k: move some firmware stats related functions outside of
      debugfs
    - wifi: ath11k: validate ath11k_crypto_mode on top of
      ath11k_core_qmi_firmware_ready
    - wifi: ath12k: refactor ath12k_hw_regs structure
    - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
    - spi: omap2-mcspi: Disable multi mode when CS should be kept asserted
      after message
    - spi: omap2-mcspi: Disable multi-mode when the previous message kept CS
      asserted
    - pinctrl: qcom: pinctrl-qcm2290: Add missing pins
    - scsi: iscsi: Fix incorrect error path labels for flashnode operations
    - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
    - drm/meson: fix debug log statement when setting the HDMI clocks
    - drm/meson: use vclk_freq instead of pixel_freq in debug print
    - drm/meson: fix more rounding issues with 59.94Hz modes
    - i40e: return false from i40e_reset_vf if reset is in progress
    - i40e: retry VFLR handling if there is ongoing VF reset
    - macsec: MACsec SCI assignment for ES = 0
    - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
    - Bluetooth: MGMT: Fix sparse errors
    - net/mlx5: Ensure fw pages are always allocated on same NUMA
    - net/mlx5: Fix return value when searching for existing flow group
    - net/mlx5: HWS, fix missing ip_version handling in definer
    - net/mlx5e: Fix leak of Geneve TLV option object
    - net_sched: tbf: fix a race in tbf_change()
    - fs/filesystems: Fix potential unsigned integer underflow in fs_name()
    - gfs2: pass through holder from the VFS for freeze/thaw
    - btrfs: exit after state split error at set_extent_bit()
    - nvmet-fcloop: access fcpreq only when holding reqlock
    - perf: Ensure bpf_perf_link path is properly serialized
    - block: use q->elevator with ->elevator_lock held in elv_iosched_show()
    - io_uring: consistently use rcu semantics with sqpoll thread
    - bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
    - block: Fix bvec_set_folio() for very large folios
    - objtool/rust: relax slice condition to cover more `noreturn` Rust
      functions
    - tools/resolve_btfids: Fix build when cross compiling kernel with clang.
    - Revert "wifi: mwifiex: Fix HT40 bandwidth issue."
    - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
    - usb: usbtmc: Fix read_stb function and get_stb ioctl
    - tty: serial: 8250_omap: fix TX with DMA for am33xx
    - usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence
    - usb: cdnsp: Fix issue with detecting command completion event
    - usb: cdnsp: Fix issue with detecting USB 3.2 speed
    - usb: Flush altsetting 0 endpoints before reinitializating them after
      reset.
    - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
    - 9p: Add a migrate_folio method
    - ring-buffer: Move cpus_read_lock() outside of buffer->mutex
    - xfs: don't assume perags are initialised when trimming AGs
    - xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
    - x86/fred/signal: Prevent immediate repeat of single step trap on return
      from SIGTRAP handler
    - calipso: unlock rcu before returning -EAFNOSUPPORT
    - regulator: dt-bindings: mt6357: Drop fixed compatible requirement
    - usb: misc: onboard_usb_dev: fix build warning for
      CONFIG_USB_ONBOARD_DEV_USB5744=n
    - net: usb: aqc111: debug info before sanitation
    - overflow: Introduce __DEFINE_FLEX for having no initializer
    - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add
    - thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit
    - pidfs: move O_RDWR into pidfs_alloc_file()
    - ACPICA: Introduce ACPI_NONSTRING
    - ACPICA: Apply ACPI_NONSTRING
    - ACPICA: Apply ACPI_NONSTRING in more places
    - bcachefs: Repair code for directory i_size
    - bcachefs: delete dead code from may_delete_deleted_inode()
    - bcachefs: Run may_delete_deleted_inode() checks in bch2_inode_rm()
    - bcachefs: Fix subvol to missing root repair
    - crypto: ecdsa - Fix enc/dec size reported by KEYCTL_PKEY_QUERY
    - crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
    - spinlock: extend guard with spinlock_bh variants
    - crypto: zynqmp-sha - Add locking
    - gfs2: Move gfs2_dinode_dealloc
    - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc
    - selftests: coredump: Properly initialize pointer
    - selftests: coredump: Fix test failure for slow machines
    - selftests: coredump: Raise timeout to 2 minutes
    - sched/fair: Fixup wake_up_sync() vs DELAYED_DEQUEUE
    - gfs2: Move gfs2_trans_add_databufs
    - gfs2: Don't start unnecessary transactions during log flush
    - platform/chrome: cros_ec_typec: Set Pin Assignment E in DP PORT VDO
    - PM: runtime: Add new devm functions
    - spi: atmel-quadspi: Fix unbalanced pm_runtime by using devm_ API
    - EDAC/bluefield: Don't use bluefield_edac_readl() result on error
    - drm: xlnx: zynqmp_dpsub: fix Kconfig dependencies for ASoC
    - drm/vc4: hdmi: Call HDMI hotplug helper on disconnect
    - drm/panthor: Call panthor_gpu_coherency_init() after PM resume()
    - accel/amdxdna: Fix incorrect size of ERT_START_NPU commands
    - drm/panthor: Fix the panthor_gpu_coherency_init() error path
    - drm/amdgpu: Refine Cleaner Shader MEC firmware version for GFX10.1.x
      GPUs
    - drm/v3d: Associate a V3D tech revision to all supported devices
    - drm/v3d: fix client obtained from axi_ids on V3D 4.1
    - drm/v3d: client ranges from axi_ids are different with V3D 7.1
    - drm/msm/dpu: remove DSC feature bit for PINGPONG on MSM8937
    - drm/msm/dpu: remove DSC feature bit for PINGPONG on MSM8917
    - drm/msm/dpu: remove DSC feature bit for PINGPONG on MSM8953
    - drm/amd/display: Don't check for NULL divisor in fixpt code
    - kselftest/arm64: fp-ptrace: Fix expected FPMR value when PSTATE.SM is
      changed
    - drm/i915/dp_mst: Use the correct connector while computing the link BPP
      limit on MST
    - libbpf: Fix implicit memfd_create() for bionic
    - bpf: Check link_create.flags parameter for multi_uprobe
    - net: phy: mediatek: permit to compile test GE SOC PHY driver
    - wifi: ath12k: Resolve multicast packet drop by populating key_cipher in
      ath12k_install_key()
    - wifi: ath12k: fix SLUB BUG - Object already free in ath12k_reg_free()
    - wifi: ath12k: fix ATH12K_FLAG_REGISTERED flag handling
    - net/mlx5: HWS, Fix matcher action template attach
    - xfrm: provide common xdo_dev_offload_ok callback implementation
    - xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free}
    - bonding: Mark active offloaded xfrm_states
    - bonding: Fix multiple long standing offload races
    - wifi: ath12k: Handle error cases during extended skb allocation
    - wifi: ath12k: Refactor the monitor Rx parser handler argument
    - wifi: ath12k: Add extra TLV tag parsing support in monitor Rx path
    - wifi: ath12k: Avoid fetch Error bitmap and decap format from Rx TLV
    - wifi: ath12k: Replace band define G with GHZ where appropriate
    - wifi: ath12k: change the status update in the monitor Rx
    - wifi: ath12k: add rx_info to capture required field from rx descriptor
    - wifi: ath12k: remove redundant declaration of ath12k_dp_rx_h_find_peer()
    - wifi: ath12k: replace the usage of rx desc with rx_info
    - wifi: ath12k: fix wrong handling of CCMP256 and GCMP ciphers
    - wifi: iwlwifi: re-add IWL_AMSDU_8K case
    - iommu: ipmmu-vmsa: avoid Wformat-security warning
    - iommu/io-pgtable-arm: dynamically allocate selftest device struct
    - f2fs: zone: fix to calculate first_zoned_segno correctly
    - selftests/bpf: Fix kmem_cache iterator draining
    - iommu/arm-smmu-v3: Fix incorrect return in arm_smmu_attach_dev
    - clk: test: Forward-declare struct of_phandle_args in kunit/clk.h
    - pinctrl: qcom: correct the ngpios entry for QCS615
    - pinctrl: qcom: correct the ngpios entry for QCS8300
    - wifi: ath12k: Reorder and relocate the release of resources in
      ath12k_core_deinit()
    - hisi_acc_vfio_pci: bugfix cache write-back issue
    - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
    - wifi: mt76: mt7996: avoid null deref in mt7996_stop_phy()
    - Bluetooth: separate CIS_LINK and BIS_LINK link types
    - wifi: mt76: scan: Fix 'mlink' dereferenced before IS_ERR_OR_NULL check
    - wifi: mt76: mt7996: fix beamformee SS field
    - wifi: mt76: mt7996: fix invalid NSS setting when TX path differs from
      NSS
    - wifi: mt76: fix available_antennas setting
    - octeontx2-af: Send Link events one by one
    - f2fs: fix to skip f2fs_balance_fs() if checkpoint is disabled
    - arm64: dts: qcom: sa8775p: Partially revert "arm64: dts: qcom: sa8775p:
      add QCrypto nodes"
    - arm64: dts: qcom: qcs8300: Partially revert "arm64: dts: qcom: qcs8300:
      add QCrypto nodes"
    - arm64: dts: qcom: sm8550: use ICC tag for all interconnect phandles
    - arm64: dts: qcom: sm8550: add missing cpu-cfg interconnect path in the
      mdss node
    - arm64: dts: qcom: ipq9574: fix the msi interrupt numbers of pcie3
    - arm64: dts: qcom: sm8750: Fix cluster hierarchy for idle states
    - arm64: dts: qcom: sm8750: Correct clocks property for uart14 node
    - arm64: dts: qcom: qcs615: remove disallowed property in spmi bus node
    - arm64: dts: qcom: sm8650: Fix domain-idle-state for CPU2
    - arm64: dts: rockchip: Add missing uart3 interrupt for RK3528
    - arm64: dts: mediatek: mt8188: Fix IOMMU device for rdma0
    - arm64: dts: qcom: x1e001de-devkit: Describe USB retimers resets pin
      configs
    - arm64: dts: qcom: x1e001de-devkit: Fix pin config for USB0 retimer vregs
    - arm64: dts: allwinner: a100: set maximum MMC frequency
    - arm64: dts: renesas: white-hawk-single: Improve Ethernet TSN description
    - arm64: dts: qcom: sm8650: add the missing l2 cache node
    - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399
      Puma
    - dt-bindings: display/msm/dsi-phy: Add header with exposed clock IDs
    - arm64: dts: qcom: msm8998: Use the header with DSI phy clock IDs
    - arm64: dts: qcom: msm8998: Remove mdss_hdmi_phy phandle argument
    - arm64: dts: qcom: qcs615: Fix up UFS clocks
    - ubsan: integer-overflow: depend on BROKEN to keep this out of CI
    - [Config] disable UBSAN_SIGNED_WRAP
    - tools build: Don't set libunwind as available if test-all.c build
      succeeds
    - tools build: Don't show libunwind build status as it is opt-in
    - tools build: Don't show libbfd build status as it is opt-in
    - dm: handle failures in dm_table_set_restrictions
    - HID: intel-thc-hid: intel-quicki2c: pass correct arguments to
      acpi_evaluate_object
    - perf tool_pmu: Fix aggregation on duration_time
    - remoteproc: k3-r5: Refactor sequential core power up/down operations
    - netfs: Fix setting of transferred bytes with short DIO reads
    - netfs: Fix the request's work item to not require a ref
    - netfs: Fix wait/wake to be consistent about the waitqueue used
    - mfd: exynos-lpass: Fix another error handling path in
      exynos_lpass_probe()
    - netfs: Fix undifferentiation of DIO reads from unbuffered reads
    - mailbox: mchp-ipc-sbi: Fix COMPILE_TEST build error
    - perf pmu: Avoid segv for missing name/alias_name in wildcarding
    - s390/uv: Don't return 0 from make_hva_secure() if the operation was not
      successful
    - s390/uv: Always return 0 from s390_wiggle_split_folio() if successful
    - s390/uv: Improve splitting of large folios that cannot be split while
      dirty
    - nfs_localio: use cmpxchg() to install new nfs_file_localio
    - nfs_localio: always hold nfsd net ref with nfsd_file ref
    - nfs_localio: simplify interface to nfsd for getting nfsd_file
    - nfs_localio: duplicate nfs_close_local_fh()
    - nfs_localio: protect race between nfs_uuid_put() and
      nfs_close_local_fh()
    - nfs_localio: change nfsd_file_put_local() to take a pointer to __rcu
      pointer
    - rust: file: mark `LocalFile` as `repr(transparent)`
    - exportfs: require ->fh_to_parent() to encode connectable file handles
    - PCI: pciehp: Ignore Presence Detect Changed caused by DPC
    - PCI: pciehp: Ignore Link Down/Up caused by Secondary Bus Reset
    - PCI: rockchip: Fix order of rockchip_pci_core_rsts
    - PCI: imx6: Save and restore the LUT setting during suspend/resume for
      i.MX95 SoC
    - Revert "phy: qcom-qusb2: add QUSB2 support for IPQ5424"
    - phy: qcom-qusb2: reuse the IPQ6018 settings for IPQ5424
    - soundwire: only compute port params in specific stream states
    - rust: pci: fix docs related to missing Markdown code spans
    - coresight: core: Disable helpers for devices that fail to enable
    - iio: dac: adi-axi-dac: fix bus read
    - coresight: tmc: fix failure to disable/enable ETF after reading
    - coresight: etm4x: Fix timestamp bit field handling
    - coresight/etm4: fix missing disable active config
    - staging: gpib: Fix PCMCIA config identifier
    - staging: gpib: Fix secondary address restriction
    - rust: miscdevice: fix typo in MiscDevice::ioctl documentation
    - drm/bridge: analogix_dp: Remove the unnecessary calls to
      clk_disable_unprepare() during probing
    - drm/bridge: analogix_dp: Remove CONFIG_PM related check in
      analogix_dp_bind()/analogix_dp_unbind()
    - drm/bridge: analogix_dp: Add support to get panel from the DP AUX bus
    - drm/bridge: analogix_dp: Fix clk-disable removal
    - drm/xe: Add missing documentation of rpa_freq
    - md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT
    - net: Fix checksum update for ILA adj-transport
    - bpf: Clarify the meaning of BPF_F_PSEUDO_HDR
    - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
    - iavf: iavf_suspend(): take RTNL before netdev_lock()
    - iavf: centralize watchdog requeueing itself
    - iavf: simplify watchdog_task in terms of adminq task scheduling
    - iavf: extract iavf_watchdog_step() out of iavf_watchdog_task()
    - iavf: sprinkle netdev_assert_locked() annotations
    - drm/amdgpu/gfx10: Refine Cleaner Shader for GFX10.1.10
    - block: flip iter directions in blk_rq_integrity_map_user()
    - nvme: fix implicit bool to flags conversion
    - net: dsa: b53: implement setting ageing time
    - net: dsa: b53: do not configure bcm63xx's IMP port interface
    - netlink: specs: rt-link: add missing byte-order properties
    - net: annotate data-races around cleanup_net_task
    - drm/xe/vsec: fix CONFIG_INTEL_VSEC dependency
    - drm/xe: Rework eviction rejection of bound external bos
    - ALSA: hda: Allow to fetch hlink by ID
    - ASoC: Intel: avs: PCM operations for LNL-based platforms
    - ASoC: Intel: avs: Fix PPLCxFMT calculation
    - ASoC: Intel: avs: Ignore Vendor-space manipulation for ACE
    - ASoC: Intel: avs: Read HW capabilities when possible
    - ASoC: Intel: avs: Relocate DSP status registers
    - ASoC: Intel: avs: Fix paths in MODULE_FIRMWARE hints
    - fs: convert mount flags to enum
    - finish_automount(): don't leak MNT_LOCKED from parent to child
    - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the
      right userns
    - genksyms: Fix enum consts from a reference affecting new values
    - accel/amdxdna: Fix incorrect PSP firmware size
    - drm/vc4: fix infinite EPROBE_DEFER loop
    - iavf: fix reset_task for early reset event
    - ice/ptp: fix crosstimestamp reporting
    - net/mlx5: HWS, make sure the uplink is the last destination
    - btrfs: fix fsync of files with no hard links not persisting deletion
    - io_uring: fix spurious drain flushing
    - smb: client: fix perf regression with deferred closes
    - rust: compile libcore with edition 2024 for 1.87+
    - pidfs: never refuse ppid == 0 in PIDFD_GET_INFO
    - powerpc/kernel: Fix ppc_save_regs inclusion in build
    - mm/filemap: gate dropbehind invalidate on folio !dirty && !writeback
    - mm/filemap: use filemap_end_dropbehind() for read invalidation
    - x86/hyperv: Fix APIC ID and VP index confusion in hv_snp_boot_ap()
    - Upstream stable to v6.12.34, v6.15.1, v6.15.2, v6.15.3

