openSUSE-Leap-16.1-10 Security update for perl-XS-Parse-Keyword important SUSE SLFO 1.3 This update for perl-XS-Parse-Keyword fixes the following issue: - CVE-2026-85644: number treated as an array reference in `infix.c` (bsc#1283247). perl-XS-Parse-Keyword-0.480.0-160100.3.1.aarch64.rpm perl-XS-Parse-Keyword-0.480.0-160100.3.1.src.rpm perl-XS-Parse-Keyword-debuginfo-0.480.0-160100.3.1.aarch64.rpm perl-XS-Parse-Keyword-debugsource-0.480.0-160100.3.1.aarch64.rpm perl-XS-Parse-Keyword-0.480.0-160100.3.1.ppc64le.rpm perl-XS-Parse-Keyword-debuginfo-0.480.0-160100.3.1.ppc64le.rpm perl-XS-Parse-Keyword-debugsource-0.480.0-160100.3.1.ppc64le.rpm perl-XS-Parse-Keyword-0.480.0-160100.3.1.s390x.rpm perl-XS-Parse-Keyword-debuginfo-0.480.0-160100.3.1.s390x.rpm perl-XS-Parse-Keyword-debugsource-0.480.0-160100.3.1.s390x.rpm perl-XS-Parse-Keyword-0.480.0-160100.3.1.x86_64.rpm perl-XS-Parse-Keyword-debuginfo-0.480.0-160100.3.1.x86_64.rpm perl-XS-Parse-Keyword-debugsource-0.480.0-160100.3.1.x86_64.rpm openSUSE-Leap-16.1-11 Security update for librsvg important SUSE SLFO 1.3 This update for librsvg fixes the following issues: - CVE-2026-96889: Use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.60.3: + This is a security release for bug #1241, RUSTSEC-2026-0305 / CVE-2026-96889 / bsc#1282612: - glgo#GNOME/librsvg#1241: Fix use-after-free when there are duplicate XML entities in nested Xinclude documents. Thanks to Rafael B. Dias for reporting this in detail. - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for RUSTSEC-2026-0009. - The minimum supported Rust version (MSRV) is 1.89.0. gdk-pixbuf-loader-rsvg-2.60.3-160100.1.1.aarch64.rpm librsvg-2-2-2.60.3-160100.1.1.aarch64.rpm librsvg-2-2-debuginfo-2.60.3-160100.1.1.aarch64.rpm librsvg-2.60.3-160100.1.1.src.rpm librsvg-devel-2.60.3-160100.1.1.aarch64.rpm rsvg-convert-2.60.3-160100.1.1.aarch64.rpm rsvg-thumbnailer-2.60.3-160100.1.1.noarch.rpm typelib-1_0-Rsvg-2_0-2.60.3-160100.1.1.aarch64.rpm gdk-pixbuf-loader-rsvg-2.60.3-160100.1.1.ppc64le.rpm librsvg-2-2-2.60.3-160100.1.1.ppc64le.rpm librsvg-2-2-debuginfo-2.60.3-160100.1.1.ppc64le.rpm librsvg-devel-2.60.3-160100.1.1.ppc64le.rpm rsvg-convert-2.60.3-160100.1.1.ppc64le.rpm typelib-1_0-Rsvg-2_0-2.60.3-160100.1.1.ppc64le.rpm gdk-pixbuf-loader-rsvg-2.60.3-160100.1.1.s390x.rpm librsvg-2-2-2.60.3-160100.1.1.s390x.rpm librsvg-2-2-debuginfo-2.60.3-160100.1.1.s390x.rpm librsvg-devel-2.60.3-160100.1.1.s390x.rpm rsvg-convert-2.60.3-160100.1.1.s390x.rpm typelib-1_0-Rsvg-2_0-2.60.3-160100.1.1.s390x.rpm gdk-pixbuf-loader-rsvg-2.60.3-160100.1.1.x86_64.rpm librsvg-2-2-2.60.3-160100.1.1.x86_64.rpm librsvg-2-2-debuginfo-2.60.3-160100.1.1.x86_64.rpm librsvg-devel-2.60.3-160100.1.1.x86_64.rpm rsvg-convert-2.60.3-160100.1.1.x86_64.rpm typelib-1_0-Rsvg-2_0-2.60.3-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-12 Security update for libXtst important SUSE SLFO 1.3 This update for libXtst fixes the following issues: - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop (bsc#1285083). libXtst-1.2.5-160100.3.1.src.rpm libXtst-debugsource-1.2.5-160100.3.1.aarch64.rpm libXtst-devel-1.2.5-160100.3.1.aarch64.rpm libXtst6-1.2.5-160100.3.1.aarch64.rpm libXtst6-debuginfo-1.2.5-160100.3.1.aarch64.rpm libXtst-debugsource-1.2.5-160100.3.1.ppc64le.rpm libXtst-devel-1.2.5-160100.3.1.ppc64le.rpm libXtst6-1.2.5-160100.3.1.ppc64le.rpm libXtst6-debuginfo-1.2.5-160100.3.1.ppc64le.rpm libXtst-debugsource-1.2.5-160100.3.1.s390x.rpm libXtst-devel-1.2.5-160100.3.1.s390x.rpm libXtst6-1.2.5-160100.3.1.s390x.rpm libXtst6-debuginfo-1.2.5-160100.3.1.s390x.rpm libXtst-debugsource-1.2.5-160100.3.1.x86_64.rpm libXtst-devel-1.2.5-160100.3.1.x86_64.rpm libXtst6-1.2.5-160100.3.1.x86_64.rpm libXtst6-debuginfo-1.2.5-160100.3.1.x86_64.rpm openSUSE-Leap-16.1-13 Security update for nvidia-open-driver-G07-signed important SUSE SLFO 1.3 This update for nvidia-open-driver-G07-signed fixes the following issues: - Update non-CUDA variant to 595.112.07 (bsc#1286763). - Fix build against renamed -nvidia64kb flavor (bsc#1282794). - Fix build against Linux 7.3.0 (RC) (bsc#1278022). - Re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057). - Fix build on SLE16.1. - Added CVEs for security release 595.91.07/615.71.09 (bsc#1270255): CVE-2026-47489, CVE-2026-47491, CVE-2026-47492, CVE-2026-47494, CVE-2026-47500, CVE-2026-47501, CVE-2026-47502, CVE-2026-47504, CVE-2026-47507, CVE-2026-47508, CVE-2026-47509, CVE-2026-47510, CVE-2026-47511, CVE-2026-47512, CVE-2026-47513, CVE-2026-47514, CVE-2026-47515, CVE-2026-47516, CVE-2026-47517, CVE-2026-47518, CVE-2026-47522, CVE-2026-47523, CVE-2026-47524, CVE-2026-47525, CVE-2026-47526, CVE-2026-47527, CVE-2026-47528, CVE-2026-47529, CVE-2026-47530, CVE-2026-47531, CVE-2026-47532, CVE-2026-47533, CVE-2026-47534, CVE-2026-47537, CVE-2026-47538, CVE-2026-47540, CVE-2026-47542, CVE-2026-47543, CVE-2026-47545, CVE-2026-47546, CVE-2026-47547, CVE-2026-47548, CVE-2026-47549, CVE-2026-47551, CVE-2026-47552, CVE-2026-47553, CVE-2026-47554, CVE-2026-47555, CVE-2026-47556, CVE-2026-47557, CVE-2026-47558, CVE-2026-47559, CVE-2026-47560, CVE-2026-47561, CVE-2026-47562, CVE-2026-47563, CVE-2026-47564, CVE-2026-47565, CVE-2026-47566, CVE-2026-47567, CVE-2026-47568, CVE-2026-47569, CVE-2026-47572, CVE-2026-47586, CVE-2026-47587, CVE-2026-47588, CVE-2026-47589, CVE-2026-47590, CVE-2026-47591, CVE-2026-47592, CVE-2026-47594, CVE-2026-47595, CVE-2026-47596, CVE-2026-47597, CVE-2026-47598, CVE-2026-47599, CVE-2026-47600, CVE-2026-47601, CVE-2026-47602, CVE-2026-47603, CVE-2026-47604 nvidia-open-driver-G07-signed-595.112.07-160100.1.1.src.rpm nvidia-open-driver-G07-signed-64kb-devel-595.112.07-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-check-595.112.07-160100.1.1.noarch.rpm nvidia-open-driver-G07-signed-debugsource-595.112.07-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-default-devel-595.112.07-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-kmp-64kb-595.112.07_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-kmp-64kb-debuginfo-595.112.07_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-kmp-default-595.112.07_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.112.07_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-kmp-nvidia64kb-595.112.07_k6.12.0_160100.6-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-kmp-nvidia64kb-debuginfo-595.112.07_k6.12.0_160100.6-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-kmp-rt-595.112.07_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-kmp-rt-debuginfo-595.112.07_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-nvidia64kb-devel-595.112.07-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-rt-devel-595.112.07-160100.1.1.aarch64.rpm nv-prefer-signed-open-driver-G07-615.71.09-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-615.71.09-160100.1.1.src.rpm nvidia-open-driver-G07-signed-cuda-64kb-devel-615.71.09-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-check-615.71.09-160100.1.1.noarch.rpm nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-default-devel-615.71.09-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-kmp-64kb-615.71.09_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-kmp-64kb-debuginfo-615.71.09_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-kmp-nvidia64kb-615.71.09_k6.12.0_160100.6-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-kmp-nvidia64kb-debuginfo-615.71.09_k6.12.0_160100.6-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-kmp-rt-615.71.09_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-kmp-rt-debuginfo-615.71.09_k6.12.0_160100.8-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-nvidia64kb-devel-615.71.09-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-cuda-rt-devel-615.71.09-160100.1.1.aarch64.rpm nvidia-open-driver-G07-signed-debugsource-595.112.07-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-default-devel-595.112.07-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-kmp-default-595.112.07_k6.12.0_160100.8-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.112.07_k6.12.0_160100.8-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-kmp-rt-595.112.07_k6.12.0_160100.8-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-kmp-rt-debuginfo-595.112.07_k6.12.0_160100.8-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-rt-devel-595.112.07-160100.1.1.x86_64.rpm nv-prefer-signed-open-driver-G07-615.71.09-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-cuda-default-devel-615.71.09-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.12.0_160100.8-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.12.0_160100.8-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-cuda-kmp-rt-615.71.09_k6.12.0_160100.8-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-cuda-kmp-rt-debuginfo-615.71.09_k6.12.0_160100.8-160100.1.1.x86_64.rpm nvidia-open-driver-G07-signed-cuda-rt-devel-615.71.09-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-14 Recommended update for resource-agents important SUSE SLFO 1.3 This update for resource-agents fixes the following issues: Changes in resource-agents: - Update to version 4.18.0+git105.9ea1183: * Fix: L3: aws-vpc-move-ip fails to start (bsc#1281122) * aws-vpc-move-ip: fix fragile handling of response from AssumeRole * ZFS: re-read a transitional pool state before failing the monitor * exportfs: skip unlock_filesystem when nfsd is not running * High: Filesystem: Devices with duplicate labels are treated as errors. * podman-etcd: address review feedback on departure handshake * powervs-move-ip: introduce support for guaranteed routes * Mid: Filesystem: For block devices, allow monitor_10 even when specified by UID or LABEL. * podman-etcd: deterministic departure lock and force-new-cluster recovery - Update to version 4.18.0+git94.6c50a9b: * Fix: [SLES for SAP 15 SP6] PID 1 CPU saturation on multi-SID Pacemaker nodes caused by parallel access to systemd (bsc#1273064): + SAPInstance - fix: list-unit-files creates high load on systemd * ZFS: wait for the pool state to settle before start returns * High: storage-mon: High: storage-mon: Delete a timer that has not stopped. * portblock: fix incorrect parameters for NftDelete() when using reset_local_on_unblock_stop * podman-etcd: treat crm_attribute 'not found' exits as empty, not error * OCPBUGS-104851: podman-etcd: add restart_no_leave CRM attribute guard to skip member removal * OCPBUGS-100303: podman-etcd: add test hooks for FNC race reproduction * OCPBUGS-100303: podman-etcd: resolve force_new_cluster race during simultaneous dual-start * mediationzone: new resource agent * powervs-subnet: fix plaintext token file support * ibmmq: new resource agent for IBM MQ queue managers * podman-etcd: scope sync to etcd filesystem only * spec: Remove EOL Fedora compatibility blocks from spec file * Route: + restore unique="1" for destination and warn on "default" + update destination parameter to non-unique * powervs-move-ip: introduce support for trusted profiles, refine handling of API return codes ldirectord-4.18.0+git105.9ea1183-160100.1.1.aarch64.rpm resource-agents-4.18.0+git105.9ea1183-160100.1.1.aarch64.rpm resource-agents-4.18.0+git105.9ea1183-160100.1.1.src.rpm resource-agents-debuginfo-4.18.0+git105.9ea1183-160100.1.1.aarch64.rpm resource-agents-debugsource-4.18.0+git105.9ea1183-160100.1.1.aarch64.rpm resource-agents-zfs-4.18.0+git105.9ea1183-160100.1.1.aarch64.rpm ldirectord-4.18.0+git105.9ea1183-160100.1.1.ppc64le.rpm resource-agents-4.18.0+git105.9ea1183-160100.1.1.ppc64le.rpm resource-agents-debuginfo-4.18.0+git105.9ea1183-160100.1.1.ppc64le.rpm resource-agents-debugsource-4.18.0+git105.9ea1183-160100.1.1.ppc64le.rpm resource-agents-zfs-4.18.0+git105.9ea1183-160100.1.1.ppc64le.rpm ldirectord-4.18.0+git105.9ea1183-160100.1.1.s390x.rpm resource-agents-4.18.0+git105.9ea1183-160100.1.1.s390x.rpm resource-agents-debuginfo-4.18.0+git105.9ea1183-160100.1.1.s390x.rpm resource-agents-debugsource-4.18.0+git105.9ea1183-160100.1.1.s390x.rpm resource-agents-zfs-4.18.0+git105.9ea1183-160100.1.1.s390x.rpm ldirectord-4.18.0+git105.9ea1183-160100.1.1.x86_64.rpm resource-agents-4.18.0+git105.9ea1183-160100.1.1.x86_64.rpm resource-agents-debuginfo-4.18.0+git105.9ea1183-160100.1.1.x86_64.rpm resource-agents-debugsource-4.18.0+git105.9ea1183-160100.1.1.x86_64.rpm resource-agents-zfs-4.18.0+git105.9ea1183-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-15 Security update for nodejs24 important SUSE SLFO 1.3 This update for nodejs24 fixes the following issues: Security issues fixed: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-2026-105483: TLS certificate hostname bypass when the IP is written fullwidth digits (bsc#1286562). - CVE-2026-106069: TLS certificate hostname bypass when the host loosely resolves to an IP address (bsc#1286563). - CVE-2026-106072: Improper certificate validation for non-canonical IPv4 hostnames allows DNS SANs to authenticate IP endpoints (bsc#1286566). - CVE-2026-106073: Permission Model bypass with fs.realpathSync (bsc#1286570). - CVE-2026-106074: crypto.randomUUID() and randomInt() entropy caches are saved into user-land startup snapshots and SEAs, so every process repeats the same values (bsc#1286567). - CVE-2026-111497: Node.js Brotli decoder out-of-bounds write permits remote code execution (bsc#1286564). Non security issue fixed: - "npm install -h" output is truncated (bsc#1276224). Changes for nodejs24: Update to 24.22.1: - crypto: update root certificates to NSS 3.131.1 - deps: update c-ares to 1.34.9 - deps: update timezone to 2026e - deps: upgrade openssl sources to openssl-3.5.9 - deps: update undici to 7.30.1 Update to 24.22.0: - crypto: add crypto.parsePKCS12() - crypto: discover ciphers and hashes from OpenSSL providers - crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs - doc: deprecate Server.prototype._listen2 in node:net - net: support sending net.BoundSocket to threads and child processes - perf_hooks: implement SlidingWindowHistogram - perf_hooks: implement qrde analysis support in Histogram - perf_hooks: implement Histogram meanCI API - perf_hooks: add CBOR export/import for histogram exchange - sqlite: add StatementSync.prototype.close() - sqlite: add StatementSync.prototype[Symbol.dispose]() - src,lib: add util.markPromiseAsHandled - util: implement util.throttle - util: implement debounce for details, see https://nodejs.org/en/blog/release/v24.22.0 Update to 24.21.0: - crypto: update root certificates to NSS 3.126 - crypto: support loading private keys through STORE loaders - deps: update Undici to 7.29.1 - lib,src: improve histogram implementation - net: improve performance of net.BlockList - perf_hooks: add statistical hypothesis testing to histogram - util: add non-throwing MIMEType.parse for details see https://nodejs.org/en/blog/release/v24.21.0 Update to 24.20.0: - async_hooks: add using scopes to AsyncLocalStorage - buffer: add end parameter - doc: add MikeMcC399 as collaborator - lib,permission: add permission.drop - loader: implement package maps - src,permission: add --permission-audit - stream: add node:stream/iter implementation - test_runner: add context.log() and test:log event - test_runner: report entryFile in TestStream events - wasm: enable JSPI for details see https://github.com/nodejs/node/releases#release-v24.20.0 Update to 24.19.0: - buffer: implement blob.textStream() - deps: update OpenSSL build config to support compression - doc: update blockList stability status to release candidate - doc: mark stream.compose stable - esm: add --experimental-import-text flag - fs: support caller-supplied readFile() buffers - http: add httpValidation option to configure header value validation - net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive - perf_hooks: sample delay per event loop iteration - src: allow empty --experimental-config-file - stream: expose ReadableStreamTee - tls: report negotiated TLS groups - tls: add certificateCompression option For detailed changes, see https://github.com/nodejs/node/releases#release-v24.19.0 corepack24-24.22.1-160100.1.1.aarch64.rpm nodejs24-24.22.1-160100.1.1.aarch64.rpm nodejs24-24.22.1-160100.1.1.src.rpm nodejs24-debuginfo-24.22.1-160100.1.1.aarch64.rpm nodejs24-debugsource-24.22.1-160100.1.1.aarch64.rpm nodejs24-devel-24.22.1-160100.1.1.aarch64.rpm nodejs24-docs-24.22.1-160100.1.1.noarch.rpm npm24-24.22.1-160100.1.1.aarch64.rpm corepack24-24.22.1-160100.1.1.ppc64le.rpm nodejs24-24.22.1-160100.1.1.ppc64le.rpm nodejs24-debuginfo-24.22.1-160100.1.1.ppc64le.rpm nodejs24-debugsource-24.22.1-160100.1.1.ppc64le.rpm nodejs24-devel-24.22.1-160100.1.1.ppc64le.rpm npm24-24.22.1-160100.1.1.ppc64le.rpm corepack24-24.22.1-160100.1.1.s390x.rpm nodejs24-24.22.1-160100.1.1.s390x.rpm nodejs24-debuginfo-24.22.1-160100.1.1.s390x.rpm nodejs24-debugsource-24.22.1-160100.1.1.s390x.rpm nodejs24-devel-24.22.1-160100.1.1.s390x.rpm npm24-24.22.1-160100.1.1.s390x.rpm corepack24-24.22.1-160100.1.1.x86_64.rpm nodejs24-24.22.1-160100.1.1.x86_64.rpm nodejs24-debuginfo-24.22.1-160100.1.1.x86_64.rpm nodejs24-debugsource-24.22.1-160100.1.1.x86_64.rpm nodejs24-devel-24.22.1-160100.1.1.x86_64.rpm npm24-24.22.1-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-16 Security update for rsyslog critical SUSE SLFO 1.3 This update for rsyslog fixes the following issues: - CVE-2026-19654: imptcp regex-framing remote denial of service (bsc#1271910). - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - CVE-2026-78002: RainerScript replace() heap buffer overflow (bsc#1275926). - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). - RainerScript replace() length wrap (bsc#1285036). Changes for rsyslog: Upgrade to rsyslog 8.2608.0 (bsc#1257604) * 2026-08-18: imbeats: rearm listener after failed TLS accept * 2026-08-18: msg: serialize turbo snapshot duplication * 2026-08-18: omfile: harden dynafile default containment * 