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38105
    - ALSA: usb-audio: Kill timer properly at removal

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38114
    - e1000: Move cancel_work_sync to avoid deadlock

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38116
    - wifi: ath12k: fix uaf in ath12k_core_init()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38306
    - fs/fhandle.c: fix a race in call of has_locked_children()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38272
    - net: dsa: b53: do not enable EEE on bcm63xx

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38311
    - iavf: get rid of the crit lock

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38128
    - Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38130
    - drm/connector: only call HDMI audio helper plugged cb if non-null

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38132
    - coresight: holding cscfg_csdev_lock while removing cscfg from csdev

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38137
    - PCI/pwrctrl: Cancel outstanding rescan work when unregistering

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38139
    - netfs: Fix oops in write-retry from mis-resetting the subreq iterator

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38140
    - dm: limit swapping tables for devices with zone write plugs

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38279
    - bpf: Do not include stack ptr register in precision backtracking
      bookkeeping

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38314
    - virtio-pci: Fix result size returned for the admin command completion

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38316
    - wifi: mt76: mt7996: avoid NULL pointer dereference in
      mt7996_set_monitor()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38281
    - wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38284
    - wifi: rtw89: pci: configure manual DAC mode via PCI config API only

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38287
    - IB/cm: Drop lockdep assert and WARN when freeing old msg

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38289
    - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38291
    - wifi: ath12k: Prevent sending WMI commands to firmware during firmware
      crash

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38294
    - wifi: ath12k: fix NULL access in assign channel context handler

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38296
    - ACPI: platform_profile: Avoid initializing on non-ACPI platforms

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38100
    - x86/iopl: Cure TIF_IO_BITMAP inconsistencies

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38101
    - ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38267
    - ring-buffer: Do not trigger WARN_ON() due to a commit_overrun

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38268
    - usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38102
    - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38301
    - nvmem: zynqmp_nvmem: unbreak driver after cleanup