2026-08-18: fixup! omfwd: support PKCS#11 URIs with ossl TLS * 2026-07-02: omfwd: support PKCS#11 URIs with ossl TLS * 2026-07-21: mmkubernetes: reload SA token proactively and on HTTP 401 * 2026-08-17: devtools: remove Cubic from local validation * 2026-08-14: mmnormalize: share turbo $! snapshot across MsgDup by refcount * 2026-08-11: tcpsrv: synchronize session table slots * 2026-08-11: imrelp: preserve errno across stop signal * 2026-08-12: examples.rst: Missing space in template * 2026-08-10: mmnormalize: merge debug metadata * 2026-08-08: normalizers: complete debug test gating * 2026-08-08: normalizers: complete debug integration * 2026-08-07: mmnormalize, pmnormalize: add liblognorm debugging * 2026-08-07: msg: ignore null values in msgSetPropViaJSON() instead of crashing * 2026-08-07: runtime: make error-message flag atomic * 2026-07-24: fuzz: exercise RFC 3164 and RFC 5424 parsers * 2026-08-05: build: unify indentation in AC_CONFIG_FILES list * 2026-07-25: imfile: fix delay.message microsecond conversion * 2026-07-24: diskqueue: reject symlinked persisted segments * 2026-06-23: omfile: control symlink following * 2026-07-25: mmnormalize: make HUP reload worker-safe * 2026-07-24: docs(agents): add Cursor Cloud environment setup notes * 2026-07-22: imbeats: harden Lumberjack input resource handling * 2026-07-23: stringbuf: harden empty string replacement * 2026-07-20: imptcp: guard regex framing match at line start (CVE-2026-19654 bsc#1271910) * 2026-07-21: rainerscript: free cnfstmtNewAct nvlst once, at the done: label * 2026-07-21: queue: preserve DA child work during shutdown * 2026-07-21: imtcp: release completed zlib decoder state * 2026-07-09: doc: clarify JSON array rendering * 2026-07-21: Potential fixes for 5 code quality findings (#7397) * 2026-07-20: ratelimit: optimize port-based per-source keys * 2026-07-20: imtcp: make zstd window budget configurable * 2026-07-19: imtcp: use snake case for zstd window tracking * 2026-07-17: imtcp: bound aggregate zstd decoder window memory * 2026-07-20: statsobj: guard Prometheus escape writes * 2026-07-18: config: do not instantiate actions disabled via config.enabled="off" * 2026-07-15: queue: document DA engine internals * 2026-07-14: msg: enforce source-property helper contract * 2026-07-10: ratelimit: remove per-source key policy hot lock * 2026-07-08: ratelimit: speed source-key shortcuts * 2026-07-15: queue: clarify DA transfer worker role * 2026-07-18: compat_queue: add missing STAILQ_FOREACH/STAILQ_NEXT fallback * 2026-07-18: rainerscript: warn on constant AND/OR operand at parse time * 2026-07-18: configure: include <stddef.h> in the STAILQ detection test * 2026-07-17: mmnormalize: share Turbo CEE root path check * 2026-07-17: mmnormalize: fall back after Turbo materialization failure * 2026-07-17: mmnormalize: preserve turbo results across message boundaries * 2026-07-17: benchmarks: harden comparison and helper inputs * 2026-07-16: segdisk: optimize CRC accounting and add benchmarks * 2026-07-15: imjournal: stop invalidation reopen busy-loop * 2026-07-14: queue: harden segmented DA lifecycle invariants * 2026-07-14: queue: harden DA portability and startup cleanup * 2026-07-14: queue: address segmented DA review findings * 2026-07-14: queue: stabilize DA shutdown and reload state * 2026-07-14: queue: clarify lazy marker and legacy state paths * 2026-07-14: queue: gate idle cleanup on durable intent * 2026-07-14: queue: document empty DA marker replacement * 2026-07-14: queue: preserve classic state on transient load errors * 2026-07-14: queue: make idle cleanup restoration crash safe * 2026-07-14: queue: fail classic DA startup on real errors * 2026-07-14: queue: clarify dirty DA configuration handling * 2026-07-14: queue: separate DA idle and worker timeouts * 2026-07-14: queue: document DA auto-upgrade boundary * 2026-07-14: queue: publish fresh DA markers on first spill * 2026-07-14: queue: constrain classic DA startup fallback * 2026-07-14: queue: clarify disabled DA idle timeout * 2026-07-14: queue: preserve classic DA startup fallback * 2026-07-14: doc: describe segmented disk-assisted queues * 2026-07-14: queue: add segmented disk-assisted engine * 2026-07-14: queue: retain adopted recovery frontier * 2026-07-14: queue: address segmented disk review findings * 2026-07-13: queue: wake workers before capacity waits * 2026-07-13: queue: make segmented deletion resumable * 2026-07-13: queue: initialize missing state in empty spool dirs * 2026-07-13: queue: reject invalid segmented codec field types * 2026-07-13: queue: avoid sanitized generation wrap * 2026-07-13: queue: expose segmented disk durability test hooks * 2026-07-13: queue: make segmented disk recovery lazy * 2026-07-09: queue: rework experimental segmented disk backend * 2026-07-08: imjournal: warn when failing to get the MESSAGE field * 2026-07-08: omawslogshlc: add CloudWatch Logs HLC output module * 2026-07-08: core: add systemd READY delay opt-in * 2026-06-02: core/imfile: synchronize sd_notify READY=1 with module startup * 2026-07-07: ratelimit: shard per-source state * 2026-07-06: docs: validate marked config samples * 2026-07-07: ratelimit: shard named config registry * 2026-07-06: runtime: harden ratelimit per-source reload * 2026-07-06: queue: align legacy action batch default * 2026-07-06: runtime: relax worker-count log reads * 2026-07-06: core: relax selected atomic flag reads * 2026-07-06: omkafka: relax poll stop flag atomics * 2026-07-06: doc: add documentation for imfile delay.message parameter * 2026-06-04: core: add generic output rate limiting * 2026-07-05: omelasticsearch: apply TLS options during detection * 2026-06-24: omprog: pace transaction retry resumes * 2026-07-02: runtime: add relaxed 32-bit atomic helpers * 2026-07-02: runtime: fix uint64 atomic fallback return * 2026-07-02: net: match legacy allowed sender hostname handling * 2026-07-02: runtime: modernize atomic helper usage * 2026-07-02: net: add modern allowedSender ACLs * 2026-07-02: queue: keep DA child workers alive while idle * 2026-07-01: runtime: add atomic read load helpers * 2026-07-01: rainerscript: align hex escape lexer states * 2026-06-30: rainerscript: accept hex object string escapes * 2026-06-30: runtime: synchronize action retry shutdown state * 2026-06-30: mmutf8fix: fix replacement sequence examples * 2026-06-16: parser: preserve first sanitize offset with SpaceLF * 2026-06-29: template: avoid new legacy octal escape * 2026-06-29: Make imptcp-epoll-add-failure.sh Linux-only * 2026-06-29: Use check_LTLIBRARIES to generate liboverride_* test libraries * 2026-06-29: doc: correct tcp_user_timeout version marker * 2026-06-23: omhttp: continue after permanent data failures * 2026-06-28: ommail: harden subject template header output * 2026-06-28: omprog/omstdout: guard empty template LF checks * 2026-06-23: tcp: skip legacy z after stream decode * 2026-06-26: omelasticsearch: escape bulk metadata values * 2026-06-24: imtcp: bound zstd decoder window * 2026-06-24: mmkubernetes: add kubernetesurl failover * 2026-06-26: docs: add v8-stable patch-flow skill to stable branch * 2026-06-26: impcap: bound-check ARP address lengths * 2026-06-26: Initialize devcontainer option state * 2026-06-26: Remove obsolete Ubuntu 18.04 dev containers * 2026-06-26: Refresh dev container cleanup * 2026-06-26: agent: add v8-stable patch flow skill * 2026-06-26: ChangeLog: split include-glob follow-up * 2026-06-26: config: keep empty include globs silent * 2026-06-26: gtls: harden DNS SAN byte handling * 2026-06-25: Codify timeoutGuard testbench invariant * 2026-06-26: imhttp: enforce gzip request body limit * 2026-06-24: imhttp: defensive fixes and auth fallback correction * 2026-06-25: doc/release: prevent invalid release version manual change * 2026-06-24: omelasticsearch: add tls.tlsversion, tls.ciphersuites, tls.keyexchangegroups * 2026-06-24: input: warn for rulesets without queues * 2026-06-24: ommongodb: preserve ISODate fractional seconds * 2026-06-24: imuxsock: clarify missing Socket diagnostics * 2026-06-24: rsyslogd: reject -o output over input config * 2026-06-24: template: add timereceived property alias * 2026-06-24: imudp: store received sockaddr length * 2026-06-23: imfile: warn on duplicate file monitors * 2026-06-24: omudpspoof: stop retrying failed fragments * 2026-06-23: gtls: guard early debug-level lookup (bsc#1274610) * 2026-06-23: statsobj: handle lock control failures * 2026-06-23: build: avoid empty usertools install dirs * 2026-06-23: imdocker: recover from stale since anchors * 2026-06-23: tcpflood: add GnuTLS priority string option * 2026-06-23: imjournal: add journal namespace support * 2026-06-23: prepare for next scheduled stable release cycle * 2026-06-23: doc: clarify omprog transaction mode status * 2026-06-23: errmsg: enrich oversize errorfile records * 2026-06-23: omelasticsearch: retry read-only bulk failures * 2026-06-23: doc: clarify fromhost case handling * 2026-06-23: doc: clarify ommysql data failures * 2026-06-23: omuxsock: isolate action socket locks * 2026-06-16: template: add octal control character escape * 2026-06-16: omfwd: add TCP user timeout action option * 2026-06-15: mmutf8fix: support replacement sequences * 2026-06-09: [Modernization] Replace Internal Backticks with Shell Expansion: Rscript Batch 1 * 2026-06-08: diag.sh: fix content-pattern-check and assert-first-column-sum-greater-than * 2026-06-23: imtcp: add stream compression support * 2026-06-23: docs: add queue-full troubleshooting * 2026-06-22: mmpstrucdata: document structured-data buffer invariant * 2026-06-21: doc: refine object terminator wording * 2026-06-21: doc: clarify security release handling * 2026-06-21: doc: clarify RainerScript semicolon use * 2026-06-20: rainerscript: escape embedded NULs at C-string boundary * 2026-06-20: doc: explain service sandboxing for helpers * 2026-06-20: doc: address service sandboxing review * 2026-06-20: Apply suggested fix to tools/pmrfc3164.c from Copilot Autofix * 2026-06-19: rainerscript: fold constant comparisons * 2026-06-18: doc: clarify partial config validation * 2026-06-18: config: warn on constant boolean operands * 2026-06-17: parser: honor parseHostnameAndTag in RFC3164 parser * 2026-06-17: core: fix negated exact priority filters * 2026-06-16: rainerscript: keep random result non-negative * 2026-06-16: rainerscript: add cbool function * 2026-06-16: pmrfc3164: honor parseHostnameAndTag at runtime * 2026-06-16: msg: invalidate programname when tag changes * 2026-06-16: imfile: deliver same-file monitors independently * 2026-06-16: glbl: keep debug logfile notice informational * 2026-06-16: doc: modernize GELF forwarding tutorial * 2026-06-15: ommail: add SMTP mode test * 2026-06-15: mmjsonparse: modernize test output paths * 2026-06-14: parser: add optional trailing CR stripping * 2026-06-14: ompgsql: accept long server hostnames * 2026-06-14: dynstats: warn on duplicate bucket names * 2026-06-14: action: warn on duplicate action names * 2026-06-13: omfwd: use matching atomic mutex helper * 2026-06-08: Merge pull request #7014 from rsyslog/cursor/critical-correctness-bugs-480c * 2026-06-05: omazureeventhubs docs: fix underscored parameters * 2026-06-04: runtime: fix YAML promotion OOM ownership * 2026-06-04: omuxsock docs: correct template parameter * 2026-06-04: omhttp: own Splunk profile template names * 2026-06-04: mmjsonparse: reject boundary trailing data * 2026-06-04: mmdblookup: preserve uint64 values * 2026-06-04: mmdblookup: check uint64 fallback formatting * 2026-06-04: impstats docs: fix dotted log parameters * 2026-06-04: impstats docs: clarify parameter name guidance * 2026-06-04: imkafka: stop workers on startup failure * 2026-06-04: imkafka: refine startup stop flag handling * 2026-06-04: doc: match Sphinx duplicate CLI override handling * 2026-06-04: doc: keep stable git docs out of dev mode * 2026-06-04: doc: format stable rst_prolog metadata * 2026-06-04: doc: fix database tutorial SQL template option * 2026-06-03: regexp: avoid per-thread shutdown double-free * 2026-06-03: omkafka: fix NULL topic and add action name to onDestroy flush logs * 2026-06-03: mmsnareparse: honor searchWindow in tabbed trailing scan * 2026-06-03: mmsnareparse: cap tab trailing search by token * 2026-06-03: imfifo: guard absent module config paths * 2026-06-03: imfifo: bind instances to module config * 2026-06-03: imdiag: fix stats reporting gate * 2026-06-03: imdiag: avoid checked cond signal while locked * 2026-06-03: docker: gate collector imtcp module * 2026-06-03: docker: derive single imtcp enable switch * 2026-06-03: docker: default derived imtcp switch in collector * 2026-06-02: yamlconf: clean up include recursion guard * 2026-06-02: tls: propagate wolfSSL send-side read retry * 2026-06-02: tls: keep wolfSSL send retry local * 2026-06-02: tls: bound wolfSSL send-side read retries * 2026-06-02: sidecar: cap UDP burst buffer by total bytes * 2026-06-02: runtime: include limits.h for INT_MAX in yamlconf * 2026-06-02: runtime: guard against recursive YAML includes * 2026-06-02: runtime/queue: reset sizeOnDisk after safe recovery * 2026-06-02: rainerscript: accept optimizer NOP statements * 2026-06-02: omkafka: fix HUP deadlock when doAction holds mut_doAction (#7129) * 2026-06-02: omhttp: avoid retry-ruleset self-stall * 2026-06-02: omhiredis: fix TLS context error log * 2026-06-02: mmpstrucdata: support custom SD containers (CVE-2026-61548 bsc#1272414) * 2026-06-02: mmjsonparse: fix find-json ownership and scan bounds * 2026-06-02: mmjsonparse: clear JSON pointer after ownership transfer * 2026-06-02: devtools: fold local review experiment into planner * 2026-06-01: translate: cover script serialization (#7152) * 2026-06-01: dev_env: include lcov in Ubuntu coverage images * 2026-06-01: ChangeLog: update 8.2606 entries * 2026-06-01: Add parse_time_localtz with documentation * 2026-05-31: runtime: join final worker after shutdown wait * 2026-05-31: runtime: harden raw message replacement growth * 2026-05-31: runtime: fix $!all-json serialization locking * 2026-05-31: ratelimit: centralize per-source enforcement * 2026-05-31: parser: fix NetAddr cleanup on mask parse errors * 2026-05-31: omclickhouse: report HTTP response errors * 2026-05-31: omclickhouse: document SQL template option * 2026-05-31: omclickhouse: clean up JSON root on OOM * 2026-05-31: action: avoid committing suspended retry batches * 2026-05-31: Keep transactional action queue messages on shutdown * 2026-05-30: rainerscript: add tocef() and cef_ext_escape() for CEF output * 2026-05-30: doc: clarify queue crash durability limits * 2026-05-30: devtools: add read-only C format check * 2026-05-29: tls: propagate send-side receive retry * 2026-05-29: tls: preserve send-side receive retry state * 2026-05-29: tls: preserve send retry without reconnect * 2026-05-29: tls: keep wolfSSL send-side retry local * 2026-05-29: tls: keep send-side read retries local * 2026-05-29: template: apply style-check formatting * 2026-05-29: style: format msg replacement tests * 2026-05-29: runtime: fix msg replace helper CI failures * 2026-05-29: omkafka: fix suspension not triggered on host resolution failure * 2026-05-29: omfwd: schedule retry for deferred TCP flush * 2026-05-29: omfwd: preserve connection on retryable TLS sends * 2026-05-29: omfwd: avoid tcpclt leak on rebind * 2026-05-29: mmsnareparse: preserve regex end-anchor semantics * 2026-05-29: imudp: validate listen port formatting * 2026-05-29: imudp: harden listen port file writes * 2026-05-29: imptcp: simplify compression auto probe * 2026-05-29: imkafka: support multiple topics in one input() instance * 2026-05-29: imjournal: warn when newest entry is in the future * 2026-05-29: imjournal: handle clock jumps in future probe * 2026-05-29: docs: strengthen GHSA prompt guardrails * 2026-05-29: add func doFunct_ParseTimeLocalTz * 2026-05-29: Update doc/security/ghsa-coordination-review-template.md * 2026-05-29: Fix rawmsg suffix shift on realloc * 2026-05-29: Fix msg replacement and JSON set handling * 2026-05-29: Apply suggested fix to tests/mmexternal-response-too-long.sh from Copilot Autofix * 2026-05-28: tls: keep send retry state internal * 2026-05-28: template: reject invalid regex match selectors * 2026-05-28: template: guard NULL property rendering * 2026-05-28: packaging: use ETL Vespa env defaults directly * 2026-05-28: packaging: default ETL TLS envs in entrypoint * 2026-05-28: omelasticsearch: apply clang-format to version probe error * 2026-05-28: mmjsontransform: fix dotted conflict ownership * 2026-05-28: mmexternal: fix single-instance reply handling * 2026-05-28: mmexternal: fix EINTR reply handling * 2026-05-28: mmdblookup: clean up failed worker creation * 2026-05-28: imuxsock: handle embedded NUL datagrams safely * 2026-05-28: imptcp: harden auto compression probe * 2026-05-27: tls: preserve recv data during send-side reads * 2026-05-27: tls: avoid recv-helper misuse in send WANT_READ * 2026-05-27: tls: avoid receive retry state during send * 2026-05-27: template: fix jsonftree flat fallback framing * 2026-05-27: runtime: reject embedded NULs in mbedtls cert names * 2026-05-27: runtime: initialize ratelimit mutex once * 2026-05-27: runtime: guard per-thread regexp iterator allocation * 2026-05-27: runtime: fix fromhost-port extraction before rcvFrom union swap * 2026-05-27: runtime: clean up DNS props on port allocation failure * 2026-05-27: runtime-format-regexp-lifecycle-guards * 2026-05-27: regexp-clean-up-per-thread-entries * 2026-05-27: packaging: expose Vespa HTTPS toggles * 2026-05-27: packaging: enable HTTPS by default for ETL Vespa output * 2026-05-27: omusrmsg: enable thread-safe action ratelimiter * 2026-05-27: omotel: use getProgramName() when deriving app name * 2026-05-27: omotel: avoid const cast for app name extraction * 2026-05-27: ommysql: handle closed connection before commit * 2026-05-27: omkafka: harden failed delivery replay paths * 2026-05-27: omhttp: refresh health-check headers after gzip rebuild * 2026-05-27: omhttp: keep health-check headers uncompressed * 2026-05-27: omelasticsearch: bound startup version probe response size * 2026-05-27: mmsnareparse: skip full digit runs in event probe * 2026-05-27: mmsnareparse: preserve anchored trailing regex matches * 2026-05-27: mmsnareparse: cap regex input in trailing token * 2026-05-27: mmsnareparse: avoid quadratic provider scans in snare probe * 2026-05-27: mmjsontransform: fix child ownership on dotted merge conflicts * 2026-05-27: mmjsontransform: clean up dotted insert ownership * 2026-05-27: mmanon: remove assert on malformed embedded IPv4 * 2026-05-27: mmanon: make random suffix generation fully reachable * 2026-05-27: mmanon: build random suffix from byte chunks * 2026-05-27: mbedtls-refine-nul-name-checks * 2026-05-27: mbedtls-apply-cert-name-style * 2026-05-27: lookup: report active table reloads as pending * 2026-05-27: lmsig-ksi-bound-debug-precision * 2026-05-27: imptcp: serialize helper work per session * 2026-05-27: imptcp: add stream:auto compression mode * 2026-05-27: imfifo: implement named pipe input module (#7029) * 2026-05-27: dynstats: coalesce pending persistence writes per bucket * 2026-05-27: dynstats-unlock-on-task-alloc-failure * 2026-05-27: docker: fix clickhouse configure flag in Debian 13 dev image * 2026-05-27: doc: use literal markup for TLS parameters * 2026-05-27: doc: fix shutdown.enable.ctlc spelling in rsyslogd man page * 2026-05-27: doc: fix mmrfc5424addhmac sd_id parameter name * 2026-05-27: doc: clarify mbedtls requires StreamDriverMode=1 for TLS * 2026-05-27: configure: detect relpCltSetKeepAlive support * 2026-05-26: stats: avoid notifier teardown deadlocks * 2026-05-26: runtime: guard optional regexp object lifecycle in tcp server * 2026-05-26: runtime: bound KSI debug record logging by length * 2026-05-26: runtime: avoid regexp unload double free * 2026-05-26: ratelimit: avoid double free on helper error paths * 2026-05-26: perctile: reuse counter cleanup helper * 2026-05-26: perctile: link buckets after initialization * 2026-05-26: ossl: avoid caching OCSP responses past nextUpdate * 2026-05-26: omazuredce: bound HTTP response buffering * 2026-05-26: omazuredce: avoid gzip buffer underallocation * 2026-05-26: omazuredce-review-followup * 2026-05-26: imuxsock: enforce ratelimit.name for credentialed senders * 2026-05-26: imuxsock-ratelimit-credential-followup * 2026-05-26: impstats: fix double-free in remote write batching cleanup * 2026-05-26: imkafka: cap split.json.records fan-out * 2026-05-26: imdocker: keep stream alive on rate-limit drops * 2026-05-26: imdocker: bound multiline segment compaction * 2026-05-26: imdocker: apply clang-format output * 2026-05-26: configure: avoid leaking -lgcrypt into global LIBS * 2026-05-25: shellcheck: fix masked test assignments * 2026-05-25: runtime: validate numeric hardening inputs * 2026-05-25: runtime/nsd_gtls: validate IP SAN length before conversion * 2026-05-25: parser: verify and fix offAfterPRI calculation * 2026-05-25: omhiredis: derive TLS server name from server config * 2026-05-25: omfwd: require peers for targetSrv TLS name auth * 2026-05-25: omfwd: clarify targetSrv TLS auth error * 2026-05-25: nsd_gtls: preserve SAN-present state for malformed IP SAN * 2026-05-25: imhttp: write bound listener port to file * 2026-05-25: imdtls: write bound listener port to file * 2026-05-25: fix(imhiredis): default TLS peer name to configured server * 2026-05-24: tools: make AIX SRC reply copy bounded * 2026-05-24: statsobj: clear lock flag after prometheus unlock * 2026-05-24: runtime: clamp emulated RFC5424 tag length * 2026-05-24: runtime: avoid post-fork malloc in execProg * 2026-05-24: runtime/statsobj: lock stats list during iteration * 2026-05-24: nsd_mbedtls: reject RemoteSNI and wire interface * 2026-05-24: nsd_mbedtls: fill remote port interface methods * 2026-05-24: mmjsontransform: track per-insert conflicts * 2026-05-24: mmjsontransform: avoid leak on policy insert conflict * 2026-05-24: mmjsonparse: avoid json double-free on add failure * 2026-05-24: mmexternal: avoid undrained stdout/stderr pipe in output=none mode * 2026-05-24: mmexternal: address output pipe review findings * 2026-05-24: impstats: harden overwrite temp file creation * 2026-05-24: imjournal: treat rate-limit discards as non-fatal in readjournal * 2026-05-24: gssapi: use uint32_t for token wire length * 2026-05-24: gssapi: fix token length framing endianness in sender * 2026-05-24: fix(tools): guard AIX SRC reply text against NULL * 2026-05-23: rainerscript: fix array and numeric comparisons on JSON vars * 2026-05-23: privdrop: update privilege drop comments * 2026-05-23: privdrop: log capability context on drop failure * 2026-05-23: omelasticsearch: guard dynamic template strings * 2026-05-23: omelasticsearch: cache action template count * 2026-05-23: imjournal: restore cursor after recovery reopen * 2026-05-23: imjournal: recover from stale saved cursor * 2026-05-23: imjournal: harden journal invalidation recovery * 2026-05-23: imjournal: avoid rotation accounting during recovery * 2026-05-23: docs: clarify local validation gates * 2026-05-23: contrib, runtime: defensive stability and robustness hardening * 2026-05-23: codex: wire local container testing hook into agent workflow * 2026-05-22: shell: clean up ShellCheck findings * 2026-05-22: python: clean up style and add optional checks * 2026-05-22: net_ossl: document SAN-priority hard-stop on old API * 2026-05-22: msg: guard MSG replacement offsets (bsc#1272414) * 2026-05-22: mmexternal: support one-way helpers and response timeouts * 2026-05-22: imptcp: unlink failed accepted sessions * 2026-05-22: imjournal: fix double-free hazards on JSON objects * 2026-05-22: imfile: add line-number metadata and soften empty checks * 2026-05-22: imdocker: terminate compacted multiline buffers * 2026-05-22: imbeats: harden pointer transfer in submitEvent * 2026-05-22: contrib, plugins: refine pointer hand-off in imhiredis, mmjsonparse, mmsequence * 2026-05-22: contrib, plugins: defensive pointer hand-off hardening * 2026-05-22: config: warn for unmatched include globs * 2026-05-22: agents: document optional local linters * 2026-05-21: template: harden property rendering bounds * 2026-05-21: tcpsrv: guard listener destructors against NULL references * 2026-05-21: tcps_sess: secure regex memory reallocation and destructor * 2026-05-21: style: format wolfSSL CRL helper * 2026-05-21: ruleset: guard synchronous recursive calls * 2026-05-21: rainerscript: harden string and JSON bounds * 2026-05-21: pm/fm: defensively harden parsing edge cases * 2026-05-21: ossl: enable wolfSSL CRL checks for DER files * 2026-05-21: net_ossl: avoid CN fallback when SAN priority unsupported * 2026-05-21: mmgrok: keep configured source immutable * 2026-05-21: lookup: harden shutdown lifecycle * 2026-05-21: imudp: harden thread lifecycles and fix stats memory leak * 2026-05-21: imtcp: harden listener setup and legacy config cleanup * 2026-05-21: imjournal: defensive memory safety and stability hardening * 2026-05-21: docs: codify GHSA coordination workflow * 2026-05-21: docs: clarify GHSA triage scope * 2026-05-21: docs: add distro component package map * 2026-05-21: docs: add GHSA coordination template * 2026-05-21: contrib: harden buffer and parser bounds handling * 2026-05-21: agent: document local CI preflight tiers * 2026-05-21: Update tests/imptcp_uds_unlink.sh * 2026-05-21: Apply suggested fix to tests/imptcp_uds_unlink.sh from Copilot Autofix * 2026-05-20: ossl: bound OCSP network reads * 2026-05-20: mmanon: defensively harden IP suffix parsing * 2026-05-20: lookup: reject duplicate table names * 2026-05-20: imptcp: harden concurrency, boundaries, and memory safety * 2026-05-20: gtls: log peer IP for missing client cert * 2026-05-20: config: add global maxOpenFiles setting * 2026-05-20: build: fix ARMv7 warnings under Werror * 2026-05-20: agents: add ChangeLog maintenance skill * 2026-05-20: Update tests/imptcp-discard-truncated-msg-same-session.sh * 2026-05-20: ChangeLog: update 8.2606 entries * 2026-05-20: Apply suggested fix to tests/imptcp-discard-truncated-msg-same-session.sh from Copilot Autofix * 2026-05-20: Apply suggested fix to doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix * 2026-05-19: imptcp: discard oversize byte after truncation * 2026-05-18: tcp: log pre-truncated oversize frames * 2026-05-18: runtime: avoid libgcry IV shift UB * 2026-05-18: grammar: read pseudo-files in backtick cat * 2026-05-18: docker: add container regex noise filter * 2026-05-18: doc: remove unavailable StdJSONFmt reference * 2026-05-18: agents: require available container validation * 2026-05-18: agents: clarify PR babysitting decisions * 2026-05-18: ChangeLog: remove duplicate release blocks * 2026-05-18: Apply suggested fix to doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix * 2026-05-17: omelasticsearch: document error-file modes * 2026-05-17: doc: list RFC5424 reserved template * 2026-05-17: doc: clarify omfile timed flush behavior * 2026-05-17: doc: clarify omfile legacy action separation * 2026-05-17: containers: update libyaml dev image dependencies * 2026-05-17: containers: remove stale dev images * 2026-05-17: containers: enable libyaml in Fedora dev images * 2026-05-17: containers: enable libyaml in CentOS and Debian CI * 2026-05-17: build: honor cross pkg-config for libgcrypt * 2026-05-16: devcontainer: remove anonymous helper volumes * 2026-05-16: configure: make libyaml default-on explicit * 2026-05-16: agents: clarify test intent comment rule * 2026-05-15: ommail: add sendmail delivery mode * 2026-05-15: omelasticsearch: warn on searchType use * 2026-05-15: imdiag: add module-only modern config * 2026-05-15: agents: clarify PR babysitting stop condition * 2026-05-15: agents: add issue triage skill * 2026-05-15: Potential fixes for 2 code quality findings (#6909) * 2026-05-14: skills: clarify container validation escalation * 2026-05-14: omfile: reject failed dynafile pre-opens * 2026-05-14: net_ossl: fix clang-format style in CRL warning * 2026-05-14: java: use nio writer in simple plugin skeleton * 2026-05-14: imuxsock: reject contradictory socket ownership * 2026-05-14: imfile: recover more inotify file updates * 2026-05-14: Update .agent/skills/rsyslog_test/SKILL.md * 2026-05-13: runtime: add STAILQ fallback for AIX * 2026-05-13: net_ossl: fix CRL stack leak when cert store is NULL * 2026-05-13: narrow CODEOWNERS ownership * 2026-05-13: imdiag: add injectmsg delay option * 2026-05-13: devcontainer: quote git common dir mount * 2026-05-13: agents: document local overlay lookup * 2026-05-13: queue: add per-queue size.enqueued counter (cumulative bytes) * 2026-05-12: omrelp: allow TLS auth failure suspension * 2026-05-12: imbeats: multiplex sessions for high client counts * 2026-05-12: imbeats: harden batch parsing limits * 2026-05-12: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix * 2026-05-12: Apply suggested fix to tests/imptcp-NUL.sh from Copilot Autofix * 2026-05-11: runtime: harden atomic helper fallbacks * 2026-05-11: packaging/rpm: add rsyslog-imbeats subpackage * 2026-05-11: java: harden skeleton file handling * 2026-05-11: imbeats: verify raw and amended ES pipeline * 2026-05-11: imbeats: track cumulative Lumberjack sequences * 2026-05-11: imbeats: tolerate interrupted poll calls * 2026-05-11: imbeats: test Filebeat to Elasticsearch pipeline * 2026-05-11: imbeats: harden compressed frame parsing * 2026-05-11: imbeats: add Elastic Beats input module * 2026-05-11: imbeats: add Elastic Agent Windows fixture test * 2026-05-11: Apply suggested fix to tools/ompipe.c from Copilot Autofix * 2026-05-11: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix * 2026-05-11: Apply suggested fix to runtime/atomic.h from Copilot Autofix * 2026-05-11: Apply suggested fix to doc/ai/security_triage_rubric.md from Copilot Autofix * 2026-05-10: imuxsock: harden trusted property annotation buffer * 2026-05-10: immark: harden runtime config lifetime * 2026-05-10: doc: add security triage rubric for AI agents * 2026-05-10: [HARDENING] imjournal: harden disk usage stats update * 2026-05-10: [HARDENING] imdiag: clarify controlled diagnostics usage * 2026-05-09: hardning: harden config parameter ownership and OOM cleanup * 2026-05-09: config: add compatibility controls and secure defaults * 2026-05-08: rosi-collector: prevent Loki 400 queue stalls * 2026-05-08: omdtls: check config string allocations * 2026-05-08: mmrfc5424addhmac: harden SD-ID handling * 2026-05-08: mmleefparse: check config string allocations * 2026-05-08: imbeats: join session threads during teardown * 2026-05-08: Fix chkseq EOF handling * 2026-05-07: python: make file cleanup lexical * 2026-05-07: python: fix external plugin comment typos * 2026-05-07: python: close script file handles * 2026-05-07: imudp: add dynamic listen port files * 2026-05-07: impstats: remove obsolete svg jquery asset * 2026-05-07: doc: harden docs config AI fixes * 2026-05-07: devcontainer: allow sudo for mapped users * 2026-05-07: Update doc/source/conf_helpers.py * 2026-05-07: Fix operator precedence in conditions * 2026-05-07: Apply suggested fix to tests/omfwd-lb-1target-retry-test_skeleton-TargetFail.sh from Copilot Autofix * 2026-05-07: Apply suggested fix to tests/chkseq.c from Copilot Autofix * 2026-05-07: Apply suggested fix to doc/source/conf_helpers.py from Copilot Autofix * 2026-05-06: scripts: restore repo policy helpers * 2026-05-06: scripts: align module policy evaluator name * 2026-05-06: net_ossl: support CRL/OCSP revocation on wolfSSL * 2026-05-06: java: simplify simple plugin file creation * 2026-05-06: impstats: clean up svg jquery findings * 2026-05-06: impstats: avoid analyzer wildcard import * 2026-05-06: doc: import optional extensions during probe * 2026-05-06: doc: broaden optional extension probe errors * 2026-05-06: doc: avoid unused python imports * 2026-05-06: Apply suggested fix to packaging/docker/rsyslog/standard/Dockerfile from Copilot Autofix * 2026-05-05: ratelimit: preserve severity sentinel on s390x * 2026-05-05: imtcp: wait for mbedtls diagnostics in tests * 2026-05-05: imtcp test: capture mbedtls diagnostics directly * 2026-05-05: Add Ubuntu WSL development setup * 2026-05-04: improg: stop on child stdout EOF * 2026-05-04: github action: remove issue labler * 2026-05-04: codeql: silence unused global findings * 2026-05-04: codeql: add explicit Python fallbacks * 2026-05-04: Apply suggested fix to runtime/datetime.c from Copilot Autofix * 2026-04-30: ossl: match PermittedPeer wildcards against cert identities * 2026-04-30: Fix omrelp TLS auth failure CPU spin * 2026-04-29: packaging/rpm: Add omotel OpenTelemetry Sub-package * 2026-04-28: packaging: add multi-arch container release publishing * 2026-04-28: Fix RFC3339 formatting for high-precision secfrac * 2026-04-25: queue: quarantine runtime disk corruption safely * 2026-04-25: imfile test: stabilize async logrotate drain * 2026-04-25: Add security policy * 2026-04-24: imhttp: harden request parsing and cleanup (#6758) * 2026-04-24: imdocker: stabilize image-name test * 2026-04-23: omuxsock: fix message loss bug for connected Unix domain sockets (#6750) * 2026-04-23: imfile: release deleted-file FDs after FILE_DELETE_DELAY in inotify mode * 2026-04-23: .codex: restore wrapped git commit hook matching * 2026-04-22: omusrmsg: guard empty systemd session lists * 2026-04-22: omfwd: avoid recursive target teardown * 2026-04-22: fmhash: fix build issue * 2026-04-22: doc: update modules documentation (#6714) * 2026-04-21: prepare for next scheduled stable release cycle * 2026-04-20: style: format obj helper declaration * 2026-04-20: style: drop redundant cstr null checks * 2026-04-20: queue: harden corrupt disk queue recovery * 2026-04-20: queue: delete orphaned disk queue write files * 2026-04-20: prepare for 8.2604.0 release * 2026-04-20: omfwd: flush pending data before zip teardown * 2026-04-20: imptcp: harden stream compression handling * 2026-04-20: doc: shrink ROSI architecture image in dist * 2026-04-19: imfile: harden state file handling * 2026-04-19: core: harden string allocation and copy handling * 2026-04-18: omotel: ignore generated protobuf tree * 2026-04-18: imkafka: harden worker startup and teardown * 2026-04-18: imhiredis: place stream index helper before use * 2026-04-18: imhiredis: harden stream index parsing and setup * 2026-04-18: imdocker: harden setup and URL construction * 2026-04-18: imdocker,imhiredis: fix curl teardown and style * 2026-04-17: imudp,imdtls: harden listener setup paths * 2026-04-17: imdtls: disable failed listeners cleanly * 2026-04-17: gssapi: fix token timeout handling * 2026-04-17: gssapi: fix interrupted token io loops * 2026-04-17: doc: clarify severity-aware shared ratelimit use * 2026-04-16: imjournal: harden state file handling * 2026-04-16: im3195: harden RFC3195 callback handling * 2026-04-16: gssapi: improve robustness and listener handling * 2026-04-15: runtime: harden queue config and worker handling * 2026-04-15: omfile: harden dynafile cache validation * 2026-04-15: omfile: address review follow-up cleanups * 2026-04-14: omrelp: use stable data in librelp callbacks * 2026-04-14: omrelp: use generic code in onErr * 2026-04-14: omfwd: support musl resolver APIs * 2026-04-14: omelasticsearch: fix port detection for IPv6 server addresses * 2026-04-14: imhttp: add route-scoped API key authentication * 2026-04-14: configure: reduce resolver link probe * 2026-04-14: configure: link resolver libs on solaris * 2026-04-14: configure: gate omfwd resolver APIs * 2026-04-13: runtime: add watched