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38352
    - posix-cpu-timers: fix race between handle_posix_cpu_timers() and
      posix_cpu_timer_del()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38103
    - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38302
    - block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38106
    - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38269
    - btrfs: exit after state insertion failure at btrfs_convert_extent_bit()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38270
    - net: drv: netdevsim: don't napi_complete() from netpoll

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38107
    - net_sched: ets: fix a race in ets_qdisc_change()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38108
    - net_sched: red: fix a race in __red_change()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38109
    - net/mlx5: Fix ECVF vports unload on shutdown flow

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38303
    - Bluetooth: eir: Fix possible crashes on eir_create_adv_data

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38304
    - Bluetooth: Fix NULL pointer deference on eir_get_service_data

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38110
    - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38111
    - net/mdiobus: Fix potential out-of-bounds read/write access

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38112
    - net: Fix TOCTOU issue in sk_is_readable()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38113
    - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38088
    - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38115
    - net_sched: sch_sfq: fix a potential crash on gso_skb handling

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38414
    - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38305
    - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38117
    - Bluetooth: MGMT: Protect mgmt_pending list with its own lock

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38118
    - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38119
    - scsi: core: ufs: Fix a hang in the error handler

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38307
    - ASoC: Intel: avs: Verify content returned by parse_int_array()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38310
    - seg6: Fix validation of nexthop addresses

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38120
    - netfilter: nf_set_pipapo_avx2: fix initial map fill

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38122
    - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38123
    - net: wwan: t7xx: Fix napi rx poll issue

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38124
    - net: fix udp gso skb_segment after pull from frag_list

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38125
    - net: stmmac: make sure that ptp_rate is not 0 before configuring EST

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38126
    - net: stmmac: make sure that ptp_rate is not 0 before configuring
      timestamping

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38127
    - ice: fix Tx scheduler error handling in XDP callback

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38129
    - page_pool: Fix use-after-free in page_pool_recycle_in_ring

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38131
    - coresight: prevent deactivate active config while enabling the config

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38274
    - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38134
    - usb: acpi: Prevent null pointer dereference in
      usb_acpi_add_usb4_devlink()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38135
    - serial: Fix potential null-ptr-deref in mlb_usio_probe()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38136
    - usb: renesas_usbhs: Reorder clock handling and power management in probe

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38138
    - dmaengine: ti: Add NULL check in udma_probe()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38275
    - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38141
    - dm: fix dm_blk_report_zones

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38142
    - hwmon: (asus-ec-sensors) check sensor index in read_string()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38277
    - mtd: nand: ecc-mxic: Fix use of uninitialized variable ret

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38143
    - backlight: pm8941: Add NULL check in wled_configure()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38312
    - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38145
    - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38313
    - bus: fsl-mc: fix double-free on mc_dev

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38415
    - Squashfs: check return result of sb_min_blocksize

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38146
    - net: openvswitch: Fix the dead loop of MPLS parse

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38147
    - calipso: Don't call calipso functions for AF_INET sk.

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38278
    - octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38148
    - net: phy: mscc: Fix memory leak when using one step timestamping

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38149
    - net: phy: clear phydev->devlink when the link is deleted

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38280
    - bpf: Avoid __bpf_prog_ret0_warn when jit fails

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38151
    - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38153
    - net: usb: aqc111: fix error handling of usbnet read calls

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38154
    - bpf, sockmap: Avoid using sk_socket after free when sending

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38315
    - Bluetooth: btintel: Check dsbr size from EFI variable

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38155
    - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38156
    - wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38282
    - kernfs: Relax constraint in draining guard

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38157
    - wifi: ath9k_htc: Abort software beacon handling if disabled

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38283
    - hisi_acc_vfio_pci: bugfix live migration function without VF device
      driver

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38158
    - hisi_acc_vfio_pci: fix XQE dma address error

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38159
    - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38285
    - bpf: Fix WARN() in get_bpf_raw_tp_regs

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38286
    - pinctrl: at91: Fix possible out-of-boundary access

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38160
    - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38161
    - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38162
    - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38288
    - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible
      kernels

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38290
    - wifi: ath12k: fix node corruption in ar->arvifs list

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38292
    - wifi: ath12k: fix invalid access to memory

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38163
    - f2fs: fix to do sanity check on sbi->total_valid_block_count

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38317
    - wifi: ath12k: Fix buffer overflow in debugfs

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38164
    - f2fs: zone: fix to avoid inconsistence in between SIT and SSA

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38165
    - bpf, sockmap: Fix panic when calling skb_linearize

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38166
    - bpf: fix ktls panic with sockmap

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38293
    - wifi: ath11k: fix node corruption in ar->arvifs list

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38295
    - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in
      meson_ddr_pmu_create()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38167
    - fs/ntfs3: handle hdr_first_de() return value

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38318
    - perf: arm-ni: Fix missing platform_set_drvdata()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38168
    - perf: arm-ni: Unregister PMUs on probe failure

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38169
    - arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38170
    - arm64/fpsimd: Discard stale CPU state when handling SME traps

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38319
    - drm/amd/pp: Fix potential NULL pointer dereference in
      atomctrl_initialize_mc_reg_table

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38297
    - PM: EM: Fix potential division-by-zero error in em_compute_costs()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38298
    - EDAC/skx_common: Fix general protection fault

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38299
    - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38172
    - erofs: avoid using multiple devices with different type

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38173
    - crypto: marvell/cesa - Handle zero-length skcipher requests

* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
    CVE-2025-38300
    - crypto: sun8i-ce-cipher - fix error handling in
      sun8i_ce_cipher_prepare()

* Plucky update: v6.14.11 upstream stable release (LP: #2119039)
    - tracing: Fix compilation warning on arm32
    - pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
    - pinctrl: armada-37xx: set GPIO output value before setting direction
    - clk: samsung: correct clock summary for hsi1 block
    - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
    - Documentation: ACPI: Use all-string data node references
    - rtc: Make rtc_time64_to_tm() support dates before 1970
    - rtc: Fix offset calculation for .start_secs < 0
    - orangefs: adjust counting code to recover from 665575cf
    - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
    - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
    - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
    - usb: typec: ucsi: fix Clang -Wsign-conversion warning
    - Bluetooth: hci_qca: move the SoC type check to the right place
    - nvmem: rmem: select CONFIG_CRC32
    - usb: usbtmc: Fix timeout value in get_stb
    - dt-bindings: pwm: adi,axi-pwmgen: Fix clocks
    - dt-bindings: usb: cypress,hx3: Add support for all variants
    - dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt
      property
    - Linux 6.14.11

* Plucky update: v6.14.11 upstream stable release (LP: #2119039) //
    CVE-2025-38174
    - thunderbolt: Do not double dequeue a configuration request

* Plucky update: v6.14.11 upstream stable release (LP: #2119039) //
    CVE-2025-38175
    - binder: fix yet another UAF in binder_devices

* Plucky update: v6.14.11 upstream stable release (LP: #2119039) //
    CVE-2025-38176
    - binder: fix use-after-free in binderfs_evict_inode()

* Plucky update: v6.14.11 upstream stable release (LP: #2119039) //
    CVE-2025-38265
    - serial: jsm: fix NPE during jsm_uart_port_init

* Plucky update: v6.14.10 upstream stable release (LP: #2119010)
    - can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
    - arm64: dts: socfpga: agilex5: fix gpio0 address
    - arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma
    - arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
    - arm64: dts: qcom: sa8775p: Add missing properties for cryptobam
    - arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property
    - arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10
    - arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
    - arm64: dts: qcom: sm8450: Add missing properties for cryptobam
    - arm64: dts: qcom: sm8550: Add missing properties for cryptobam
    - arm64: dts: qcom: sm8650: Add missing properties for cryptobam
    - arm64: dts: qcom: x1e001de-devkit: Fix vreg_l2j_1p2 voltage
    - Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e001de-devkit: mark l12b and
      l15b always-on"
    - arm64: dts: qcom: x1e001de-devkit: mark l12b and l15b always-on
    - arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage
    - Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-dell-xps13-9345: mark
      l12b and l15b always-on"
    - arm64: dts: qcom: x1e80100-dell-xps13-9345: mark l12b and l15b always-on
    - Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-hp-omnibook-x14:
      Enable SMB2360 0 and 1"
    - arm64: dts: qcom: x1e80100-hp-omnibook-x14: Enable SMB2360 0 and 1
    - arm64: dts: qcom: x1e80100-hp-omnibook-x14: Fix vreg_l2j_1p2 voltage
    - Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-hp-x14: mark l12b and
      l15b always-on"
    - arm64: dts: qcom: x1e80100-hp-x14: mark l12b and l15b always-on
    - arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage
    - arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage
    - Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-qcp: mark l12b and
      l15b always-on"
    - arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on
    - Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b
      and l15b always-on"
    - arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on
    - arm64: dts: qcom: x1e80100: Fix PCIe 3rd controller DBI size
    - arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default
    - arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default
    - arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to
      default
    - arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219
      overlay
    - arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay
    - arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay
    - arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
    - arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
    - arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
    - arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219
      overlay
    - arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219
    - arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1"
    - arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1"
    - arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of
      serdes_ln_ctrl
    - perf/arm-cmn: Fix REQ2/SNP2 mixup
    - perf/arm-cmn: Initialise cmn->cpu earlier
    - perf/arm-cmn: Add CMN S3 ACPI binding
    - iommu: Handle yet another race around registration
    - coredump: fix error handling for replace_fd()
    - coredump: hand a pidfd to the usermode coredump helper
    - dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
    - HID: amd_sfh: Avoid clearing reports for SRA sensor
    - HID: quirks: Add ADATA XPG alpha wireless mouse support
    - nfs: don't share pNFS DS connections between net namespaces
    - platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
    - kbuild: Require pahole <v1.28 or >v1.29 with GENDWARFKSYMS on X86
    - SAUCE: Revert "kbuild: Require pahole <v1.28 or >v1.29 with
      GENDWARFKSYMS on X86"
    - um: let 'make clean' properly clean underlying SUBARCH as well
    - nvmet: pci-epf: cleanup nvmet_pci_epf_raise_irq()
    - drm/amd/display: fix link_set_dpms_off multi-display MST corner case
    - nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing
    - phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
    - phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error
    - spi: spi-sun4i: fix early activation
    - nvme: all namespaces in a subsystem must adhere to a common atomic write
      size
    - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
    - drm/xe/xe2hpg: Add Wa_22021007897
    - drm/xe: Save the gt pointer in lrc and drop the tile
    - char: tpm: tpm-buf: Add sanity check fallback in read helpers
    - NFS: Avoid flushing data while holding directory locks in nfs_rename()
    - platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
    - ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform
    - platform/x86: thinkpad_acpi: Ignore battery threshold change event
      notification
    - net: ethernet: ti: am65-cpsw: Lower random mac address error print to
      info
    - Linux 6.14.10

* Plucky update: v6.14.10 upstream stable release (LP: #2119010) //
    CVE-2025-38092
    - ksmbd: use list_first_entry_or_null for opinfo_get_list()

* Plucky update: v6.14.10 upstream stable release (LP: #2119010) //
    CVE-2025-38091
    - drm/amd/display: check stream id dml21 wrapper to get plane_id

* Plucky update: v6.14.10 upstream stable release (LP: #2119010) //
    CVE-2025-38082
    - gpio: virtuser: fix potential out-of-bound write

* Plucky update: v6.14.9 upstream stable release (LP: #2115678)
    - drm/amd/display: Do not enable replay when vtotal update is pending.
    - drm/amd/display: Correct timing_adjust_pending flag setting.
    - drm/amd/display: Defer BW-optimization-blocked DRR adjustments
    - phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
    - phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver
      data
    - phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
    - nvmet: pci-epf: Keep completion queues mapped
    - nvmet: pci-epf: clear completion queue IRQ flag on delete
    - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
    - nvmem: rockchip-otp: Move read-offset into variant-data
    - nvmem: rockchip-otp: add rk3576 variant data
    - nvmem: core: fix bit offsets of more than one byte
    - nvmem: core: verify cell's raw_len
    - nvmem: core: update raw_len if the bit reading is required
    - nvmem: qfprom: switch to 4-byte aligned reads
    - scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
    - dma/mapping.c: dev_dbg support for dma_addressing_limited
    - intel_th: avoid using deprecated page->mapping, index fields
    - mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type
    - dma-mapping: avoid potential unused data compilation warning
    - btrfs: tree-checker: adjust error code for header level check
    - cgroup: Fix compilation issue due to cgroup_mutex not being exported
    - vhost_task: fix vhost_task_create() documentation
    - scsi: mpi3mr: Add level check to control event logging
    - dma-mapping: Fix warning reported for missing prototype
    - ima: process_measurement() needlessly takes inode_lock() on MAY_READ
    - fs/buffer: split locking for pagecache lookups
    - fs/buffer: introduce sleeping flavors for pagecache lookups
    - fs/buffer: use sleeping version of __find_get_block()
    - fs/ocfs2: use sleeping version of __find_get_block()
    - fs/jbd2: use sleeping version of __find_get_block()
    - fs/ext4: use sleeping version of sb_find_get_block()
    - drm/amd/display: Enable urgent latency adjustment on DCN35
    - drm/amdgpu: Allow P2P access through XGMI
    - selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
    - block: hoist block size validation code to a separate function
    - io_uring: don't duplicate flushing in io_req_post_cqe
    - bpf: fix possible endless loop in BPF map iteration
    - samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
    - kconfig: merge_config: use an empty file as initfile
    - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel
      log
    - cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
    - cifs: Fix querying and creating MF symlinks over SMB1
    - cifs: Fix access_flags_to_smbopen_mode
    - cifs: Fix negotiate retry functionality
    - smb: client: Store original IO parameters and prevent zero IO sizes
    - fuse: Return EPERM rather than ENOSYS from link()
    - exfat: call bh_read in get_block only when necessary
    - io_uring/msg: initialise msg request opcode
    - NFSv4: Check for delegation validity in
      nfs_start_delegation_return_locked()
    - NFS: Don't allow waiting for exiting tasks
    - SUNRPC: Don't allow waiting for exiting tasks
    - arm64: Add support for HIP09 Spectre-BHB mitigation
    - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability
    - ring-buffer: Use kaslr address instead of text delta
    - tracing: Mark binary printing functions with __printf() attribute
    - ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
    - tpm: Convert warn to dbg in tpm2_start_auth_session()
    - mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
    - mailbox: use error ret code of of_parse_phandle_with_args()
    - riscv: Allow NOMMU kernels to access all of RAM
    - fbdev: fsl-diu-fb: add missing device_remove_file()
    - fbcon: Use correct erase colour for clearing in fbcon
    - fbdev: core: tileblit: Implement missing margin clearing for tileblit
    - cifs: Set default Netbios RFC1001 server name to hostname in UNC
    - cifs: add validation check for the fields in smb_aces
    - cifs: Fix establishing NetBIOS session for SMB2+ connection
    - cifs: Fix getting DACL-only xattr system.cifs_acl and system.smb3_acl
    - cifs: Check if server supports reparse points before using them
    - NFSv4: Treat ENETUNREACH errors as fatal for state recovery
    - SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
    - SUNRPC: rpcbind should never reset the port to the value '0'
    - ASoC: codecs: wsa884x: Correct VI sense channel mask
    - ASoC: codecs: wsa883x: Correct VI sense channel mask
    - mctp: Fix incorrect tx flow invalidation condition in mctp-i2c
    - net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards
    - net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus
    - thermal/drivers/mediatek/lvts: Start sensor interrupts disabled
    - thermal/drivers/qoriq: Power down TMU on system suspend
    - Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler
      removal
    - Bluetooth: Disable SCO support if READ_VOICE_SETTING is
      unsupported/broken
    - RISC-V: add vector extension validation checks
    - dql: Fix dql->limit value when reset.
    - lockdep: Fix wait context check on softirq for PREEMPT_RT
    - objtool: Properly disable uaccess validation
    - net/mlx5e: Use right API to free bitmap memory
    - PCI: dwc: ep: Ensure proper iteration over outbound map windows
    - r8169: disable RTL8126 ZRX-DC timeout
    - tools/build: Don't pass test log files to linker
    - PCI: xilinx-cpm: Add cpm_csr register mapping for CPM5_HOST1 variant
    - i2c: qcom-geni: Update i2c frequency table to match hardware guidance
    - pNFS/flexfiles: Report ENETDOWN as a connection error
    - drm/amdgpu/discovery: check ip_discovery fw file available
    - drm/amdgpu: rework how the cleaner shader is emitted v3
    - drm/amdgpu: rework how isolation is enforced v2
    - drm/amdgpu: use GFP_NOWAIT for memory allocations
    - drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12
    - PCI: vmd: Disable MSI remapping bypass under Xen
    - xen/pci: Do not register devices with segments >= 0x10000
    - ext4: on a remount, only log the ro or r/w state when it has changed
    - pidfs: improve multi-threaded exec and premature thread-group leader
      exit polling
    - staging: vchiq_arm: Create keep-alive thread during probe
    - mmc: host: Wait for Vdd to settle on card power off
    - drm/amdgpu: Skip pcie_replay_count sysfs creation for VF
    - cgroup/rstat: avoid disabling irqs for O(num_cpu)
    - wifi: mt76: Check link_conf pointer in mt76_connac_mcu_sta_basic_tlv()
    - wifi: mt76: scan: fix setting tx_info fields
    - wifi: mt76: mt7996: implement driver specific get_txpower function
    - wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
    - wifi: mt76: mt7996: use the correct vif link for scanning/roc
    - wifi: mt76: scan: set vif offchannel link for scanning/roc
    - wifi: mt76: mt7996: fix SER reset trigger on WED reset
    - wifi: mt76: mt7996: revise TXS size
    - wifi: mt76: mt7925: load the appropriate CLC data based on hardware type
    - wifi: mt76: mt7925: Simplify HIF suspend handling to avoid suspend fail
    - wifi: mt76: mt7925: fix fails to enter low power mode in suspend state
    - x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-UAPI headers
    - x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers
    - x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
    - x86/smpboot: Fix INIT delay assignment for extended Intel Families
    - x86/microcode: Update the Intel processor flag scan check
    - x86/amd_node: Add SMN offsets to exclusive region access
    - i2c: qup: Vote for interconnect bandwidth to DRAM
    - i2c: amd-asf: Set cmd variable when encountering an error
    - i2c: pxa: fix call balance of i2c->clk handling routines
    - btrfs: make btrfs_discard_workfn() block_group ref explicit
    - btrfs: avoid linker error in btrfs_find_create_tree_block()
    - btrfs: run btrfs_error_commit_super() early
    - btrfs: fix non-empty delayed iputs list on unmount due to async workers
    - btrfs: get zone unusable bytes while holding lock at
      btrfs_reclaim_bgs_work()
    - btrfs: send: return -ENAMETOOLONG when attempting a path that is too
      long
    - blk-cgroup: improve policy registration error handling
    - drm/amdgpu: release xcp_mgr on exit
    - drm/amd/display: Guard against setting dispclk low for dcn31x
    - drm/amdgpu: don't free conflicting apertures for non-display devices
    - drm/amdgpu: adjust drm_firmware_drivers_only() handling
    - i3c: master: svc: Fix missing STOP for master request
    - s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste()
    - dlm: make tcp still work in multi-link env
    - loop: move vfs_fsync() out of loop_update_dio()
    - clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug
    - um: Store full CSGSFS and SS register from mcontext
    - um: Update min_low_pfn to match changes in uml_reserved
    - net/mlx5: Preserve rate settings when creating a rate node
    - wifi: mwifiex: Fix HT40 bandwidth issue.
    - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set
    - ixgbe: add support for thermal sensor event reception
    - riscv: Call secondary mmu notifier when flushing the tlb
    - ext4: reorder capability check last
    - hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
    - scsi: st: Tighten the page format heuristics with MODE SELECT
    - scsi: st: ERASE does not change tape location
    - vfio/pci: Handle INTx IRQ_NOTCONNECTED
    - bpftool: Using the right format specifiers
    - bpf: Return prog btf_id without capable check
    - PCI: dwc: Use resource start as ioremap() input in
      dw_pcie_pme_turn_off()
    - jbd2: do not try to recover wiped journal
    - tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
    - rtc: rv3032: fix EERD location
    - thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for
      retimer
    - erofs: initialize decompression early
    - spi: spi-mux: Fix coverity issue, unchecked return value
    - ASoC: pcm6240: Drop bogus code handling IRQ as GPIO
    - ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
    - kunit: tool: Fix bug in parsing test plan
    - bpf: Allow pre-ordering for bpf cgroup progs
    - kbuild: fix argument parsing in scripts/config
    - kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf
    - crypto: octeontx2 - suppress auth failure screaming due to negative
      tests
    - dm: restrict dm device size to 2^63-512 bytes
    - net/smc: use the correct ndev to find pnetid by pnetid table
    - xen: Add support for XenServer 6.1 platform device
    - pinctrl-tegra: Restore SFSEL bit when freeing pins
    - mfd: syscon: Add check for invalid resource size
    - mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