policy reload scheduling * 2026-04-13: ratelimit: free dropped TCP messages on helper errors * 2026-04-13: [Modernization] Replace Internal Backticks with Shell Expansion: Misc test files * 2026-04-13: Add missing mmdb files to tests/Makefile.am * 2026-04-12: runtime: cleanup zero-size alloc handling * 2026-04-12: rsconf: clarify stale loadConf comments * 2026-04-12: ratelimit: keep TCP batch processing on drops * 2026-04-12: omhttp: harden payload length handling * 2026-04-12: imuxsock: bound per-pid ratelimiter cache * 2026-04-12: imtcp: harden limit validation and worker shutdown * 2026-04-12: impstats: clean up minor report nits * 2026-04-12: fix(imtcp): fix typos and remove duplicate assignments in imtcp.c * 2026-04-12: Fix for Unused import * 2026-04-12: Fix for File is not always closed * 2026-04-11: add compression option with new test and changed request building * 2026-04-09: runtime: harden stringbuf contains matching * 2026-04-09: runtime: harden TCP framing size handling * 2026-04-08: mmutf8fix: also fix invalid UTF-8 in RFC 5424 structured data * 2026-04-07: ratelimit: watch YAML policy files with debounce * 2026-04-06: [Modernization] Replace Internal Backticks with Shell Expansion * 2026-04-06: Discard partial map/array objects on error * 2026-04-04: doc: document omfwd connection statistics * 2026-04-03: runtime: map common legacy selector actions to YAML * 2026-04-03: runtime: harden YAML string-node OOM handling * 2026-04-03: runtime: emit structured YAML for simple translations * 2026-04-03: grammar: fix YAML script buffer filename leak * 2026-04-02: runtime: add config translation mode * 2026-03-31: omelasticsearch: suspend action on 5xx or 429 HTTP status codes * 2026-03-31: omelasticsearch: check HTTP status code in checkConn health check * 2026-03-31: [build]: require OpenSSL if imdtls or omdtls is used * 2026-03-30: mmjsontransform: reload transformation mode from policy * 2026-03-30: mmjsontransform: add YAML policy processing * 2026-03-30: build: stop shipping .gitignore files * 2026-03-30: [codex] doc: fix random sampling example (#6678) * 2026-03-30: [General]: Install tzdata in default docker image * 2026-03-30: Fix DoS in imjournal sd_journal_wait * 2026-03-29: doc: remove stray merge marker in deployments index * 2026-03-29: doc: clarify YAML positioning and workflow guidance * 2026-03-28: yamlconf: warn on duplicate top-level keys, document as unsupported * 2026-03-28: scripts: add doc-xref-sync linter check for broken :doc: references * 2026-03-28: doc: register design_decisions.rst in EXTRA_DIST * 2026-03-28: doc(yamlconf): fix EXTRA_DIST entry and cross-reference path * 2026-03-28: doc(yamlconf): add architecture doc, expand RainerScript relation * 2026-03-28: doc(yaml_config): add version requirement note (8.2604.0+) * 2026-03-28: doc(conf_formats): use FmtYamlName macro, fix macro-in-bold issue * 2026-03-28: doc(conf_formats): add YAML as fourth format option, cross-link pages * 2026-03-27: test(yaml-unset): guard against false pass when verify file is absent * 2026-03-27: refactor(yamlconf): extract nvlst helper, add Doxygen, fix test coverage * 2026-03-27: feat: add YAML as an alternative configuration format * 2026-03-27: docs(agents): add rsyslog_config skill and config parity guidance * 2026-03-27: doc(yamlconf): improve completeness of YAML config reference * 2026-03-27: doc(yamlconf): fix malformed RST grid table (Set row off by one space) * 2026-03-27: devtools: add repo-local Codex commit hook * 2026-03-26: feat: add YAML as an alternative configuration format * 2026-03-26: feat(yamlconf): add filter/actions shortcut for rulesets * 2026-03-25: omhttp: reuse curl handles and coordinate health checks * 2026-03-25: omhttp: fix shared health state and gzip headers * 2026-03-24: gtls: check CRL expiration, reject connections with expired CRL * 2026-03-23: doc: imptcp: remove outdated 16-thread limit note * 2026-03-21: doc/container: mark ETL image experimental * 2026-03-20: update doc url in README.md * 2026-03-20: doc: sync container docs with current images * 2026-03-20: doc: fix ROSI link audience in overview pages * 2026-03-19: doc: link ROSI references to overview page * 2026-03-19: doc: improve ROSI navigation and scope notes * 2026-03-19: doc: broaden ROSI framing beyond collector * 2026-03-18: doc: document Windows clients in ROSI Collector * 2026-03-18: doc: add ROSI stack deployment tutorial * 2026-03-16: omfwd: add num.connects statistic for TCP connection tracking * 2026-03-16: imfile: preserve symlink cleanup notifications with deferred destroy * 2026-03-16: core: Fix typos in comments * 2026-03-13: doc: Fix Mermaid diagrams and unify build output to build/ * 2026-03-11: tls: add native post-quantum guidance and tests * 2026-03-11: packaging: add Ubuntu package build CI for focal, jammy, noble * 2026-03-10: docs: clarify PrioritizeSAN fallback behavior and auth mode prerequisite * 2026-03-10: Add azure Monitor API ingestion module * 2026-03-04: Use suggested error handling when node becomes NULL mid-loop * 2026-03-04: Remove "ifdef json_type_uint64" * 2026-03-04: Discard partial map/array objects on error * 2026-03-04: Add uint64 handling if it is supported * 2026-03-03: rpm: packaging overhaul, CI job, and review fixes * 2026-03-02: imjournal documentation: FileCreateMode was introduced in v8.2306.0 * 2026-03-02: docs: remove -c5 from troubleshooting example * 2026-02-27: Revert "docs: Add ROSI Collector Hetzner Cloud tutorial" * 2026-02-26: ratelimit: wire ratelimit.name into remaining modules * 2026-02-26: omusrmsg: add ratelimit support * 2026-02-26: omkafka: add poll thread; fix races and deprecated usleep * 2026-02-26: imrelp: add ratelimit support (interval, burst, name) * 2026-02-26: Stop all outer recursive loops in MAP case on corrupted data * 2026-02-26: Skip truncated field * 2026-02-26: Replace Variable-Length Array with fixed sized one * 2026-02-26: Address style/formatting issues * 2026-02-26: Add json NULL checks * 2026-02-25: packaging: Update RHEL Docker Build Image * 2026-02-25: omotel: add native protobuf encoding (http/protobuf) * 2026-02-25: docs: Add ROSI Collector Hetzner Cloud tutorial * 2026-02-25: doc: add deterministic HTML link validation in docs CI * 2026-02-25: Update mmdblookup so it does not rely on JSON dump * 2026-02-24: doc: fix stale relative links causing malformed paths * 2026-02-24: doc: bump footer copyright year to 2026 * 2026-02-24: doc: add ROSI guides and beginner infographic * 2026-02-24: Codex/process GitHub issue 4697 (#6582) * 2026-02-23: runtime: close worker-start cancellation race * 2026-02-22: doc: update canonical location for doc set * 2026-02-18: tools: fix linking issue with libyaml * 2026-02-18: runtime: refactor dynstats meta-counter name assembly * 2026-02-18: prepare for next scheduled stable release cycle * 2026-02-18: doc: fix release_string_detail NameError, narrow deploy to main only * 2026-02-18: doc: add GitHub Actions workflow to deploy docs with GA to Pages * 2026-02-18: doc: add GA support with input validation and fallback (#6561) * 2026-02-18: core: expand checked literal copies across fixed buffers * 2026-02-17: doc: add optional Google Analytics via sphinxcontrib-googleanalytics (#6559) * 2026-02-17: ChangeLog: correct overhyped feature * 2026-02-17: ChangeLog: add missing entry * 2026-06-23: bump version number for scheduled stable release * 2026-02-16: configure: default-enable impstats push build support (#6542) * 2026-02-16: better handle copy of constant string to ip address buffer (#6557) * 2026-02-13: imjournal: fix stats counter type for uint64 fields * 2026-02-13: doc: restructure impstats reference for clearer modes * 2026-02-13: doc: expand impstats push docs and FAQ coverage * 2026-02-13: doc: describe impstats push mode for VictoriaMetrics * 2026-02-13: doc: add impstats VictoriaMetrics push tutorial * 2026-02-11: runtime: iterate ptcp addresses and validate bind device * 2026-02-11: feat(rosi-collector): impstats sidecar on server, Grafana rate limits, docs * 2026-02-08: packaging/docker: trim ubuntu24 image build artifacts * 2026-02-08: omhttp: add VictoriaLogs jsonline CI test * 2026-02-08: curl modules: pass long literal to CURLOPT_POST * 2026-02-06: omhttp: reuse reply buffer with cap and safer sizing * 2026-02-06: github action security follow up (#6532) * 2026-02-06: build: normalize object prototypes and remove decl noise * 2026-02-04: Sentinel: Fix buffer overflow risk in datetime formatting * 2026-02-04: doc: fix conflict markers in omhdfs-omhdfsport.rst * 2026-02-04: Fix infinite loop in re_extract when regex matches empty string * 2026-02-04: Codex/fix issue #6517 in rsyslog (#6520) * 2026-02-03: runtime: lower internal message rate defaults * 2026-02-03: rosi-collector: add Syslog Health (impstats) dashboard and client sidecar * 2026-02-03: doc: improve sparseArray doc and suggest is_in_subnet * 2026-02-03: doc/ommail: correct CRLF escaping; bind body template * 2026-02-03: Fix lookup table reload race condition (Device or resource busy) * 2026-02-03: Fix build failure with OpenSSL 3.4.3+ due to deprecated ENGINE API * 2026-02-03: Codex/add documentation for pcre matching (#6509) * 2026-02-02: runtime: include IPv6 scope id in DNS cache keys * 2026-02-01: ossl: make OCSP requests non-blocking with caching * 2026-01-31: runtime: fix srUtilItoA() data type inconsistencies * 2026-01-31: impstats: add VictoriaMetrics push via Remote Write * 2026-01-30: stream: lock open/init and defer error log * 2026-01-30: runtime: call class exit on lib unload * 2026-01-30: nsd_ossl: abort failed handshakes * 2026-01-29: runtime: clarify atomic helper usage * 2026-01-29: queue: fix slow drain of disk-assisted queues * 2026-01-29: queue: fix DA worker infinite loop regression from commit 4748c5746 * 2026-01-29: imkafka: add JSON batch splitting for Azure Event Hub * 2026-01-29: fix(obj): use best-effort atomics for ifIsLoaded to eliminate TSAN warnings * 2026-01-28: omfile: pass size-limit file to rotate cmd * 2026-01-28: configure: fix xxhash library check missing error action * 2026-01-25: imtcp: add MultiLine and regex framing support * 2026-01-25: SQUASH: some fixes * 2026-01-24: template: add omitIfZero option to property() * 2026-01-24: agent/skills: standardize test registration and mock check * 2026-01-23: tools: honor main_queue name override * 2026-01-23: skills: implement extended documentation distribution check * 2026-01-23: fix(tools): graceful exit on recvfrom error in wait_timeout * 2026-01-23: doc: refine memory auditor guidelines with CHKmalloc and NULL checks * 2026-01-23: core: streamline agent instructions with modular skills * 2026-01-23: action: add batchesprocessed pstats counter * 2026-01-22: imfile: add inode generation check for file rotation detection * 2026-01-21: sidecar: add rsyslog impstats exporter * 2026-01-19: ossl: add OCSP certificate revocation checking support * 2026-01-17: nitfix: add output files to .gitignore * 2026-01-17: imfile: add inotify fallback rescans on watch limits * 2026-01-17: doc: add imfile new parameter doc * 2026-01-16: queue: harden disk recovery after invalid .qi * 2026-01-16: core: fsync+atomic rename for pid file; abort on failure * 2026-01-16: build: move doc EXTRA_DIST into doc/Makefile.am * 2026-01-15: mmanon: add retry limit + fallback for unique randomization (#6444) * 2026-01-14: Improve test infrastructure: fix core dump race condition * 2026-01-13: fix pmlastmsg.c typo error * 2026-01-13: docs: Add Core Philosophy page * 2026-01-13: doc: deprecate omruleset; add call migration guide * 2026-01-12: rainerscript: add is_in_subnet() built-in * 2026-01-12: omhiredis: remove unneded param name from param table * 2026-01-12: omfile: fix pszSizeLimitCmd leak; own copy from outchannel * 2026-01-12: nitfix: code style * 2026-01-12: imfile: guard statefile unlink and honor RMStateOnMove * 2026-01-12: doc: imhttp: document ability to bind to specific IP addresses * 2026-01-12: doc: add FAQ about blocking actions and queues * 2026-01-12: core: make action state changes output better debug info * 2026-01-09: action: guard worker instance check on non-atomic builds * 2026-01-09: Fix: Use __has_include to check for rabbitmq-c headers * 2026-01-09: Fix imjournal test race condition with parallel execution * 2026-01-08: contrib/imczmq,omczmq: add CZMQ 4.2+ version guards * 2026-01-07: runtime: fix race condition in worker thread cancellation * 2026-01-07: runtime: fix inconsistent synchronization of iCurNumWrkThrd * 2026-01-07: runtime: fix TOCTOU race in worker thread creation * 2026-01-07: omsnmp: fix legacy config path and session strings * 2026-01-06: runtime: fix race condition in worker thread startup * 2026-01-06: runtime: fix critical data race in wtpSetState() * 2026-01-06: lmsig_ksi: remove unused REPORT_PARAM_MISSING macro * 2026-01-06: Fix mmsnareparse test data files missing in make dist * 2026-01-05: tcpflood: nitfix w/ compiler warning when DTLS is not configured * 2026-01-05: rainerscript: add split() function * 2026-01-05: doc: optimize agent build instructions for efficiency * 2026-01-05: doc: add sparseArray lookup IPv4 subnet matching example * 2026-01-05: core/AIX: fix an hard exit() on certain failure at AIX * 2026-01-05: Refactor duplicate string copy logic in msg.c * 2026-01-05: Refactor Prometheus stats generation to a separate function * 2026-01-04: queue: re-implement queue size warnings * 2026-01-04: doc: imrelp: clarify missing MaxSessions and session stats (#6414) * 2026-01-03: runtime/ratelimit: annotate ratelimit nonnull contracts * 2026-01-02: tcpsrv: restore default stack size assignment * 2026-01-02: runtime/nsd_ossl.c: fix authmode authorization bypass * 2026-01-02: integer parsing more robust * 2026-01-01: core, runtime, omfwd: plumb action name into modules and logs * 2025-12-31: core: improve some important inline documentation * 2025-12-30: omelasticsearch fix: potential NULL dereference * 2025-12-30: msg, docs: document jsonMerge overwrite; drop TODO * 2025-12-30: imjournal: make PRIORITY parsing robust and quiet * 2025-12-29: ratelimit: add named policies; wire into imtcp/imptcp * 2025-12-29: docs: add module template and tighten RST AI authoring rules * 2025-12-29: build: add missing doc files to EXTRA_DIST * 2025-12-28: ossl: fix ctx double-free and config string leaks * 2025-12-28: omkafka fix: double-free of kafkaheader if used * 2025-12-28: imjournal: remove unused ctrPollFailed * 2025-12-27: Add rsyslog-doc AI assistant prompt and update meta-docs * 2025-12-26: Update tests/omfwd_rebind_udp.sh * 2025-12-25: runtime/rsksi: check KSI_DataHash_extract return values * 2025-12-25: Architectural Analysis of Rsyslog Core (#6390) * 2025-12-24: rainerscript: ensure parse_json consumes entire input string * 2025-12-24: rainerscript: add split() function * 2025-12-24: omfwd: fix RebindInterval suspension and improve UDP cleanup * 2025-12-24: docs: refactor AGENTS.md for agent clarity, safety, and precision * 2025-12-23: rainerscript: ensure parse_json consumes entire input string * 2025-12-23: fix improper ":json:" use * 2025-12-23: doc: fix version (accidentally not updated) * 2025-12-23: Update doc/source/reference/parameters/omudpspoof-template.rst * 2025-12-22: nitfix: code style violations * 2025-12-22: netstream ossl driver: small fix in meta information * 2025-12-22: doc: add RAG Knowledge Base extraction and build integration * 2025-12-21: docs: formalize defensive coding and assertion patterns * 2025-12-21: doc: modernize and expand queue concept documentation * 2025-12-21: doc: fix missing EXTRA_DIST entry * 2025-12-19: rsyslog-ossl: Prevent double close of socket fd * 2025-12-19: impstats: add log.file.overwrite parameter for atomic overwrites * 2025-12-19: doc: update agent guidelines to require documentation for new parameters * 2025-12-17: omudpspoof: update RainerScript examples * 2025-12-17: imjournal: fix potential segfault (SIGBUS) * 2025-12-17: doc: fix RST syntax errors in parameter documentation * 2025-12-17: Remove macos-13 from CI and weekly jobs * 2025-12-17: Fix doc build CI security, spelling, and RST build errors * 2025-12-16: omudpspoof: fix module template example * 2025-12-16: Refactor: rename omotlp module to omotel * 2025-12-15: doc: unify mmanon random-consistent-unique text * 2025-12-15: Add support healthchecktimedelay into omhttp * 2025-12-11: omudpspoof: split parameter docs into reference pages * 2025-12-11: omudpspoof: correct parameter scopes in references * 2025-12-11: omudpspoof: align parameter casing with camelCase guidance * 2025-12-11: omsnmp: align parameter heading with module scope (#6354) * 2025-12-11: Codex/refactor rsyslog parameter documentation n6uh16 (#6345) * 2025-12-11: Codex/refactor module parameter documentation atexhg (#6355) * 2025-12-11: Codex/refactor module parameter documentation (#6349) * 2025-12-11: Codex/refactor module documentation into parameter files (#6348) * 2025-12-05: prepare for next daily stable cycle * 2025-12-05: omdtls: fix incorrect usage of gai_strerror * 2025-12-05: mmjsontransform: fix compiler warning * 2025-12-05: core: fix LogError(0, ...) anti-pattern and add guidelines * 2025-12-05: build: fix missing test files in dist tarball * 2025-12-04: omhiredis: Allow to define a name to instance and use it in logs * 2025-12-04: doc: fix some small glitches * 2025-12-03: packaging/docker: add TLS support to collector image * 2025-12-03: mmanon: better document externalized function part * 2025-12-03: docs: clarify coding practices path in prompts * 2025-12-03: docs: add assert-plus-fallback helper guidance * 2025-12-03: docker/collector: always load imtcp module * 2025-12-03: doc: handle backslash continuations in rsyslog lexer * 2025-12-03: doc: add contract pattern for externalized helpers * 2025-12-02: mmanon: fix