    - drm/amdgpu/gfx12: don't read registers in mqd init
    - drm/amdgpu/gfx11: don't read registers in mqd init
    - drm/amdgpu: Update SRIOV video codec caps
    - ASoC: sun4i-codec: support hp-det-gpios property
    - ASoC: sun4i-codec: correct dapm widgets and controls for h616
    - clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490
    - leds: Kconfig: leds-st1202: Add select for required LEDS_TRIGGER_PATTERN
    - leds: leds-st1202: Initialize hardware before DT node child operations
    - ext4: reject the 'data_err=abort' option in nojournal mode
    - ext4: do not convert the unwritten extents if data writeback fails
    - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
    - posix-timers: Add cond_resched() to posix_timer_add() search loop
    - posix-timers: Ensure that timer initialization is fully visible
    - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe
    - net: hsr: Fix PRP duplicate detection
    - timer_list: Don't use %pK through printk()
    - wifi: rtw89: coex: Fix coexistence report not show as expected
    - wifi: rtw89: set force HE TB mode when connecting to 11ax AP
    - netfilter: conntrack: Bound nf_conntrack sysctl writes
    - PNP: Expand length of fixup id string
    - phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the
      corresponding set flags are set
    - arm64/mm: Check pmd_table() in pmd_trans_huge()
    - arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
    - mmc: dw_mmc: add exynos7870 DW MMC support
    - mmc: sdhci: Disable SD card clock before changing parameters
    - usb: xhci: Don't change the status of stalled TDs on failed Stop EP
    - wifi: iwlwifi: mvm: fix setting the TK when associated
    - hwmon: (dell-smm) Increment the number of fans
    - iommu: Keep dev->iommu state consistent
    - printk: Check CON_SUSPEND when unblanking a console
    - wifi: iwlwifi: don't warn when if there is a FW error
    - wifi: iwlwifi: w/a FW SMPS mode selection
    - wifi: iwlwifi: mark Br device not integrated
    - wifi: iwlwifi: fix the ECKV UEFI variable name
    - wifi: mac80211: don't include MLE in ML reconf per-STA profile
    - wifi: cfg80211: Update the link address when a link is added
    - wifi: mac80211: fix warning on disconnect during failed ML reconf
    - wifi: mac80211_hwsim: Fix MLD address translation
    - wifi: mac80211: fix U-APSD check in ML reconfiguration
    - wifi: cfg80211: allow IR in 20 MHz configurations
    - r8169: increase max jumbo packet size on RTL8125/RTL8126
    - ipv6: save dontfrag in cork
    - drm/amd/display: remove minimum Dispclk and apply oem panel timing.
    - drm/amd/display: calculate the remain segments for all pipes
    - drm/amd/display: not abort link train when bw is low
    - drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
    - gfs2: Check for empty queue in run_queue
    - auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct
      hd44780_common"
    - ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
    - badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable
      < 0
    - block: acquire q->limits_lock while reading sysfs attributes
    - coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t
    - coresight: change coresight_trace_id_map's lock type to raw_spinlock_t
    - iommu/vt-d: Check if SVA is supported when attaching the SVA domain
    - iommu/amd/pgtbl_v2: Improve error handling
    - fs/pipe: Limit the slots in pipe_resize_ring()
    - cpufreq: tegra186: Share policy per cluster
    - watchdog: s3c2410_wdt: Fix PMU register bits for ExynosAutoV920 SoC
    - watchdog: aspeed: Update bootstatus handling
    - misc: pci_endpoint_test: Give disabled BARs a distinct error code
    - selftests: pci_endpoint: Skip disabled BARs
    - crypto: mxs-dcp - Only set OTP_KEY bit for OTP key
    - drm/amdkfd: Set per-process flags only once for gfx9/10/11/12
    - drm/amdkfd: Set per-process flags only once cik/vi
    - drm/amdkfd: clear F8_MODE for gfx950
    - drm/amdgpu: increase RAS bad page threshold
    - drm/amdgpu: Fix missing drain retry fault the last entry
    - arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
    - arm64: tegra: Resize aperture for the IGX PCIe C5 slot
    - powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
    - ALSA: seq: Improve data consistency at polling
    - tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
    - rtc: ds1307: stop disabling alarms on probe
    - ieee802154: ca8210: Use proper setters and getters for bitwise types
    - drm/xe: Nuke VM's mapping upon close
    - drm/xe: Retry BO allocation
    - soc: samsung: include linux/array_size.h where needed
    - ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
    - media: c8sectpfe: Call of_node_put(i2c_bus) only once in
      c8sectpfe_probe()
    - media: cec: use us_to_ktime() where appropriate
    - usb: xhci: set page size to the xHCI-supported size
    - soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables
    - drm/gem: Test for imported GEM buffers with helper
    - net: phylink: use pl->link_interface in phylink_expects_phy()
    - blk-throttle: don't take carryover for prioritized processing of
      metadata
    - remoteproc: qcom_wcnss: Handle platforms with only single power domain
    - drm/xe: Disambiguate GMDID-based IP names
    - drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
    - drm/amdgpu: Reinit FW shared flags on VCN v5.0.1
    - drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35
    - drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
    - drm/amd/display: Fix DMUB reset sequence for DCN401
    - drm/amd/display: Fix p-state type when p-state is unsupported
    - drm/amd/display: Request HW cursor on DCN3.2 with SubVP
    - drm/amdgpu: Avoid HDP flush on JPEG v5.0.1
    - drm/amdgpu: Add offset normalization in VCN v5.0.1
    - perf/core: Clean up perf_try_init_event()
    - pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
    - rcu: Fix get_state_synchronize_rcu_full() GP-start detection
    - drm/msm/dpu: Set possible clones for all encoders
    - net: ethernet: ti: cpsw_new: populate netdev of_node
    - eth: fbnic: Prepend TSENE FW fields with FBNIC_FW
    - net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104
    - dpll: Add an assertion to check freq_supported_num
    - ublk: enforce ublks_max only for unprivileged devices
    - iommufd: Disallow allocating nested parent domain with fault ID
    - media: imx335: Set vblank immediately
    - net: pktgen: fix mpls maximum labels list parsing
    - perf/core: Fix perf_mmap() failure path
    - perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
    - ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
    - scsi: logging: Fix scsi_logging_level bounds
    - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
    - ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl().
    - drm/rockchip: vop2: Add uv swap for cluster window
    - block: mark bounce buffering as incompatible with integrity
    - null_blk: generate null_blk configfs features string
    - ublk: complete command synchronously on error
    - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
    - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
    - clk: imx8mp: inform CCF of maximum frequency of clocks
    - PM: sleep: Suppress sleeping parent warning in special case
    - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
    - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
    - hwmon: (gpio-fan) Add missing mutex locks
    - ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
    - drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
    - fpga: altera-cvp: Increase credit timeout
    - perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
    - soc: apple: rtkit: Use high prio work queue
    - soc: apple: rtkit: Implement OSLog buffers properly
    - wifi: ath12k: Report proper tx completion status to mac80211
    - PCI: brcmstb: Expand inbound window size up to 64GB
    - PCI: brcmstb: Add a softdep to MIP MSI-X driver
    - drm/xe/vf: Retry sending MMIO request to GUC on timeout error
    - drm/xe/pf: Create a link between PF and VF devices
    - net/mlx5: Avoid report two health errors on same syndrome
    - selftests/net: have `gro.sh -t` return a correct exit code
    - driver core: faux: only create the device if probe() succeeds
    - pinctrl: sophgo: avoid to modify untouched bit when setting cv1800
      pinconf
    - drm/amdkfd: KFD release_work possible circular locking
    - drm/xe: xe_gen_wa_oob: replace program_invocation_short_name
    - leds: pwm-multicolor: Add check for fwnode_property_read_u32
    - accel/amdxdna: Check interrupt register before mailbox_rx_worker exits
    - net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
    - net: xgene-v2: remove incorrect ACPI_PTR annotation
    - wifi: rtw89: Parse channel from IE to correct invalid hardware reports
      during scanning
    - bonding: report duplicate MAC address in all situations
    - tcp: be less liberal in TSEcr received while in SYN_RECV state
    - pinctrl: qcom: msm8917: Add MSM8937 wsa_reset pin
    - wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
    - soc: ti: k3-socinfo: Do not use syscon helper to build regmap
    - bpf: Search and add kfuncs in struct_ops prologue and epilogue
    - Octeontx2-af: RPM: Register driver with PCI subsys IDs
    - x86/build: Fix broken copy command in genimage.sh when making isoimage
    - drm/amd/display: handle max_downscale_src_width fail check
    - drm/amd/display: fix dcn4x init failed
    - drm/amd/display: fix check for identity ratio
    - drm/amd/display: Fix mismatch type comparison
    - drm/amd/display: Add opp recout adjustment
    - drm/amd/display: Fix mismatch type comparison in custom_float
    - ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
    - ASoC: mediatek: mt8188: Add reference for dmic clocks
    - x86/nmi: Add an emergency handler in nmi_desc & use it in
      nmi_shootdown_cpus()
    - vhost-scsi: Return queue full for page alloc failures during copy
    - vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
    - cpuidle: menu: Avoid discarding useful information
    - media: adv7180: Disable test-pattern control on adv7180
    - media: tc358746: improve calculation of the D-PHY timing registers
    - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode
    - scsi: mpi3mr: Update timestamp only for supervisor IOCs
    - loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize
    - net: stmmac: Correct usage of maximum queue number macros
    - libbpf: Fix out-of-bound read
    - gpiolib: sanitize the return value of gpio_chip::set_config()
    - scsi: scsi_debug: First fixes for tapes
    - bpf: arm64: Silence "UBSAN: negation-overflow" warning
    - net/mlx5: Change POOL_NEXT_SIZE define value and make it global
    - x86/kaslr: Reduce KASLR entropy on most x86 systems
    - crypto: ahash - Set default reqsize from ahash_alg
    - crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
    - net: ipv6: Init tunnel link-netns before registering dev
    - rtnetlink: Lookup device in target netns when creating link
    - drm/xe/oa: Ensure that polled read returns latest data
    - MIPS: Use arch specific syscall name match function
    - drm/amdgpu: remove all KFD fences from the BO on release
    - x86/mm: Make MMU_GATHER_RCU_TABLE_FREE unconditional
    - x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op()
    - pps: generators: replace copy of pps-gen info struct with const pointer
    - MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
    - clocksource: mips-gic-timer: Enable counter when CPUs start
    - PCI: epf-mhi: Update device ID for SA8775P
    - scsi: mpt3sas: Send a diag reset if target reset fails
    - wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
    - wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
    - wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
    - wifi: rtw88: Fix rtw_mac_power_switch() for RTL8814AU
    - wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
    - wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32()
    - wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware
    - wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU
    - power: supply: axp20x_battery: Update temp sensor for AXP717 from device
      tree
    - EDAC/ie31200: work around false positive build warning
    - i3c: master: svc: Flush FIFO before sending Dynamic Address
      Assignment(DAA)
    - netdevsim: call napi_schedule from a timer context
    - mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs
    - eeprom: ee1004: Check chip before probing
    - irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector
    - drm/xe/client: Skip show_run_ticks if unable to read timestamp
    - drm/amd/pm: Fetch current power limit from PMFW
    - drm/amd/display: Add support for disconnected eDP streams
    - drm/amd/display: Guard against setting dispclk low when active
    - drm/amd/display: Fix BT2020 YCbCr limited/full range input
    - drm/amd/display: Read LTTPR ALPM caps during link cap retrieval
    - Revert "drm/amd/display: Request HW cursor on DCN3.2 with SubVP"
    - drm/amd/display: Don't treat wb connector as physical in
      create_validate_stream_for_sink
    - RDMA/core: Fix best page size finding when it can cross SG entries
    - pmdomain: imx: gpcv2: use proper helper for property detection
    - can: c_can: Use of_property_present() to test existence of DT property
    - bpf: don't do clean_live_states when state->loop_entry->branches > 0
    - eth: mlx4: don't try to complete XDP frames in netpoll
    - PCI: Fix old_size lower bound in calculate_iosize() too
    - ACPI: HED: Always initialize before evged
    - vxlan: Join / leave MC group after remote changes
    - posix-timers: Invoke cond_resched() during exit_itimers()
    - hrtimers: Replace hrtimer_clock_to_base_table with switch-case
    - irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base
    - media: test-drivers: vivid: don't call schedule in loop
    - bpf: Make every prog keep a copy of ctx_arg_info
    - net/mlx5: Modify LSB bitmask in temperature event to include only the
      first bit
    - net/mlx5: Apply rate-limiting to high temperature warning
    - firmware: arm_ffa: Reject higher major version as incompatible
    - firmware: arm_ffa: Handle the presence of host partition in the
      partition info
    - firmware: xilinx: Dont send linux address to get fpga config get status
    - io_uring: use IO_REQ_LINK_FLAGS more
    - io_uring: sanitise ring params earlier
    - ASoC: ops: Enforce platform maximum on initial value
    - ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
    - ASoC: tas2764: Mark SW_RESET as volatile
    - ASoC: tas2764: Power up/down amp on mute ops
    - ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
    - pinctrl: devicetree: do not goto err when probing hogs in
      pinctrl_dt_to_map
    - smack: recognize ipv4 CIPSO w/o categories
    - drm/xe/pf: Release all VFs configs on device removal
    - smack: Revert "smackfs: Added check catlen"
    - kunit: tool: Use qboot on QEMU x86_64
    - media: i2c: imx219: Correct the minimum vblanking value
    - media: v4l: Memset argument to 0 before calling get_mbus_config pad op
    - media: stm32: csi: use ARRAY_SIZE to search D-PHY table
    - media: stm32: csi: add missing pm_runtime_put on error
    - media: i2c: ov2740: Free control handler on error path
    - bnxt_en: Set NPAR 1.2 support when registering with firmware
    - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
    - drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init()
    - drm/xe: Fix xe_tile_init_noalloc() error propagation
    - clk: qcom: ipq5018: allow it to be bulid on arm32
    - [Config] enable IPQ_GCC_5018 on armhf
    - accel/amdxdna: Refactor hardware context destroy routine
    - clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
    - drm/xe/debugfs: fixed the return value of wedged_mode_set
    - drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set
    - x86/ibt: Handle FineIBT in handle_cfi_failure()
    - x86/traps: Cleanup and robustify decode_bug()
    - x86/boot: Mark start_secondary() with __noendbr
    - sched: Reduce the default slice to avoid tasks getting an extra tick
    - serial: sh-sci: Update the suspend/resume support
    - pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down
    - drm/xe/display: Remove hpd cancel work sync from runtime pm path
    - phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and
      ROPLL_REF
    - phy: core: don't require set_mode() callback for phy_get_mode() to work
    - phy: exynos5-usbdrd: fix EDS distribution tuning (gs101)
    - soundwire: amd: change the soundwire wake enable/disable sequence
    - soundwire: cadence_master: set frame shape and divider based on actual
      clk freq
    - jbd2: Avoid long replay times due to high number or revoke blocks
    - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size
    - scsi: usb: Rename the RESERVE and RELEASE constants
    - drm/amdgpu/mes11: fix set_hw_resources_1 calculation
    - drm/amdkfd: fix missing L2 cache info in topology
    - drm/amdgpu: Set snoop bit for SDMA for MI series
    - drm/amd/display: pass calculated dram_speed_mts to dml2
    - drm/amd/display: remove TF check for LLS policy
    - drm/amd/display: Don't try AUX transactions on disconnected link
    - drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
    - drm/amd/pm: Skip P2S load for SMU v13.0.12
    - drm/amd/display: Support multiple options during psr entry.
    - Revert "drm/amd/display: Exit idle optimizations before attempt to
      access PHY"
    - drm/amd/display: Fixes for mcache programming in DML21
    - drm/amd/display: Ammend DCPG IP control sequences to align with HW
      guidance
    - drm/amd/display: Account For OTO Prefetch Bandwidth When Calculating
      Urgent Bandwidth
    - drm/amd/display: Update CR AUX RD interval interpretation
    - drm/amd/display: Initial psr_version with correct setting
    - drm/amdgpu/gfx10: Add cleaner shader for GFX10.1.10
    - drm/amdgpu: Skip err_count sysfs creation on VF unsupported RAS blocks
    - amdgpu/soc15: enable asic reset for dGPU in case of suspend abort
    - drm/amd/display: Reverse the visual confirm recouts
    - drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It
    - drm/amd/display: Populate register address for dentist for dcn401
    - drm/amdgpu: Use active umc info from discovery
    - drm/amdgpu: enlarge the VBIOS binary size limit
    - drm/amdkfd: Have kfd driver use same PASID values from graphic driver
    - drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
    - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
    - net/mlx5: XDP, Enable TX side XDP multi-buffer support
    - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
    - net/mlx5e: set the tx_queue_len for pfifo_fast
    - net/mlx5e: reduce rep rxq depth to 256 for ECPF
    - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
    - drm/v3d: Add clock handling
    - xfrm: prevent high SEQ input in non-ESN mode
    - iio: adc: ad7606: protect register access
    - wifi: ath12k: Enable MLO setup ready and teardown commands for single
      split-phy device
    - wifi: ath12k: use arvif instead of link_conf in ath12k_mac_set_key()
    - wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV
    - wifi: ath12k: Update the peer id in PPDU end user stats TLV
    - mptcp: pm: userspace: flags: clearer msg if no remote addr
    - wifi: iwlwifi: use correct IMR dump variable
    - wifi: iwlwifi: don't warn during reprobe
    - wifi: mac80211: always send max agg subframe num in strict mode
    - wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
    - wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
    - wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx
    - wifi: mac80211: add HT and VHT basic set verification
    - wifi: mac80211: Drop cooked monitor support
    - net: fec: Refactor MAC reset to function
    - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
    - powerpc/pseries/iommu: create DDW for devices with DMA mask less than
      64-bits
    - arch/powerpc/perf: Check the instruction type before creating sample
      with perf_mem_data_src
    - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
    - r8152: add vendor/device ID pair for Dell Alienware AW1022z
    - iio: adc: ad7944: don't use storagebits for sizing
    - igc: Avoid unnecessary link down event in XDP_SETUP_PROG process
    - pstore: Change kmsg_bytes storage size to u32
    - leds: trigger: netdev: Configure LED blink interval for HW offload
    - ext4: don't write back data before punch hole in nojournal mode
    - ext4: remove writable userspace mappings before truncating page cache
    - wifi: rtw88: Fix rtw_update_sta_info() for RTL8814AU
    - wifi: rtw88: Extend rtw_fw_send_ra_info() for RTL8814AU
    - wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
    - wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
    - wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang
    - wifi: rtw89: fw: validate multi-firmware header before getting its size
    - wifi: rtw89: fw: validate multi-firmware header before accessing
    - wifi: rtw89: call power_on ahead before selecting firmware
    - iio: dac: ad3552r-hs: use instruction mode for configuration
    - iio: dac: adi-axi-dac: add bus mode setup
    - clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
    - netdevsim: allow normal queue reset while down
    - net: page_pool: avoid false positive warning if NAPI was never added
    - tools/power turbostat: Clustered Uncore MHz counters should honor
      show/hide options
    - hwmon: (xgene-hwmon) use appropriate type for the latency value
    - drm/xe: Fix PVC RPe and RPa information
    - f2fs: introduce f2fs_base_attr for global sysfs entries
    - media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is
      available
    - media: qcom: camss: Add default case in vfe_src_pad_code
    - drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0
    - eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when
      adding unicast addrs
    - tools: ynl-gen: don't output external constants
    - ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
    - r8169: don't scan PHY addresses > 0
    - net: flush_backlog() small changes
    - bridge: mdb: Allow replace of a host-joined group
    - ice: init flow director before RDMA
    - ice: treat dyn_allowed only as suggestion
    - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