spacing for format * 2025-12-02: doc: fix omlibdbi parameter examples * 2025-12-02: New functionality for omuxsock (#5630) * 2025-12-01: omuxsock documentation changes * 2025-12-01: mmanon: tidy inline comments * 2025-12-01: imtcp: add NetworkNamespace * 2025-12-01: Codex/refactor rsyslog parameter documentation 8z2p3x (#6327) * 2025-11-30: omfwd: add DNS SRV discovery (targetSrv) * 2025-11-28: feat(deploy): add ROSI Collector centralized log collection stack * 2025-11-28: Codex/refactor rsyslog parameter documentation (omjournal) (#6309) * 2025-11-26: doc: add TLS example for omelasticsearch * 2025-11-25: mmsnareparse: make regex trailing search limit configurable * 2025-11-25: mmanon: fix races in IPv4 trie and IPv6 hash access (#6315) * 2025-11-25: doc: add SETUP, BUILD, TEST agent task keywords * 2025-11-25: Codex/refactor rsyslog module parameter documentation wnkysy (#6311) * 2025-11-24: mmsnareparse: add parameter ignoreTrailingPattern.regex * 2025-11-21: mmsnareparse: add ignoreTrailingPattern parameter * 2025-11-21: build: Add code coverage targets * 2025-11-18: doc: some nitfixes to historical doc * 2025-11-18: doc: add conceptual model summaries * 2025-11-18: Codex/refactor omdtls documentation for parameters (#6298) * 2025-11-17: mmsnareparse: add Sysmon event support via JSON definition file * 2025-11-17: doc: add json-ld (basic schema) (#6303) * 2025-11-14: doc: restructure and modernize project history; add origins page and xrefs * 2025-11-14: container: add libyaml to some dev containers * 2025-11-14: Fix: Remove stray/unwanted 'rsyslog' subproject * 2025-11-14: Codex/refactor rsyslog module documentation parameters (#6296) * 2025-11-12: omhttp - Add two profile for Splunk HEC (#6150) * 2025-11-12: fix codestyle issue (minor) * 2025-11-12: Codex/refactor rsyslog parameter documentation fvn43p (#6290) * 2025-11-12: Codex/refactor rsyslog module parameter documentation omgssapi (#6294) * 2025-11-09: doc: add FAQ if rsyslog runs on windows * 2025-11-07: Implement Kafka Metrics, new pstats format (#6154) * 2025-11-06: fix typo in European mirror link (https vs. http) * 2025-11-06: doc: clarify release channels in versioning guide (#6289) * 2025-11-05: doc: add release version number semantic info (#6286) * 2025-11-05: Codex/refactor rsyslog module parameter documentation s7jgy3 (#6277) * 2025-11-05: Codex/refactor rsyslog module parameter documentation p47sz4 (#6285) * 2025-11-05: Codex/refactor rsyslog module parameter documentation khpye2 (#6276) * 2025-11-05: Codex/refactor rsyslog module parameter documentation bn356b (#6287) * 2025-11-05: Codex/refactor rsyslog module documentation b6q3fv (#6281) * 2025-11-04: feat(imhiredis): Add support for TLS in imhiredis (#21) * 2025-11-03: nsd_gtls: fix repeated warnings on connection retry + test * 2025-11-03: content_count_check: use optional file argument if provided * 2025-11-03: README.md Updates for clarity and content (#6282) * 2025-11-03: Enhance README with Table of Contents and new sections (#6283) * 2025-10-31: tcpsrv: stop workers before destruction * 2025-10-31: PoC: rsyslog ETL pipeline container for sending to vespa.ai * 2025-10-30: omhttp - Stats by destination server (#6141) * 2025-10-30: Fix typos: corrected 'intial' to 'initial' and 'intialize' to 'initialize' * 2025-10-30: Codex/refactor rsyslog module parameter documentation rgp0jv (#6256) * 2025-10-30: Codex/refactor module name parameters documentation (#6250) * 2025-10-30: Add support for TLS in omhiredis (#17) * 2025-10-29: omelasticsearch: add apikey authentication * 2025-10-29: doc: fix trailing whitespace in man pages * 2025-10-29: doc: add faq entry for rsyslog as etl tool (#6272) * 2025-10-29: doc: add FAQ for sending data to vespa.ai * 2025-10-24: doc/build: ship vendor/tools; make sitemap opt-in * 2025-10-24: action.c: reordered actionDestruc * 2025-10-23: doc: enable sphinx sitemap generation for html output * 2025-10-22: doc: vendor mermaid assets and fix offline viewing * 2025-10-22: doc: update SIGINT signal documentation in man page * 2025-10-20: doc: make git optional for Sphinx builds (dist tarballs) * 2025-10-20: doc: enable parallel Sphinx builds; silence edit_on_github * 2025-10-17: Add doc for mbedtls driver * 2025-10-15: bump version number for 8.2512 series * 2025-10-15: Doc: Minor spelling and typing mistakes (#6242) * 2025-10-15: Codex/refactor rsyslog imklog module parameter documentation (#6246) * 2025-10-13: Codex/refactor parameter documentation for imkafka (#6243) * 2025-10-11: core: stop busy-loop when action disables itself * 2025-10-11: Add MbedTLS netstream driver. * 2025-10-10: Codex/refactor rsyslog imgssapi module parameter documentation (#6239) * 2025-10-10: Codex/refactor rsyslog imdiag module parameter documentation (#6235) * 2025-10-09: prepare for 8.2510.0 scheduled stable release * 2025-10-09: ossl bugfix: ensure peer cert is freed in osslChkPeerAuth * 2025-10-09: omotlp: introduce OTLP/HTTP log exporter * 2025-10-07: mysql: stabilize async ommysql workers via proper thread init * 2025-10-07: imptcp: fix null pointer dereference in error logging * 2025-10-07: docs: add Agent Chat Keywords to AGENTS.md * 2025-10-06: feat: Trigger macOS workflow on relevant file changes * 2025-10-06: doc: im prove log pipeline documentation * 2025-10-06: doc: clarify reliable forwarding examples * 2025-10-06: Fix: Make RSYSLOG_DYNNAME generation POSIX-compliant * 2025-10-05: doc: refresh database and PRI tutorials * 2025-10-05: doc: improve mmjsonparse documentation * 2025-10-05: Codex/refactor rsyslog parameter documentation 68okf4 (#6219) * 2025-10-04: mmjsonparse: add find-json mode for embedded JSON * 2025-10-04: Codex/refactor rsyslog module documentation (#6215) * 2025-10-04: CI,DIST: build docs from 'make dist' tarball * 2025-10-02: test: Enable Valgrind for manytcp-too-few-tls-vg.sh * 2025-10-02: Increase message loss tolerance in TargetFail test * 2025-10-01: template: fix lenStr for subtree rendering * 2025-10-01: mmjsontransform: add experimental JSON dotted-key (un)flatten * 2025-09-29: omkafka: restore producev fallback for older librdkafka * 2025-09-29: omelasticsearch: implement target platform check (#6197) * 2025-09-29: mmexternal: split parameter in doc (#6193) * 2025-09-29: imtcp: Improve peer logging to include source ports (#6198) * 2025-09-29: CI containers: include mbedtls test environment * 2025-09-28: imdiag/tests/docs: use RFC5737 test IP in samples * 2025-09-28: Codex/refactor parameter documentation for mmjsonparse (#6189) * 2025-09-27: doc: split property documentation into separate files * 2025-09-26: docs: add agent guides and module metadata scaffolding * 2025-09-26: mmanon: split parameter docs into reference * 2025-09-25: omelasticsearch: omit _type by default; use typeless endpoint * 2025-09-25: doc: update imjournal journald warning * 2025-09-24: template: add jsonftree option for nested jsonf output * 2025-09-24: mmfields: split parameter docs into reference pages * 2025-09-23: omusrmsg bugfix: potential null pointer dereference causes segfault * 2025-09-23: omfile: enable addLF by default * 2025-09-23: mmsnarewinsec: comprehensive Windows Security Event Log parser * 2025-09-23: doc: improve subtree, list template documentation * 2025-09-23: doc: further improve template doc * 2025-09-23: Update doc/source/reference/templates/templates-type-list.rst * 2025-09-23: Codex/refactor module documentation for mmdblookup * 2025-09-22: omfile: add addLF option to append newline (#6165) * 2025-09-22: Codex/refactor rsyslog parameter documentation inmmexternal * 2025-09-22: Codex/document mmaudit plugin with sphinx (#6167) * 2025-09-20: tests/omelasticsearch: align suite with ES 7.14, reduce flakiness * 2025-09-19: refactor rsyslog parameter documentation mmdarwin * 2025-09-19: refactor rsyslog parameter documentation mmcount * 2025-09-19: refactor rsyslog module parameter documentation mmaitag * 2025-09-18: omazureeventhubs: fix data races and suppressions * 2025-09-18: mmleefparse: new message modification module for LEEF format * 2025-09-17: doc: Add helper scripts to build documentation * 2025-09-17: * imtcp: warn on TLS handshakes received on plain listeners * 2025-09-16: refactor rsyslog parameter documentation mmutf8fix * 2025-09-15: fix config error on systems with pkg-config but not libgcrypt-config * 2025-09-15: docs/getting_started: add AI assistants page * 2025-09-15: doc: new beginner tutorials * 2025-09-15: dev container: do not work-around libgcrypt dev interface change * 2025-09-13: doc: describe regex lookup table type * 2025-09-13: Codex/refactor rsyslog parameter documentation for mmtaghostname * 2025-09-12: logctl tool: fix mongoc.h include location * 2025-09-12: docs: fix doc build instructions (Sphinx 4.5+, main, monorepo) (#6114) * 2025-09-12: docker: fix collector, udp and tcp could not be enabled individually * 2025-09-12: docker: enhancements to debian sid and ubuntu 24.04 dev container * 2025-09-12: docker: add relp listener to rsyslog "collector" * 2025-09-12: doc: document compactjsonstring global option (#6127) * 2025-09-12: doc: better doc for rsyslog collector container * 2025-09-12: core: add doxygen comments to errmsg object * 2025-09-11: refactor rsyslog module parameter documentation for mmsnmptrapd * 2025-09-11: net: Add NetworkNamespace APIs * 2025-09-11: imtcp support for NetworkNamespace * 2026-02-16: prepare for 8.2602.0 scheduled stable release * 2025-09-10: tls: process TLS 1.3 KeyUpdate during send (ossl/gtls) * 2025-09-10: improve original patch * 2025-09-10: docker: update Debian 13 build to inlcude more modules * 2025-09-10: doc: improg had a strangely worded limitation listed - corrected (#6115) * 2025-09-10: Update doc/README.md * 2025-09-09: doc: update reference section on doc structure * 2025-09-09: core: add setting to permit compact json format * 2025-09-09: Codex/refactor rsyslog module parameter documentation mmrfc5424addhmac * 2025-09-09: CI remove old kafka codecov builder now the new one is present * 2025-09-06: doc: document git path resolution * 2025-09-06: devtools: Specify usage of clang-format-18 to pin v18 * 2025-09-05: rainerscript: add toupper() function * 2025-09-05: misc: add void parameter lists * 2025-09-05: doc: restore missing doc files in configure.ac * 2025-09-04: imhttp: guard handler registration * 2025-09-04: devtools: use codecov uploader in CI script * 2025-09-04: config script: add b64_decode function * 2025-09-04: Update devtools/run-ci.sh * 2025-09-04: Codex/refactor rsyslog parameter documentation ejsnoq (#6085) * 2025-09-03: runtime: fix Darwin build regressions and improve BSD portability * 2025-09-03: omkafka: allow sending static headers * 2025-09-03: mmpstrucdata: split parameter docs into reference pages * 2025-09-03: mmpstrucdata: fix action parameter anchors and casing * 2025-09-03: imdocker: Add image name to metadata fields * 2025-09-03: code style: fix macro formatting * 2025-09-03: ci(docs): add PR preview workflow via Actions Pages * 2025-09-03: Implement omhttp batching and performance improvements * 2025-09-03: Codex/refactor rsyslog parameter documentation (#6074) * 2025-09-02: omsnmp: restructure (#6063) * 2025-09-02: imrelp: fix potential segfault on termination (#5600) * 2025-09-02: core: add fromhost-port message property * 2025-08-28: tools/rsyslog.conf.5: fix example Port= value * 2025-08-28: rainerscript: warn on excessive random range * 2025-08-28: queue: refactor batch deletion with explicit phases (#6013) * 2025-08-28: omsendertrack: "fix" static analyzer reported issue * 2025-08-28: doc: work around a spellcheck restriction * 2025-08-28: doc: note AI authorship\n\nAI-Agent: ChatGPT * 2025-08-28: core: some code cleanup * 2025-08-28: community: disable automatic welcome action * 2025-08-28: code cleanup (rephrasing false postive commented out code) * 2025-08-27: improve PR welcome message handling * 2025-08-27: docs: fix typo ('begin' -> 'beginning') in developer documentation (#6029) * 2025-08-27: docs: fix minor typos in docs/source (#6028) * 2025-08-27: doc: fix assorted typos across documentation * 2025-08-27: debug version of welcome script * 2025-08-27: community: some fixes to "welcome" helper action * 2025-08-27: community: add welcome message to first few commits (#6032) * 2025-08-27: codeql: fix "master" branch reference * 2025-08-27: Potential fix for code scanning alert no. 44: Commented-out code * 2025-08-27: Add actions analysis * 2025-08-26: prepare for next scheduled stable release cycle * 2025-08-26: docs: add rsyslog issue assistant build files (#6026) * 2025-08-26: dev doc: mention "good first issue" dashboard * 2025-08-26: Update README.md * 2025-08-25: prepare for daily stable 8.2508.0 release * 2025-08-25: fix: doc/ not in tarball (in progress) * 2025-08-25: doc: add code of conduct * 2025-08-24: omrelp: add TCP keepalive configuration * 2025-08-23: immark: document config cleanup * 2025-08-23: imdocker: free temp buffer after log option parse * 2025-08-22: tcpsrv: revert PR 5806 because it was ineffective * 2025-08-22: tcpsrv: refactor IO loop; rearm-before-unlock; poll path * 2025-08-22: imjournal: initialize instance fields to avoid invalid free * 2025-08-22: imdocker: fix cosmetic memory leak * 2025-08-21: runtime/tcpsrv: drop obsolete inQueue handling * 2025-08-21: omhttp: guard rest path template access * 2025-08-21: mmaitag: fix potential memory leak * 2025-08-21: doc: restructure templates docs into hub and refs * 2025-08-21: doc: restore property statement context * 2025-08-21: core: code cleanup, avoid dead assignment * 2025-08-21: core/nsd_ptcp: zero addr before getpeername() * 2025-08-20: tcpsrv: stop loop after closeSess to avoid use-after-free * 2025-08-20: omprog: split parameter docs into reference pages * 2025-08-20: omfwd: document and enforce pool-level suspend semantics * 2025-08-20: Update README.md - notification channels * 2025-08-20: Update .github/instructions/modules.plugins.instructions.md * 2025-08-19: imhttp: optional auth + Content-Length for metrics/health * 2025-08-19: doc: make AI-First concrete; add guardrails and CI proof * 2025-08-19: atomic: remove trailing semicolons from helper macros * 2025-08-18: template: fix missing lenStr in subtree templates * 2025-08-18: tcpflood: omit delimiter for octet frames * 2025-08-18: serialize TLS session setup to avoid data race * 2025-08-18: runtime: fix NetstreamDriverCAExtraFiles parsing * 2025-08-18: omsendertrack: stop towards full completion of module. * 2025-08-18: omhttp: add profile support and revise HTTP retry semantics * 2025-08-18: imuxsock: tidy parameter docs and links * 2025-08-18: imuxsock: split input parameter docs into reference pages * 2025-08-18: imptcp: split parameter docs into reference pages * 2025-08-18: docs: streamline contrib templates and commit guidance * 2025-08-18: docs: split imfile module parameters (#5941) * 2025-08-18: doc/imfile: add File and Tag to parameter samples * 2025-08-18: OMHIREDIS: supported UDS redis server address * 2025-08-17: ommongodb: fix compilation of SSL/TLS support * 2025-08-17: ommongodb: add support for mongo-c-driver v2 * 2025-08-17: docs: rewrite container section with current images * 2025-08-17: doc: add per-container docker pages with env defaults (#5960) * 2025-08-16: imjournal: fix double sd_journal_close() during thread cancellation * 2025-08-16: doc: warn against unofficial and outdated doc clones * 2025-08-16: doc: set html_baseurl to emit canonical tags * 2025-08-16: Update doc/source/conf.py * 2025-08-15: omhttp: migrate to OMODTX; prep for project-supported status * 2025-08-15: imtcp: split input parameter docs into reference pages * 2025-08-15: imtcp: fix parameter scopes and add input examples * 2025-08-15: doc: omkafka SASL-from-env example + backticks doc overhaul * 2025-08-15: Update tests/omprog-feedback.sh * 2025-08-15: Fix transaction suspension handling for issue #2420 * 2025-08-14: ommysql: remove long-standing non-needed TODO item * 2025-08-14: imfile: add per-file impstats counters and tests * 2025-08-14: doc: split imudp parameter docs * 2025-08-13: ommysql: drop global rwlock_hmysql, revert a3b2983 * 2025-08-13: docs: split pmrfc3164 parameters into structured reference pages * 2025-08-13: docs: split omelasticsearch parameters into dedicated reference pages * 2025-08-13: docs: split imjournal parameter docs into dedicated reference pages * 2025-08-13: doc: increase visibility of reverse DNS cache controls * 2025-08-13: doc: clarify reverse DNS cache scope * 2025-08-13: doc: add v8 locking note * 2025-08-13: chore: document AI-generated changes * 2025-08-12: doc: update to doc (improvement) strategy * 2025-08-12: doc: reference AI module map in AGENTS.md and DEVELOPING.md * 2025-08-12: doc: refactor imdocker module param docs into structured ref pages * 2025-08-12: doc: imdocker had invalid legacy config stmt info - removed * 2025-08-11: omazureeventhubs: add Doxygen docs for proton thread and flow (NFC) * 2025-08-11: omamqp1: resize buffer via realloc with error handling * 2025-08-11: docs: add developer page "Action Threads and Queue Engine" * 2025-08-04: omazurevenethubs: fix compiler warning * 2025-08-01: omysql: better doc to clarify mutex use * 2025-08-01: core: migrate callback invocations to type-safe signatures * 2025-08-01: Fix: Remove unsafe function pointer casting in cfsysline.c * 2025-07-31: doc fix: remove doc for debug options that no longer exits * 2025-07-31: core: improve inline code doc for action.[ch] * 2025-07-30: parser: add checkParserInst hook for pre-registration validation * 2025-07-30: doc: improve "AI First" coverage in about section * 2025-07-28: ossl: Add PrioritizeSAN option to OpenSSL network stream driver * 2025-07-28: imjournal: fix vulnerability in state file creation * 2025-07-28: gtls: log missing certificate/key only once * 2025-07-27: doc: Improve omfwd module documentation * 2025-07-27: doc(omfwd): split and restructure omfwd documentation * 2025-07-25: document [io]mczmq modules * 2025-07-25: doc: add an initial "about" section * 2025-07-25: Add Doxygen comments for czmq modules (#5865) * 2025-07-24: Add sphinxcontrib-mermaid to documentation Docker image * 2025-07-22: docs: add structured beginner guide under getting_started/ * 2025-07-22: doc: introduce mermaid diagrams and modernized configuration docs * 2025-07-21: doc: major restructure and content improvements * 2025-07-21: doc: fix legacy conf where modern should be * 2025-07-21: Add furo theme for sphinx * 2025-07-20: doc: add json targets * 2025-07-20: doc: Modernize documentation and tooling * 2025-07-20: Add documentation build workflow * 2025-07-20: Add doc build workflow for PRs * 2025-07-20: Add Apache License to documentation * 2025-07-19: doc: some cleanup and naming changes * 2025-07-19: doc: omit footer in singlehtml builds by default * 2025-07-18: rainerscript: backticks support ${VAR} and adjacent text * 2025-07-18: pmrfc3164: add headerless message detection and handling * 2025-07-18: doc: restore control flow notes * 2025-07-18: doc: clarify action flow and add test requirement * 2025-07-18: Correct connection timing computation * 2025-07-17: fix: readthedocs definitions * 2025-07-17: doc: provide strategy and implementation document * 2025-07-17: doc: fix "edit on github" repo link * 2025-07-17: doc: enable readthedocs.io support * 2025-07-16: style: reformat Config Settings block with Doxygen comments * 2025-07-16: style: normalize C source formatting via clang-format (PoC) * 2025-07-16: omelasticsearch fix: Handle HTTP 401/403 auth errors * 2025-07-16: fix mmaitag provider handling and memory safety * 2025-07-16: cleanup: remove code-style tools that are no longer neeed * 2025-07-16: cleanup: fix reference to "master" branch -> now "main" * 2025-07-16: chore: add project-wide formatting and editor configs * 2025-07-16: Fix race condition in imtcp when closing sessions * 2025-07-16: Add IP address SAN support * 2025-07-15: fix: Prevent redefinition warnings for syslog macros * 2025-07-15: feat: introduce mmaitag PoC with Gemini AI provider (#5754) * 2025-07-15: doc: add FAQ with commonly misunderstood config sequences * 2025-07-15: build: mmaitag in configure disabled by default (#5797) * 2025-07-15: build: adjust version tag used for daily stable build process * 2025-07-15: Investigate and resolve rsyslog issue 2693 (#5793) * 2025-07-14: refactor: modernize macro definitions to support formatting and clarity * 2025-07-14: docs: Fix minor typos * 2025-07-13: impstats: add support for Prometheus metrics output format * 2025-07-12: docker: reflect new state of repo * 2025-07-12: doc: document gtls intermediate cert chain * 2025-07-12: doc: clarify purpose of MsgSetRawMsg side effects * 2025-07-12: dev doc: add design notes to queue subsystem files * 2025-07-12: Improve TLS handshake error logging (#5762) * 2025-07-12: Document statsobj architecture and formats * 2025-07-11: tooling: new developer tool to fix trailing spaces * 2025-07-11: Fix unsafe sprintf use in Azure event hubs module (#5687) * 2025-07-10: update README.md - add new AI "rsyslog Assistant" link * 2025-07-08: Document native message modification plugin interface (#5757) * 2025-07-08: AI tools: Add directory for future AI/ML tooling (#5758) * 2025-07-06: scripting: add endswith operator to property filters and RainerScript * 2025-07-06: nsd_ptcp fix: misleading error messages (regression from ad1fd21) * 2025-07-06: imtcp: prevent double-enqueue of descriptors via inQueue flag * 2025-07-06: imkmsg fix: Handle EAGAIN/EWOULDBLOCK check portably * 2025-07-05: helper utils: clean up python indentation * 2025-07-04: imfile: add new module/input parameter deleteStateOnFileMove * 2025-06-20: imfile: some cleanup, no functional changes * 2025-06-20: fix off-by-one buffer overflow * 2025-06-19: tcpsrv cleanup: remove TODO line that was scheduled to be removed * 2025-06-18: tcpsrv: fail to remove already-removed epoll fd is no error * 2025-06-18: official containers: bump rsyslog release nbr for next cycle * 2025-06-17: omsendertrack fix: memory leak in initHashTable * 2025-06-17: net_ossl: Fix memleak in net_ossl_peerfingerprint * 2025-06-17: doc: first omsendertrack reference manual entry * 2025-06-17: Bump tj-actions/changed-files from 4 to 46 in /.github/workflows * 2025-06-17: Add omsendertrack statefile tests (#5716) * 2025-06-15: update developer doc to point to new rsyslog-doc location * 2025-06-15: docs: document proof-of-concept status * 2025-06-15: doc: fix some nits, especially in the faq section * 2025-06-15: doc: add lexer for rsyslog config language * 2025-06-15: cleanup: fix some TODOs and remove outdated ones * 2025-06-15: Fix: Correct documentation location and update build guidance * 2025-06-14: doc: improve description of config parameter block handling * 2025-06-14: doc: add doxygen comments to runtime header * 2025-06-13: omfile: update internal doc to doxyfile format and improve it * 2025-06-13: docs: add commenting style guide and reference * 2025-06-13: add new FAQ on udp reception troubleshooting * 2025-06-13: Use RGerhards name in omusrmsg header * 2025-06-12: ossl netstream driver: do not import engines if not available (#5685) * 2025-06-12: Removed the redundant *_la_LDFLAGS * 2025-06-11: Add Makefile for Sphinx documentation * 2025-06-10: prepare scheduled stable version 8.2506.0 * 2025-06-10: omusrmsg: use utmpx on systems where available * 2025-06-10: imtcp: avoid data race in notifyReArm * 2025-06-10: fix hashtable realloc memset range * 2025-06-09: Revert "queue: emit better warning messages on queue param mismatch" * 2025-06-08: omfwd regression fix: avoid false active target change log message * 2025-06-08: lookup: add new table type for regex-matches * 2025-06-08: imdocker: harden module buffer management * 2025-06-08: clarify pselect suppression * 2025-06-07: doc: document optional module dependencies * 2025-06-07: Add optional PCRE match module * 2025-06-06: fix stringop-overread warning in omusrmsg * 2025-06-06: fix im3195 doc * 2025-06-06: docs: unify AI commit instructions and improve setup notes * 2025-06-06: docs: restructure contributor docs for clarity and AI agent readiness * 2025-06-05: update README to convey new developments in this project * 2025-06-05: fix mime type typo * 2025-06-05: docs: clarify CI image size * 2025-06-05: Update README to mirror new project organization * 2025-06-05: STEP: interim new "production" docker container set * 2025-06-05: Add README files for standard, dockerlogs, and host * 2025-06-04: stats: add prometheus format to set of supported output formats * 2025-06-04: imhttp: add simple http health check functionality * 2025-06-04: hostname setting works * 2025-06-04: Fix comment for parsSkipWhitespace * 2025-05-23: imudp: Output errno after recvmmsg call * 2025-05-15: imjournal: delete redundant lines in imklog.c * 2025-05-12: netstrm: optimized interface for passing connection err info * 2025-05-08: tls subsystem: generate better error message on accept failure * 2025-04-24: tcpsrv: ensure thread name set via pthread is max 15 char * 2025-04-24: ossl tls driver: better error reporting * 2025-04-18: gnutls netstrm drvr fix: handle write retry correctly in recv call * 2025-04-17: tcpsrv bugfix: do not busy wait on io events * 2025-04-16: tcpsrv bugfix: input name was not properly propagated * 2025-04-16: add experimental stats for worker awaking via event notification * 2025-04-15: tcpsrv: fix non-maintained stats counter "run" * 2025-03-25: Feature: #define macro creation for journald namespace function. * 2025-03-22: omjournal: Fix priority value. * 2025-03-22: Feature: Add journald namespace feature to omjournal. * 2025-03-17: imuxsock: Add statistics counter for discarded messages * 2025-03-14: cosmetic: remove clang static analyzer false positive * 2025-03-06: omsendertrack: new module * 2025-03-06: Fix a buffer overflow when the argument to replace is empty * 2025-03-05: rsyslog startup bugfix: cosmetic memory leak * 2025-03-05: gnutls TLS driver: fix small memory leak * 2025-03-05: core: fix potential misadressing in sigmask * 2025-03-03: Update man page dates * 2025-03-01: omhttp: fix handling of httpProxy variable * 2025-02-28: "fix" clang 18 static analyzer false positives * 2025-02-27: queue: emit better warning messages on queue param mismatch * 2025-02-26: core: fix potential NULL ptr access on HUP in very early startup phase * 2025-02-21: bump version number for next scheduled stable cycle * 2025-02-20: Fix typo in debug printf of ommysql rsyslog-8.2608.0-160100.1.1.aarch64.rpm rsyslog-8.2608.0-160100.1.1.src.rpm rsyslog-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-debugsource-8.2608.0-160100.1.1.aarch64.rpm rsyslog-devel-8.2608.0-160100.1.1.aarch64.rpm rsyslog-diag-tools-8.2608.0-160100.1.1.aarch64.rpm rsyslog-diag-tools-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-doc-8.2608.0-160100.1.1.noarch.rpm rsyslog-module-dtls-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-dtls-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-elasticsearch-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-elasticsearch-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-gcrypt-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-gcrypt-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-gssapi-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-gssapi-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-gtls-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-gtls-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-mmnormalize-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-mmnormalize-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-mysql-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-mysql-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-omhttpfs-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-omhttpfs-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-omtcl-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-omtcl-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-ossl-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-ossl-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-pgsql-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-pgsql-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-relp-8.2608.0-160100.1.1.aarch64.rpm rsyslog-module-relp-debuginfo-8.2608.0-160100.1.1.aarch64.rpm rsyslog-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-debugsource-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-devel-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-diag-tools-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-diag-tools-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-dtls-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-dtls-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-elasticsearch-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-elasticsearch-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-gcrypt-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-gcrypt-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-gssapi-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-gssapi-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-gtls-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-gtls-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-mmnormalize-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-mmnormalize-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-mysql-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-mysql-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-omhttpfs-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-omhttpfs-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-omtcl-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-omtcl-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-ossl-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-ossl-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-pgsql-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-pgsql-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-relp-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-module-relp-debuginfo-8.2608.0-160100.1.1.ppc64le.rpm rsyslog-8.2608.0-160100.1.1.s390x.rpm rsyslog-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-debugsource-8.2608.0-160100.1.1.s390x.rpm rsyslog-devel-8.2608.0-160100.1.1.s390x.rpm rsyslog-diag-tools-8.2608.0-160100.1.1.s390x.rpm rsyslog-diag-tools-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-dtls-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-dtls-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-elasticsearch-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-elasticsearch-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-gcrypt-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-gcrypt-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-gssapi-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-gssapi-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-gtls-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-gtls-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-mmnormalize-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-mmnormalize-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-mysql-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-mysql-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-omhttpfs-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-omhttpfs-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-omtcl-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-omtcl-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-ossl-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-ossl-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-pgsql-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-pgsql-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-relp-8.2608.0-160100.1.1.s390x.rpm rsyslog-module-relp-debuginfo-8.2608.0-160100.1.1.s390x.rpm rsyslog-8.2608.0-160100.1.1.x86_64.rpm rsyslog-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-debugsource-8.2608.0-160100.1.1.x86_64.rpm rsyslog-devel-8.2608.0-160100.1.1.x86_64.rpm rsyslog-diag-tools-8.2608.0-160100.1.1.x86_64.rpm rsyslog-diag-tools-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-dtls-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-dtls-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-elasticsearch-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-elasticsearch-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-gcrypt-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-gcrypt-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-gssapi-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-gssapi-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-gtls-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-gtls-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-mmnormalize-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-mmnormalize-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-mysql-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-mysql-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-omhttpfs-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-omhttpfs-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-omtcl-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-omtcl-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-ossl-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-ossl-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-pgsql-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-pgsql-debuginfo-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-relp-8.2608.0-160100.1.1.x86_64.rpm rsyslog-module-relp-debuginfo-8.2608.0-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-17 Recommended update google-extension-manager moderate SUSE SLFO 1.3 This update for google-extension-manager fixes the following issues: google-extension-manager is shipped as new package. protoc-gen-go-grpc-1.78.0-160100.1.1.aarch64.rpm protoc-gen-go-grpc-1.78.0-160100.1.1.src.rpm protoc-gen-go-grpc-debuginfo-1.78.0-160100.1.1.aarch64.rpm protoc-gen-go-1.34.2-160100.1.1.aarch64.rpm protoc-gen-go-1.34.2-160100.1.1.src.rpm protoc-gen-go-debuginfo-1.34.2-160100.1.1.aarch64.rpm google-extension-manager-20260903.01-160100.1.1.aarch64.rpm google-extension-manager-20260903.01-160100.1.1.src.rpm google-extension-manager-debuginfo-20260903.01-160100.1.1.aarch64.rpm protoc-gen-go-grpc-1.78.0-160100.1.1.ppc64le.rpm protoc-gen-go-grpc-debuginfo-1.78.0-160100.1.1.ppc64le.rpm protoc-gen-go-1.34.2-160100.1.1.ppc64le.rpm protoc-gen-go-debuginfo-1.34.2-160100.1.1.ppc64le.rpm google-extension-manager-20260903.01-160100.1.1.ppc64le.rpm google-extension-manager-debuginfo-20260903.01-160100.1.1.ppc64le.rpm protoc-gen-go-grpc-1.78.0-160100.1.1.s390x.rpm protoc-gen-go-grpc-debuginfo-1.78.0-160100.1.1.s390x.rpm protoc-gen-go-1.34.2-160100.1.1.s390x.rpm protoc-gen-go-debuginfo-1.34.2-160100.1.1.s390x.rpm google-extension-manager-20260903.01-160100.1.1.s390x.rpm google-extension-manager-debuginfo-20260903.01-160100.1.1.s390x.rpm protoc-gen-go-grpc-1.78.0-160100.1.1.x86_64.rpm protoc-gen-go-grpc-debuginfo-1.78.0-160100.1.1.x86_64.rpm protoc-gen-go-1.34.2-160100.1.1.x86_64.rpm protoc-gen-go-debuginfo-1.34.2-160100.1.1.x86_64.rpm google-extension-manager-20260903.01-160100.1.1.x86_64.rpm google-extension-manager-debuginfo-20260903.01-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-18 Security update for haproxy important SUSE SLFO 1.3 This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line (bsc#1285046). haproxy-3.4.4+git0.7f03ae65c-160100.2.1.aarch64.rpm haproxy-3.4.4+git0.7f03ae65c-160100.2.1.src.rpm haproxy-debuginfo-3.4.4+git0.7f03ae65c-160100.2.1.aarch64.rpm haproxy-debugsource-3.4.4+git0.7f03ae65c-160100.2.1.aarch64.rpm haproxy-3.4.4+git0.7f03ae65c-160100.2.1.ppc64le.rpm haproxy-debuginfo-3.4.4+git0.7f03ae65c-160100.2.1.ppc64le.rpm haproxy-debugsource-3.4.4+git0.7f03ae65c-160100.2.1.ppc64le.rpm haproxy-3.4.4+git0.7f03ae65c-160100.2.1.s390x.rpm haproxy-debuginfo-3.4.4+git0.7f03ae65c-160100.2.1.s390x.rpm haproxy-debugsource-3.4.4+git0.7f03ae65c-160100.2.1.s390x.rpm haproxy-3.4.4+git0.7f03ae65c-160100.2.1.x86_64.rpm haproxy-debuginfo-3.4.4+git0.7f03ae65c-160100.2.1.x86_64.rpm haproxy-debugsource-3.4.4+git0.7f03ae65c-160100.2.1.x86_64.rpm openSUSE-Leap-16.1-19 Recommended update for scanner-databases moderate SUSE SLFO 1.3 This update for scanner-databases fixes the following issues: Changes in scanner-databases: - database refresh on 2026-11-02 (bsc#1084929) neuvector-scanner-database-4.317-160100.5.1.noarch.rpm scanner-databases-202611021007-160100.5.1.src.rpm openSUSE-Leap-16.1-2 Recommended update for scanner-databases moderate SUSE SLFO 1.3 This update for scanner-databases fixes the following issues: Changes in scanner-databases: - database refresh on 2026-10-26 (bsc#1084929) neuvector-scanner-database-4.309-160100.4.1.noarch.rpm scanner-databases-202610260955-160100.4.1.src.rpm openSUSE-Leap-16.1-20 Security update for google-cloud-sap-agent important SUSE SLFO 1.3 This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing-related headers (bsc#1287058). - CVE-2026-78663: golang.org/x/net/http2: double flow control refund on HTTP/2 server streams (bsc#1287137). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285292). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279304). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279201). - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278987). - CVE-2026-97032: golang.org/x/net/http2: HTTP/2 server crash due to HPACK encoder race (bsc#1287487). - CVE-2026-116585,CVE-2026-116586,CVE-2026-116587: github.com/go-jose/go-jose/v4: multiple security issues in github.com/go-jose/go-jose before 4.1.6 (bsc#1288375). google-cloud-sap-agent-3.15-160100.4.1.aarch64.rpm google-cloud-sap-agent-3.15-160100.4.1.src.rpm google-cloud-sap-agent-debuginfo-3.15-160100.4.1.aarch64.rpm google-cloud-sap-agent-3.15-160100.4.1.ppc64le.rpm google-cloud-sap-agent-debuginfo-3.15-160100.4.1.ppc64le.rpm google-cloud-sap-agent-3.15-160100.4.1.s390x.rpm google-cloud-sap-agent-debuginfo-3.15-160100.4.1.s390x.rpm google-cloud-sap-agent-3.15-160100.4.1.x86_64.rpm google-cloud-sap-agent-debuginfo-3.15-160100.4.1.x86_64.rpm openSUSE-Leap-16.1-21 Recommended update for pacemaker important SUSE SLFO 1.3 This update for pacemaker fixes the following issues: Changes in pacemaker: - cts: make cts-scheduler -o/--out-dir default to a temporary directory (bsc#1272452) - spec: Add symlinks for test support files in the pacemaker-cts sub-package (bsc#1272452) - cts: Do not install test support files into /usr at runtime (bsc#1272452) - libcrmcommon: Make pcmk__auto_fencing_watchdog_timeout() static (bsc#1270354) - libcrmcommon: Functionize parsing "fencing-watchdog-timeout" (bsc#1270354) - liblrmd: Check watchdog-based self-fencing device for remote nodes only if "fencing-watchdog-timeout" is enabled (bsc#1270354) - controller: Check for watchdog-based self-fencing device only if "fencing-watchdog-timeout" is enabled (bsc#1270354) - fencer: Avoid use-after-free in debug log (bsc#1279543) - fenced: Prevent segfault by not merging with in-flight fencing actions (bsc#1271652) pacemaker-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-3.0.3+20260728.7052efa194-160100.3.1.src.rpm pacemaker-cli-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-cli-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-cts-3.0.3+20260728.7052efa194-160100.3.1.noarch.rpm pacemaker-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-debugsource-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-devel-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-libs-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-libs-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-remote-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-remote-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.aarch64.rpm pacemaker-schemas-3.0.3+20260728.7052efa194-160100.3.1.noarch.rpm python3-pacemaker-3.0.3+20260728.7052efa194-160100.3.1.noarch.rpm pacemaker-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-cli-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-cli-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-debugsource-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-devel-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-libs-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-libs-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-remote-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-remote-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.ppc64le.rpm pacemaker-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-cli-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-cli-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-debugsource-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-devel-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-libs-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-libs-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-remote-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-remote-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.s390x.rpm pacemaker-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-cli-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-cli-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-debugsource-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-devel-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-libs-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-libs-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-remote-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm pacemaker-remote-debuginfo-3.0.3+20260728.7052efa194-160100.3.1.x86_64.rpm openSUSE-Leap-16.1-22 Security update for GraphicsMagick moderate SUSE SLFO 1.3 This update for GraphicsMagick fixes the following issues: - CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which are self- referencing (bsc#1283767). - CVE-2026-109964: heap buffer underwrite in `DecodeImage()` of in PICT decoder due to pointer arithmetic overflow (bsc#1285423). GraphicsMagick-1.3.48-160100.4.1.aarch64.rpm GraphicsMagick-1.3.48-160100.4.1.src.rpm GraphicsMagick-debuginfo-1.3.48-160100.4.1.aarch64.rpm GraphicsMagick-debugsource-1.3.48-160100.4.1.aarch64.rpm GraphicsMagick-devel-1.3.48-160100.4.1.aarch64.rpm libGraphicsMagick++-Q16-12-1.3.48-160100.4.1.aarch64.rpm libGraphicsMagick++-Q16-12-debuginfo-1.3.48-160100.4.1.aarch64.rpm libGraphicsMagick++-devel-1.3.48-160100.4.1.aarch64.rpm libGraphicsMagick-Q16-3-1.3.48-160100.4.1.aarch64.rpm libGraphicsMagick-Q16-3-debuginfo-1.3.48-160100.4.1.aarch64.rpm libGraphicsMagick3-config-1.3.48-160100.4.1.aarch64.rpm libGraphicsMagickWand-Q16-2-1.3.48-160100.4.1.aarch64.rpm libGraphicsMagickWand-Q16-2-debuginfo-1.3.48-160100.4.1.aarch64.rpm perl-GraphicsMagick-1.3.48-160100.4.1.aarch64.rpm perl-GraphicsMagick-debuginfo-1.3.48-160100.4.1.aarch64.rpm GraphicsMagick-1.3.48-160100.4.1.ppc64le.rpm GraphicsMagick-debuginfo-1.3.48-160100.4.1.ppc64le.rpm GraphicsMagick-debugsource-1.3.48-160100.4.1.ppc64le.rpm GraphicsMagick-devel-1.3.48-160100.4.1.ppc64le.rpm libGraphicsMagick++-Q16-12-1.3.48-160100.4.1.ppc64le.rpm libGraphicsMagick++-Q16-12-debuginfo-1.3.48-160100.4.1.ppc64le.rpm libGraphicsMagick++-devel-1.3.48-160100.4.1.ppc64le.rpm libGraphicsMagick-Q16-3-1.3.48-160100.4.1.ppc64le.rpm libGraphicsMagick-Q16-3-debuginfo-1.3.48-160100.4.1.ppc64le.rpm libGraphicsMagick3-config-1.3.48-160100.4.1.ppc64le.rpm libGraphicsMagickWand-Q16-2-1.3.48-160100.4.1.ppc64le.rpm libGraphicsMagickWand-Q16-2-debuginfo-1.3.48-160100.4.1.ppc64le.rpm perl-GraphicsMagick-1.3.48-160100.4.1.ppc64le.rpm perl-GraphicsMagick-debuginfo-1.3.48-160100.4.1.ppc64le.rpm GraphicsMagick-1.3.48-160100.4.1.s390x.rpm GraphicsMagick-debuginfo-1.3.48-160100.4.1.s390x.rpm GraphicsMagick-debugsource-1.3.48-160100.4.1.s390x.rpm GraphicsMagick-devel-1.3.48-160100.4.1.s390x.rpm libGraphicsMagick++-Q16-12-1.3.48-160100.4.1.s390x.rpm libGraphicsMagick++-Q16-12-debuginfo-1.3.48-160100.4.1.s390x.rpm libGraphicsMagick++-devel-1.3.48-160100.4.1.s390x.rpm libGraphicsMagick-Q16-3-1.3.48-160100.4.1.s390x.rpm libGraphicsMagick-Q16-3-debuginfo-1.3.48-160100.4.1.s390x.rpm libGraphicsMagick3-config-1.3.48-160100.4.1.s390x.rpm libGraphicsMagickWand-Q16-2-1.3.48-160100.4.1.s390x.rpm libGraphicsMagickWand-Q16-2-debuginfo-1.3.48-160100.4.1.s390x.rpm perl-GraphicsMagick-1.3.48-160100.4.1.s390x.rpm perl-GraphicsMagick-debuginfo-1.3.48-160100.4.1.s390x.rpm GraphicsMagick-1.3.48-160100.4.1.x86_64.rpm GraphicsMagick-debuginfo-1.3.48-160100.4.1.x86_64.rpm GraphicsMagick-debugsource-1.3.48-160100.4.1.x86_64.rpm GraphicsMagick-devel-1.3.48-160100.4.1.x86_64.rpm libGraphicsMagick++-Q16-12-1.3.48-160100.4.1.x86_64.rpm libGraphicsMagick++-Q16-12-debuginfo-1.3.48-160100.4.1.x86_64.rpm libGraphicsMagick++-devel-1.3.48-160100.4.1.x86_64.rpm libGraphicsMagick-Q16-3-1.3.48-160100.4.1.x86_64.rpm libGraphicsMagick-Q16-3-debuginfo-1.3.48-160100.4.1.x86_64.rpm libGraphicsMagick3-config-1.3.48-160100.4.1.x86_64.rpm libGraphicsMagickWand-Q16-2-1.3.48-160100.4.1.x86_64.rpm libGraphicsMagickWand-Q16-2-debuginfo-1.3.48-160100.4.1.x86_64.rpm perl-GraphicsMagick-1.3.48-160100.4.1.x86_64.rpm perl-GraphicsMagick-debuginfo-1.3.48-160100.4.1.x86_64.rpm openSUSE-Leap-16.1-23 Security update for ansible-core important SUSE SLFO 1.3 This update for ansible-core fixes the following issues: - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the control node (bsc#1284847). ansible-core-2.20.2-160100.4.1.noarch.rpm ansible-core-2.20.2-160100.4.1.src.rpm ansible-test-2.20.2-160100.4.1.noarch.rpm openSUSE-Leap-16.1-24 Security update for python-Pillow critical SUSE SLFO 1.3 This update for python-Pillow fixes the following issues: - CVE-2026-96636: decompression-bomb protection bypass via multi-frame `seek()` in MPO and DCX (bsc#1286802). - CVE-2026-96637: decompression bomb check bypass in `SpiderImagePlugin.seek()` leads to unbounded allocation DoS (bsc#1286801). - CVE-2026-96638: BMP RLE decoder memory-amplification DoS via unbounded delta escape/absolute mode (bsc#1286800). - CVE-2026-96639: multi-frame loaders can reuse stale native image storage after mode transitions (bsc#1286799). - CVE-2026-96640: PDF append accepts malformed shared page-tree DAG, which can cause resource exhaustion (bsc#1286798). - CVE-2026-96641: reachable undefined behavior in native integer operations can lead to denial of service or logic integrity compromise (bsc#1286797). - CVE-2026-96642: `TarIO` negative size field causes infinite CPU-spin loop (bsc#1286796). - CVE-2026-96643: PNG eXIf chunk makes EXIF parsing run in quadratic time (bsc#1286795). - CVE-2026-96778: heap buffer overflow writing JPEG comment after ICC profile fills buffer (bsc#1286793). - CVE-2026-112390: Denial of Service via infinite loop during crafted MIC image parsing (bsc#1286256). - CVE-2026-112391: Denial of Service via unbounded recursion in PDF parser (bsc#1286273). - CVE-2026-112392: Denial of Service via zero-size images in rank filters (bsc#1286287). - CVE-2026-112393: heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data (bsc#1286325). - CVE-2026-112394: `P;2L` and `P;4L` decoders may read 1 to 3 bytes past the passed buffer size (bsc#1286311). - CVE-2026-112395: Pillow tiled-TIFF decoder reads past tile buffer in `copy4` (bsc#1286312). - CVE-2026-112396: heap use-after-free when encoding TIFF to an in-memory buffer (bsc#1286313). - CVE-2026-112397: out-of-bounds access in `_imagingmorph` on a zero-width image (bsc#1286314). - CVE-2026-112398: heap buffer overflow in FPX JPEG decoding can lead to code execution (bsc#1286406). - CVE-2026-112399: Denial of service via crafted APNG image (bsc#1286368). - CVE-2026-112400: Denial of Service via memory exhaustion from crafted GIF image (bsc#1286370). - CVE-2026-112401: Denial of Service via crafted GIF comments (bsc#1286372). - CVE-2026-112402: Denial of service via double free during image transformation (bsc#1286381). - CVE-2026-112403: heap buffer overflow in `ImagingJpegDecode` allows for code execution (bsc#1286405). - CVE-2026-112404: Denial of Service via out-of-bounds read in TIFF decoding (bsc#1286388). - CVE-2026-112405: NULL pointer dereference in `Image.merge` via an unvalidated band 0 (bsc#1286404). - CVE-2026-112406: infinite loop in `PdfParser.rewrite_pages` on page tree `Parent` cycle (bsc#1286403). - CVE-2026-112891: quadratic GIF comment copying during save (bsc#1286402). - CVE-2026-112892: MSP RLE decoder expands a tiny file into unbounded memory (bsc#1286401). - CVE-2026-112893: Denial of Service via invalid pointer free during font rendering (bsc#1286392). - CVE-2026-112894: Denial of Service via crafted multi-frame image conversion (bsc#1286408). - CVE-2026-112895: Denial of service via crafted PDF during append operations (bsc#1286411). - CVE-2026-112896: TIFF encoder `ColorMap` plane-size mismatch causes a heap out-of-bounds read (bsc#1286400). - CVE-2026-112897: `TiffDecode` returns uninitialized memory as pixels for short JPEG strips (bsc#1286398). - CVE-2026-112898: `Image.quantize()` with empty palette can leak uninitialized stack memory (bsc#1286399). - CVE-2026-112899: EPS `load(scale)` lets Ghostscript render past the decompression bomb limit (bsc#1286489). - CVE-2026-112900: argument Injection in Ghostscript call can lead to remote code execution (bsc#1286397). - CVE-2026-112901: ReDoS in `XbmImagePlugin` can be triggered by 512-byte file (bsc#1286396). - CVE-2026-112902: memory disclosure and segfault in libtiff encoder via crafted TIFF tags (bsc#1286804). - CVE-2026-114501: Arrow export leaks stale heap memory when `PILLOW_ALIGNMENT > 1` (bsc#1286803). python-Pillow-11.3.0-160100.3.1.src.rpm python-Pillow-debuginfo-11.3.0-160100.3.1.aarch64.rpm python-Pillow-debugsource-11.3.0-160100.3.1.aarch64.rpm python313-Pillow-11.3.0-160100.3.1.aarch64.rpm python313-Pillow-debuginfo-11.3.0-160100.3.1.aarch64.rpm python313-Pillow-tk-11.3.0-160100.3.1.aarch64.rpm python313-Pillow-tk-debuginfo-11.3.0-160100.3.1.aarch64.rpm python-Pillow-debuginfo-11.3.0-160100.3.1.ppc64le.rpm python-Pillow-debugsource-11.3.0-160100.3.1.ppc64le.rpm python313-Pillow-11.3.0-160100.3.1.ppc64le.rpm python313-Pillow-debuginfo-11.3.0-160100.3.1.ppc64le.rpm python313-Pillow-tk-11.3.0-160100.3.1.ppc64le.rpm python313-Pillow-tk-debuginfo-11.3.0-160100.3.1.ppc64le.rpm python-Pillow-debuginfo-11.3.0-160100.3.1.s390x.rpm python-Pillow-debugsource-11.3.0-160100.3.1.s390x.rpm python313-Pillow-11.3.0-160100.3.1.s390x.rpm python313-Pillow-debuginfo-11.3.0-160100.3.1.s390x.rpm python313-Pillow-tk-11.3.0-160100.3.1.s390x.rpm python313-Pillow-tk-debuginfo-11.3.0-160100.3.1.s390x.rpm python-Pillow-debuginfo-11.3.0-160100.3.1.x86_64.rpm python-Pillow-debugsource-11.3.0-160100.3.1.x86_64.rpm python313-Pillow-11.3.0-160100.3.1.x86_64.rpm python313-Pillow-debuginfo-11.3.0-160100.3.1.x86_64.rpm python313-Pillow-tk-11.3.0-160100.3.1.x86_64.rpm python313-Pillow-tk-debuginfo-11.3.0-160100.3.1.x86_64.rpm openSUSE-Leap-16.1-25 Recommended update for ansible-trento, mcp-server-trento, trento-checks, trento-wanda, trento-web, supportutils-plugin-trento, trento-agent moderate SUSE SLFO 1.3 This update for ansible-trento, mcp-server-trento, trento-checks, trento-wanda, trento-web, supportutils-plugin-trento, trento-agent fixes the following issues: Changes in ansible-trento: - Release 1.1.0 ## What's Changed * Relicense under GPL-3.0-or-later (#152) @nelsonkopliku * Add support for pinning RabbitMQ version in inventory (#149) @vicenteqa * Use automerge reusable workflow (#145) @antgamdia * Add concurrency to group in CI (#140) @antgamdia ### Features * Run CI from containers (#148) @antgamdia * Autoregister modules with SUSEConnect (#131) @antgamdia, @skrech * Check for colliding ports before each role (#132) @antgamdia * Remove global `group_vars` (#147) @antgamdia * Extract PostgreSQL and RabbitMQ ports to variables (#139) @antgamdia ### Dependencies * Bump the common-workflows group with 5 updates (#151) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 4 updates (#146) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 (#144) [@dependabot[bot]](https://github.com/apps/dependabot) **Full Changelog**: https://github.com/trento-project/ansible/compare/1.0.1...1.1.0 - Release 1.0.1 ## What's Changed * Fix typos (#130) @antgamdia * Make Prometheus port configurable (#122) @vicenteqa * Add SLES16 CI target (#124) @vicenteqa * Cancel stale CI runs (#123) @vicenteqa, @Copilot * Remove constraints so supportutils can be installed on 15.4 too (#120) @vicenteqa * Remove SLES15 SP3 checks from the CI (#121) @vicenteqa * [TRNT-4358] Add license headers (#118) @antgamdia * [TRNT-4358] Update LICENSE to match Apache-2.0 verbatim text (#117) @antgamdia * Switch CI to common workflows (#114) @skrech * [TRNT-4330] Add Dependabot configuration (#108) @antgamdia * [TRNT-4317] Pin GHA to SHA instead of tags (#107) @antgamdia * Rename 'Usage with Vagrant' to 'Local Development Environment' (#104) @EMaksy * Add basic auth to prometheus web write endpoint (#102) @balanza, Emanuele De Cupis * Add missing python3 module doc (#95) @nelsonkopliku * Add missing directory mode (#94) @nelsonkopliku ### Features * Use fallback Prometheus port in SLES 16 (#134) @antgamdia * Add Web and Wanda LOG_LEVEL usage (#135) @arbulu89 * Add support plugin for trento server (#106) @EMaksy * CI releases use signed commits (#103) @skrech * variable prometheus upstream in reverse proxy (#101) @nelsonkopliku * Prometheus ssl termination (#99) @nelsonkopliku, @arbulu89 * Configure Alloy (#97) @nelsonkopliku * Provide server CA certs to agents (#96) @nelsonkopliku * Install monitoring dependencies on agents (#93) @nelsonkopliku * Allow Enabling/Disabling prometheus remote write receiver (#92) @nelsonkopliku, @Copilot ### Bug Fixes * Create Prometheus tmpfiles before service startup (#127) @vicenteqa ### Maintenance * Enable backport (#137) @skrech * Use "trento-checks" img (#133) @antgamdia * Allow hotfix releases in the pipeline (#100) @skrech ### Dependencies <details> <summary>7 changes</summary> * Bump the common-workflows group with 3 updates (#138) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump ansible/ansible-lint from 26.4.0 to 26.6.0 (#128) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.3 to 7.0.1 (#129) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.2 to 6.0.3 (#125) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dawidd6/action-ansible-playbook from 2.8.0 to 9 (#110) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump ansible/ansible-lint from 25.12.2 to 26.4.0 (#115) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group across 1 directory with 3 updates (#119) [@dependabot[bot]](https://github.com/apps/dependabot) </details> **Full Changelog**: https://github.com/trento-project/ansible/compare/1.0.0...1.0.1 Changes in mcp-server-trento: - Release 1.2.0 ## What's Changed * Relicense under GPL-3.0-or-later (#162) @nelsonkopliku ### Features * Add support for stateless connections (#143) @antgamdia ### Maintenance * Use automerge reusable workflow (#157) @antgamdia ### Dependencies <details> <summary>6 changes</summary> * Bump the common-workflows group with 5 updates (#161) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.6.0 to 1.7.0 (#160) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/modelcontextprotocol/go-sdk from 1.7.0 to 1.8.0 (#159) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 4 updates (#158) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/getkin/kin-openapi from 0.147.0 to 0.149.0 (#155) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 (#156) [@dependabot[bot]](https://github.com/apps/dependabot) </details> **Full Changelog**: https://github.com/trento-project/mcp-server/compare/1.1.2...1.2.0 Changes in trento-checks: - Release 1.4.0 ## What's Changed * 3D8598 review (#112) @ksanjeet * Relevant IP resource in values for provider AWS (#110) @ksanjeet * Updation of all applicable metadata values - set 1 (#92) @ksanjeet * Correction of position of exclude section in relevant checks (#82) @abravosuse * Changing description ofcheck 9FAAD0 (#73) @balanza, @abravosuse, @Copilot, Emanuele De Cupis * Changing description ofcheck 9FAAD0 (#71) @abravosuse, @Copilot ### Features * Addition of majority maker exclude predictate to relevant checks (#81) @abravosuse ### Maintenance * Use automerge reusable workflow (#108) @antgamdia * Revert backport ci back to normal (#100) @skrech * Switch to pull_request_target for backport action - #761 (#95) @skrech * Enable backport action (#93) @skrech ### Dependencies <details> <summary>9 changes</summary> * Bump the common-workflows group with 5 updates (#111) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 4 updates (#109) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 (#107) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 3 updates (#94) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 7.0.0 to 7.0.1 (#89) [@dependabot[bot]](https://github.com/apps/dependabot) * Update docker-compose file (#79) @antgamdia * Bump actions/checkout from 6.0.3 to 7.0.0 (#76) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group across 1 directory with 3 updates (#69) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.2 to 6.0.3 (#75) [@dependabot[bot]](https://github.com/apps/dependabot) </details> **Full Changelog**: https://github.com/trento-project/checks/compare/1.3.0...1.4.0 Changes in trento-wanda: - Release 2.2.0 ## What's Changed * Bump contracts version (#804) @nelsonkopliku * Switch to pull_request_target for backport action (#761) @nelsonkopliku * Document `exclude` predicate (#731) @balanza, Emanuele De Cupis * Add `exclude` field to specification json schema (#736) @arbulu89 * Enforce using erlang26 on SLES15 (#723) @balanza, Emanuele De Cupis * Remove repo template to use project-wide template instead. (#724) @eromanova97 ### Features * Bump build to otp27 elixir119 (#797) @nelsonkopliku * Add x-ai-tool information to MCP tagged operations (#722) @nelsonkopliku * update to elixir 1.19.5 and erlang 27.3.4.11 (#718) @nelsonkopliku ### Bug Fixes * Fix docs generation (#720) @nelsonkopliku ### Maintenance * Relicense under GPL-3.0-or-later (#803) @nelsonkopliku * Use shared OTP toolchain matrix (#799) @nelsonkopliku * Use automerge reusable workflow (#787) @antgamdia * Revert backport workflow back to normal (#781) @skrech * Enable backport action (#755) @skrech * Make catalog_fact factory name value sequential (#746) @arbulu89 * Add default version for dependabot (#738) @antgamdia * Remove temporary CI step (#721) @nelsonkopliku ### Dependencies <details> <summary>24 changes</summary> * Bump phoenix from 1.8.14 to 1.8.15 (#805) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump phoenix from 1.8.11 to 1.8.14 (#798) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump contracts version (#802) @arbulu89 * Bump the common-workflows group with 4 updates (#801) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump mox from 1.2.0 to 1.3.2 (#796) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump ranch from 2.2.1 to 2.3.0 (#794) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.6.0 to 1.7.0 (#795) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump ex_doc from 0.40.3 to 0.40.4 (#790) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dialyxir from 1.4.7 to 1.4.8 (#793) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group across 1 directory with 4 updates (#788) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump open_api_spex from 3.22.3 to 3.22.4 (#792) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 (#789) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump telemetry_metrics from 1.1.0 to 1.2.0 (#784) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump ex_machina from 2.8.1 to 2.8.2 (#753) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump credo from 1.7.18 to 1.7.19 (#751) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump ex_machina from 2.8.0 to 2.8.1 (#748) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump faker from 0.18.0 to 0.19.0 (#742) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/setup-node from 6.4.0 to 7.0.0 (#737) [@dependabot[bot]](https://github.com/apps/dependabot), @arbulu89 * Bump actions/checkout from 7.0.0 to 7.0.1 (#739) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/cache from 5.0.5 to 6.1.0 (#734) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.3 to 7.0.0 (#730) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.5.1 to 1.6.0 (#727) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.2 to 6.0.3 (#726) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 (#719) [@dependabot[bot]](https://github.com/apps/dependabot) </details> **Full Changelog**: https://github.com/trento-project/wanda/compare/2.1.0...2.2.0 Changes in trento-web: - Release 3.2.0 ## What's Changed * Use run start date for flaky tests analysis dashboard data (#4943) @vicenteqa * Fix sap systems overview flaky tests (#4925) @vicenteqa * Wait for Generate Token modal removal in Cypress (#4921) @anmazzotti * Handle undefined response in Cypress tests (#4922) @anmazzotti * Bump contracts version (#4923) @nelsonkopliku * Adjustments to have alerting test suites targeting a prod env (#4913) @vicenteqa, @Copilot * Fix e2e test in SAP systems overview cleaning session storage properly (#4815) @arbulu89 * Remove unused workflow (#4793) @nelsonkopliku * Add e2e tests for Test email feature (#4766) @arbulu89 * Add Test email button in the frontend (#4763) @arbulu89 * Auto-retry failed CI jobs (#4466) @antgamdia * Add auto-merge dependabot PRs workflow (#4467) @antgamdia * Switch to pull_request_target for backport action (#4668) @skrech * Rename additional SUMA filepaths (#4644) @antgamdia * Rename additional SUMA references (#4643) @antgamdia * Rename remaining occurrences to Multi-Linux Manager (#4564) @antgamdia * Fixes on test suite when targeting a remote instance (#4537) @vicenteqa * Update storybook (#4239) @antgamdia * Mark cluster as stale - frontend part (#4554) @arbulu89 * E2E tests for SAP systems and databases stale feature (#4529) @arbulu89 * Fix flaky test for checks execution & increase timeout for restored links availability in UI (#4533) @vicenteqa * Fix Activity Log date filter pagination flake (#4531) @vicenteqa * Fix package lock (#4514) @balanza, Emanuele De Cupis * Trigger release 3.1.5 (#4510) @balanza, Emanuele De Cupis * Regenerate package lock (#4509) @balanza, Emanuele De Cupis * Create SIDs list properly using filtered array IDs (#4508) @balanza, @arbulu89, Emanuele De Cupis * Update /assets npm lockfile to remediate transitive vulnerabilities (#4507) @balanza, Emanuele De Cupis, @vicenteqa * Bump `fast-uri` to 3.1.3 (#4487) @balanza, Emanuele De Cupis * Bump redux-saga from 1.4.2 to 1.5.0 in /assets (#4488) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Relax gcp image metadata requirement (#4489) @balanza, Emanuele De Cupis, @nelsonkopliku * Make only SAPSYSTEM and SAPLOCALHOST properties mandatory (#4490) @balanza, @arbulu89, Emanuele De Cupis * Bump brace-expansion to 2.1.2 and 1.1.16 (#4492) @balanza, Emanuele De Cupis * Handle exclude predicate (#4439) @balanza, @claude, Emanuele De Cupis * fix: Firefox datetime-local calendar picker not applying date filter (#4445) @balanza, Emanuele De Cupis * Bump `fast-uri` to 3.1.3 (#4475) @balanza, Emanuele De Cupis * Bump brace-expansion to 2.1.2 and 1.1.16 (#4476) @balanza, Emanuele De Cupis * Refine agent status pill (#4468) @arbulu89 * Fix flaky E2E test: TOTP login cases (#4454) @vicenteqa * Relax server version validation to allow build metadata (#4453) @vicenteqa * Replace missing health by status in instances (#4447) @arbulu89 * Fix flaky DatabaseDeregistration tenant-removed test (#4444) @balanza, Emanuele De Cupis * Fix E2E flaky test: Stabilize SAP system details link checks (#4440) @vicenteqa * Fix E2E flaky test: should fail if required fields are missing (#4438) @vicenteqa * Table style row with content (#4428) @arbulu89 * Fix loading checks execution detail when catalog is still loading (#4377) @balanza, Emanuele De Cupis, @nelsonkopliku * Enforce using erlang26 on SLES15 (#4411) @balanza, Emanuele De Cupis * Health summary - Application instances health (#4382) @balanza, @arbulu89, Emanuele De Cupis * Fix version 3.1.0 changelog typos (#4415) @balanza, @arbulu89, Emanuele De Cupis * Remove repo template to use project-wide template instead. (#4400) @eromanova97 * Enforce using erlang26 on SLES15 (#4391) @balanza, Emanuele De Cupis * Update analytics docs link profile form (#4376) @balanza, @arbulu89, Emanuele De Cupis * Flip activity log `from_date` and `to_date` logic (#4378) @balanza, @arbulu89, Emanuele De Cupis * Fix cluster registered broadcast (#4379) @balanza, @arbulu89, Emanuele De Cupis * Updated License in spec file (#4380) @balanza, Emanuele De Cupis, @skrech * Export version in rpm packages to use same value during compilation (#4381) @balanza, @arbulu89, Emanuele De Cupis * Normalize query string to list (#4383) @balanza, @arbulu89, Emanuele De Cupis * Revert "PR 1" (#4367) @balanza, Emanuele De Cupis * PR 1 (#4366) @balanza, Emanuele De Cupis * Fix flaky tests bundled artifacts (#4356) @vicenteqa * Bundle flaky test evidence artifacts (#4347) @vicenteqa * Restore cluster health after checks customization suite (#4351) @arbulu89 * Fix flaky test on clusters overview suite (#4345) @vicenteqa * E2E Test: validate component versions with semver (#4340) @vicenteqa * Fix version 3.1.0 changelog typos (#4325) @arbulu89 ### Features * Improve assistant error messages and handle expired conversations (#4907) @nelsonkopliku * Presence based AI Agent clean up (#4912) @nelsonkopliku * Send installationMethod to posthog (#4915) @arbulu89 * Handle an unavailable sagents registry as a failed run (#4717) @nelsonkopliku * Capture EULA modal actions for analytics (#4848) @arbulu89 * Bump build to otp27 elixir119 (#4745) @nelsonkopliku * Enable updating default Admin user analytics acceptance and timezone (#4832) @arbulu89 * Add persistent filters to checks catalog view (#4811) @arbulu89 * Add persistent filters to activity log view (#4812) @arbulu89 * Add persistent filters in patch list and upgradable packages views (#4813) @arbulu89 * Add persistent filters in databases, SAP systems and home overviews (#4808) @arbulu89 * Add persistent filters to clusters and checks execution results views (#4806) @arbulu89 * Implement persistent filters usage in frontend (#4775) @arbulu89 * Adapt web to Pacemaker 3.0.2 (#4474) @antgamdia * Add yaml to devDependencies (#4776) @nelsonkopliku * Test email alerting settings configuration with a test email (#4758) @arbulu89 * Use transparent type for hosts list cleanup button (#4755) @arbulu89 * Add retry last prompt capability (#4688) @nelsonkopliku * Copy Liz reply (#4667) @nelsonkopliku * Make tables scrollable in Liz (#4669) @nelsonkopliku * Liz dynamic sizing (#4665) @nelsonkopliku * Stop a running answer from the composer (#4651) @nelsonkopliku * Abandon the server-side thread when a new chat starts (#4650) @nelsonkopliku * Handle cancellation and thread abandonment in channel (#4649) @nelsonkopliku * AI cancel run core (#4648) @nelsonkopliku * Rename s/googleai/google (#4599) @gagandeepb * See all available and usable models for a given provider (#4598) @gagandeepb * Modified health and status changed events in activity log (#4653) @skrech * Adjust z-index for AI Assistant vs profile action menu (#4646) @nelsonkopliku * Alert heartbeat failed event with an email (#4569) @arbulu89 * Show stale healths in dashboard (#4561) @arbulu89 * Detect stale data for Hosts (#4498) @skrech * Improve AI Assistant rendering (#4582) @nelsonkopliku * Disable `New Chat` during a run (#4581) @nelsonkopliku * Improve websocket ai agent (#4570) @nelsonkopliku * Improve ai assistant tests (#4560) @nelsonkopliku * React on AI model changes (#4536) @nelsonkopliku * React on AI configuration creation and clean up (#4556) @nelsonkopliku * Cluster stale e2e (#4555) @arbulu89 * Change stale and in sync events severity to debug (#4559) @arbulu89 * Mark cluster as stale - backend part (#4553) @arbulu89 * Add debug severity filter to related events link (#4558) @arbulu89 * Broadcast AI configuration creation and clean up (#4535) @nelsonkopliku, @Copilot * Disable AI chatbox launcher when AI is not configured (#4534) @nelsonkopliku, @Copilot * Handle deregistration process manager old state enriching application stale commands (#4530) @arbulu89 * Display stale SAP system and database in frontend (#4500) @arbulu89 * Improve icon centering (#4524) @nelsonkopliku * Update redux with sap system database stale events (#4499) @arbulu89 * Mark SAP system as stale (#4496) @arbulu89 * Gray out SR data header in database details view (#4471) @arbulu89 * Mark database as stale (#4470) @arbulu89 * Augmented HealthIcon with stale indications (#4472) @skrech * Remove absent value usage from HealthIcon (#4473) @arbulu89 * Improve stale icon positioning in instance status icon (#4469) @arbulu89 * Use stale value instance status (#4448) @arbulu89 * Update instances stale state redux (#4446) @arbulu89 * Add e2e tests for AI settings clean up (#4452) @nelsonkopliku, @Copilot * Clear AI settings UI (#4451) @nelsonkopliku * Log AI settings clearup into activity log (#4449) @nelsonkopliku, @Copilot * Add clear AI configuration endpoint (#4443) @nelsonkopliku, @Copilot * Add clear AI settings capability (#4442) @nelsonkopliku * Add stale information to instance status icon (#4441) @arbulu89 * Health Details for Host Aggregate (#4450) @skrech * Stale database instances when host heartbeat fails (#4437) @arbulu89 * Stale application instances when host heartbeat fails (#4399) @arbulu89 * Remove Prompt Suggestions (#4434) @nelsonkopliku, @Copilot * Open new tab on AI Assistant `learn more` link (#4433) @nelsonkopliku * Log AI settings changes (#4426) @nelsonkopliku * Update SAP instance status frontend design (#4394) @arbulu89 * Handle token refresh in AI conversation (#4390) @nelsonkopliku * Ai access token management (#4389) @nelsonkopliku * AI socket: thread access_token + request_origin into tool_context (#4375) @nelsonkopliku * Add remote OpenAPI tool source (wanda) (#4374) @nelsonkopliku, @Copilot * Extract openapi tool builder (#4373) @nelsonkopliku, @Copilot * HTTP client refactor: consolidate into Trento.Support (#4372) @nelsonkopliku * AI Agent tools (#4330) @nelsonkopliku, @Copilot * AI agent (#4320) @nelsonkopliku, @Copilot * Consider SBD health in aggregated cluster health (#4362) @skrech * Replace SAP and DB instances health by status (#4365) @arbulu89 * Update analytics docs link profile form (#4371) @arbulu89 * Home dashboard cluster not available icon (#4369) @arbulu89 * Add database details sap system details view (#4355) @arbulu89 * Split cluster discovered health events (#4352) @arbulu89 * Upgrade elixir/OTP stack to 1.19.5/27.3.4.11 (#4342) @nelsonkopliku, @Copilot * Enable AI features (#4323) @nelsonkopliku * [TRNT-4419] Update installation process for demo environment (#4328) @antgamdia * Add health icon in details views (#4339) @arbulu89 * Health summary - Application instances health (#4324) @arbulu89 ### Bug Fixes * Work around the OTP 27