    - rcu: handle unstable rdp in rcu_read_unlock_strict()
    - rcu: fix header guard for rcu_all_qs()
    - perf: Avoid the read if the count is already updated
    - ice: count combined queues using Rx/Tx count
    - drm/xe/relay: Don't use GFP_KERNEL for new transactions
    - net/mana: fix warning in the writer of client oob
    - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
    - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk
    - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when
      pci_irq_vector() fails
    - scsi: lpfc: Reduce log message generation during ELS ring clean up
    - scsi: st: Restore some drive settings after reset
    - wifi: ath12k: Avoid napi_sync() before napi_enable()
    - HID: usbkbd: Fix the bit shift number for LED_KANA
    - arm64: zynqmp: add clock-output-names property in clock nodes
    - ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
    - ASoC: rt722-sdca: Add some missing readable registers
    - irqchip/riscv-aplic: Add support for hart indexes
    - dm vdo indexer: prevent unterminated string warning
    - dm vdo: use a short static string for thread name prefix
    - drm/ast: Find VBIOS mode from regular display size
    - bpf: Use kallsyms to find the function name of a struct_ops's stub
      function
    - bpftool: Fix readlink usage in get_fd_type
    - firmware: arm_scmi: Relax duplicate name constraint across protocol ids
    - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
    - perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
    - clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation
    - wifi: rtl8xxxu: retry firmware download on error
    - wifi: rtw88: Don't use static local variable in
      rtw8822b_set_tx_power_index_by_rate
    - wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
    - spi: zynqmp-gqspi: Always acknowledge interrupts
    - regulator: ad5398: Add device tree support
    - wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
    - accel/qaic: Mask out SR-IOV PCI resources
    - drm/xe/pf: Reset GuC VF config when unprovisioning critical resource
    - wifi: ath9k: return by of_get_mac_address
    - wifi: ath12k: Fetch regdb.bin file from board-2.bin
    - drm/xe/pf: Move VFs reprovisioning to worker
    - wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
    - wifi: ath12k: report station mode receive rate for IEEE 802.11be
    - wifi: ath12k: report station mode transmit rate
    - drm: bridge: adv7511: fill stream capabilities
    - drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE
    - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation
    - drm/ast: Hide Gens 1 to 3 TX detection in branch
    - drm/xe: Move suballocator init to after display init
    - drm/xe: Do not attempt to bootstrap VF in execlists mode
    - wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan
      event
    - wifi: rtw89: coex: Add protect to avoid A2DP lag while Wi-Fi connecting
    - drm/xe/sa: Always call drm_suballoc_manager_fini()
    - drm/xe: Always setup GT MMIO adjustment data
    - drm/xe/guc: Drop error messages about missing GuC logs
    - drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
    - drm/buddy: fix issue that force_merge cannot free all roots
    - drm/xe: Add locks in gtidle code
    - drm/panel-edp: Add Starry 116KHD024006
    - drm: Add valid clones check
    - i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
    - ASoC: sma1307: Fix error handling in sma1307_setting_loaded()
    - pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
    - watchdog: aspeed: fix 64-bit division
    - drm/amdkfd: Correct F8_MODE for gfx950
    - drm/gem: Internally test import_attach for imported objects
    - virtgpu: don't reset on shutdown
    - x86/mm/init: Handle the special case of device private pages in
      add_pages(), to not increase max_pfn and trigger
      dma_addressing_limited() bounce buffers
    - bpf: abort verification if env->cur_state->loop_entry != NULL
    - ipv6: remove leftover ip6 cookie initializer
    - serial: sh-sci: Save and restore more registers
    - drm/amd/display: Exit idle optimizations before accessing PHY
    - drm/amdkfd: Fix error handling for missing PASID in
      'kfd_process_device_init_vm'
    - drm/amdkfd: Fix pasid value leak
    - wifi: mac80211: Add counter for all monitor interfaces
    - HID: Kconfig: Add LEDS_CLASS_MULTICOLOR dependency to HID_LOGITECH
    - net-sysfs: restore behavior for not running devices
    - ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
    - book3s64/radix: Fix compile errors when
      CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
    - pinctrl: meson: define the pull up/down resistor value as 60 kOhm
    - smb: server: smb2pdu: check return value of xa_store()
    - platform/x86/intel: hid: Add Pantherlake support
    - platform/x86: asus-wmi: Disable OOBE state after resume from hibernation
    - platform/x86: ideapad-laptop: add support for some new buttons
    - ASoC: cs42l43: Disable headphone clamps during type detection
    - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
    - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
    - drm/ttm: fix the warning for hit_low and evict_low
    - nvme-pci: add quirks for device 126f:1001
    - nvme-pci: add quirks for WDC Blue SN550 15b7:5009
    - ALSA: usb-audio: Fix duplicated name in MIDI substream names
    - io_uring/fdinfo: annotate racy sq/cq head/tail reads
    - cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
    - cifs: Fix changing times and read-only attr over SMB1
      smb_set_file_info() function
    - ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers
    - ASoC: intel/sdw_utils: Add volume limit to cs35l56 speakers
    - iio: accel: fxls8962af: Fix wakeup source leaks on device unbind
    - iio: adc: qcom-spmi-iadc: Fix wakeup source leaks on device unbind
    - iio: imu: st_lsm6dsx: Fix wakeup source leaks on device unbind
    - btrfs: compression: adjust cb->compressed_folios allocation type
    - btrfs: handle empty eb->folios in num_extent_folios()
    - tools: ynl-gen: validate 0 len strings from kernel
    - block: only update request sector if needed
    - wifi: iwlwifi: add support for Killer on MTL
    - xenbus: Allow PVH dom0 a non-local xenstore
    - drm/amd/display: Call FP Protect Before Mode Programming/Mode Support
    - soundwire: bus: Fix race on the creation of the IRQ domain
    - espintcp: remove encap socket caching to avoid reference leak
    - xfrm: Fix UDP GRO handling for some corner cases
    - dmaengine: idxd: Fix allowing write() from different address spaces
    - x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro
    - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
    - remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
    - clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
    - xfrm: Sanitize marks before insert
    - dmaengine: idxd: Fix ->poll() return value
    - dmaengine: fsl-edma: Fix return code for unhandled interrupts
    - irqchip/riscv-imsic: Start local sync timer on correct CPU
    - Bluetooth: L2CAP: Fix not checking l2cap_chan security level
    - Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump
      handling
    - bridge: netfilter: Fix forwarding of fragmented packets
    - ice: fix vf->num_mac count with port representors
    - ice: Fix LACP bonds without SRIOV environment
    - loop: don't require ->write_iter for writable files in loop_configure
    - pinctrl: qcom: switch to devm_register_sys_off_handler()
    - net: dwmac-sun8i: Use parsed internal PHY address instead of 1
    - net: lan743x: Restore SGMII CTRL register on resume
    - xsk: Bring back busy polling support in XDP_COPY
    - io_uring: fix overflow resched cqe reordering
    - idpf: fix idpf_vport_splitq_napi_poll()
    - octeontx2-pf: use xdp_return_frame() to free xdp buffers
    - octeontx2-pf: Add AF_XDP non-zero copy support
    - octeontx2-pf: AF_XDP zero copy receive support
    - octeontx2-pf: Avoid adding dcbnl_ops for LBK and SDP vf
    - octeontx2-af: Set LMT_ENA bit for APR table entries
    - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
    - clk: s2mps11: initialise clk_hw_onecell_data::num before accessing
      ::hws[] in probe()
    - can: slcan: allow reception of short error messages
    - ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
    - ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms
    - ASoc: SOF: topology: connect DAI to a single DAI link
    - ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback
      direction
    - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
    - llc: fix data loss when reading from a socket in llc_ui_recvmsg()
    - can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
    - can: kvaser_pciefd: Fix echo_skb race
    - io_uring/net: only retry recv bundle for a full transfer
    - net: dsa: microchip: linearize skb for tail-tagging switches
    - vmxnet3: update MTU after device quiesce
    - mmc: sdhci_am654: Add SDHCI_QUIRK2_SUPPRESS_V1P8_ENA quirk to am62
      compatible
    - pmdomain: renesas: rcar: Remove obsolete nullify checks
    - pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
    - thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
    - drm/edid: fixed the bug that hdr metadata was not reset
    - arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
    - smb: client: Reset all search buffer pointers when releasing buffer
    - Input: xpad - add more controllers
    - highmem: add folio_test_partial_kmap()
    - memcg: always call cond_resched() after fn()
    - mm/page_alloc.c: avoid infinite retries caused by cpuset race
    - module: release codetag section when module load fails
    - taskstats: fix struct taskstats breaks backward compatibility since
      version 15
    - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled
    - mm: fix VM_UFFD_MINOR == VM_SHADOW_STACK on USERFAULTFD=y && ARM64_GCS=y
    - mm: vmalloc: actually use the in-place vrealloc region
    - mm: vmalloc: only zero-init on vrealloc shrink
    - octeontx2: hide unused label
    - wifi: mac80211: restore monitor for outgoing frames
    - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
    - Bluetooth: btmtksdio: Check function enabled before doing close
    - Bluetooth: btmtksdio: Do close if SDIO card removed without close
    - Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
    - ksmbd: fix stream write failure
    - platform/x86: think-lmi: Fix attribute name usage for non-compliant
      items
    - spi: use container_of_cont() for to_spi_device()
    - spi: spi-fsl-dspi: restrict register range for regmap access
    - spi: spi-fsl-dspi: Halt the module after a new message transfer
    - spi: spi-fsl-dspi: Reset SR flags before sending a new message
    - drm/xe: Use xe_mmio_read32() to read mtcfg register
    - err.h: move IOMEM_ERR_PTR() to err.h
    - drm/i915/dp: Fix determining SST/MST mode during MTP TU state
      computation
    - drm/amdgpu/vcn4.0.5: split code along instances
    - gcc-15: make 'unterminated string initialization' just a warning
    - gcc-15: disable '-Wunterminated-string-initialization' entirely for now
    - Fix mis-uses of 'cc-option' for warning disablement
    - kbuild: Properly disable -Wunterminated-string-initialization for clang
    - Linux 6.14.9

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38050
    - mm/hugetlb: fix kernel NULL pointer dereference when replacing free
      hugetlb folios

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38029
    - kasan: avoid sleepable page allocation from atomic context

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38076
    - alloc_tag: allocate percpu counters for module tags dynamically

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) // Unable to
    put display on standby after resuming from hibernate (LP: #2121449)
    - Revert "drm/amd: Keep display off while going into S4"

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38051
    - smb: client: Fix use-after-free in cifs_fill_dirent

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38077
    - platform/x86: dell-wmi-sysman: Avoid buffer overflow in
      current_password_store()

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38078
    - ALSA: pcm: Fix race of buffer access at PCM OSS layer

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38003
    - can: bcm: add missing rcu read protection for procfs content

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38004
    - can: bcm: add locking for bcm_op runtime updates

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38031
    - padata: do not leak refcount in reorder_work

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38079
    - crypto: algif_hash - fix double free in hash_accept

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38052
    - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38053
    - idpf: fix null-ptr-deref in idpf_features_check

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38032
    - mr: consolidate the ipmr_can_free_table() checks.

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38054
    - ptp: ocp: Limit signal/freq counts in summary output functions

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38055
    - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38057
    - espintcp: fix skb leaks

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38058
    - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38033
    - x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38059
    - btrfs: avoid NULL pointer dereference if no valid csum tree

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38034
    - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38035
    - nvmet-tcp: don't restore null sk_state_change

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38036
    - drm/xe/vf: Perform early GT MMIO initialization to read GMDID

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38037
    - vxlan: Annotate FDB data races

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38038
    - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38039
    - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload
      enabled

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38080
    - drm/amd/display: Increase block_sequence array size

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38060
    - bpf: copy_verifier_state() should copy 'loop_entry' field

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38040
    - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38061
    - net: pktgen: fix access outside of user given buffer in
      pktgen_thread_write()

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38062
    - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of
      iommu_cookie

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38041
    - clk: sunxi-ng: h616: Reparent GPU clock during frequency changes

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38063
    - dm: fix unconditional IO throttle caused by REQ_PREFLUSH

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38064
    - virtio: break and reset virtio devices on device_shutdown()

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38042
    - dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from
      k3_udma_glue_reset_rx_chn

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38043
    - firmware: arm_ffa: Set dma_mask for ffa devices

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38044
    - media: cx231xx: set device_caps for 417

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38065
    - orangefs: Do not truncate file size

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38066
    - dm cache: prevent BUG_ON by blocking retries on failed device resumes

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38067
    - rseq: Fix segfault on registration when rseq_cs is non-zero

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38068
    - crypto: lzo - Fix compression buffer overrun

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38069
    - PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38045
    - wifi: iwlwifi: fix debug actions order

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38070
    - ASoC: sma1307: Add NULL check in sma1307_setting_loaded()

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38071
    - x86/mm: Check return value from memblock_phys_alloc_range()

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38072
    - libnvdimm/labels: Fix divide error in nd_label_data_init()

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38081
    - spi-rockchip: Fix register out of bounds access

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38047
    - x86/fred: Fix system hang during S4 resume with FRED enabled

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38073
    - block: fix race between set_blocksize and read paths

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38074
    - vhost-scsi: protect vq->log_used with vq->mutex

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38048
    - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN

* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
    CVE-2025-38075
    - scsi: target: iscsi: Fix timeout on deleted connection

* CVE-2025-38350
    - net/sched: Always pass notifications when child class becomes empty

-- Stefan Bader <stefan.bader@canonical.com>  Fri, 29 Aug 2025 10:41:07 +0200

Changed in linux (Ubuntu Plucky):
status:	Fix Committed → Fix Released

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2025-09-23:

This bug is awaiting verification that the linux-nvidia-6.14/6.14.0-1011.11 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-noble-linux-nvidia-6.14' to 'verification-done-noble-linux-nvidia-6.14'. If the problem still exists, change the tag 'verification-needed-noble-linux-nvidia-6.14' to 'verification-failed-noble-linux-nvidia-6.14'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: kernel-spammed-noble-linux-nvidia-6.14-v2 verification-needed-noble-linux-nvidia-6.14

Massimiliano Pellizzer (mpellizzer) on 2025-09-23

tags:

added: verification-done-noble-linux-nvidia-6.14
removed: verification-needed-noble-linux-nvidia-6.14

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2025-09-29:

This bug is awaiting verification that the linux-azure-nvidia-6.14/6.14.0-1006.6 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-noble-linux-azure-nvidia-6.14' to 'verification-done-noble-linux-azure-nvidia-6.14'. If the problem still exists, change the tag 'verification-needed-noble-linux-azure-nvidia-6.14' to 'verification-failed-noble-linux-azure-nvidia-6.14'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: kernel-spammed-noble-linux-azure-nvidia-6.14-v2 verification-needed-noble-linux-azure-nvidia-6.14

Massimiliano Pellizzer (mpellizzer) on 2025-09-29

tags:

added: verification-done-noble-linux-azure-nvidia-6.14
removed: verification-needed-noble-linux-azure-nvidia-6.14

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2025-09-29:

#10

This bug is awaiting verification that the linux-intel/6.14.0-1008.8 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-plucky-linux-intel' to 'verification-done-plucky-linux-intel'. If the problem still exists, change the tag 'verification-needed-plucky-linux-intel' to 'verification-failed-plucky-linux-intel'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: kernel-spammed-plucky-linux-intel-v2 verification-needed-plucky-linux-intel

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux package

I/O performance regression on NVMes under same bridge (dual port nvme)

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux package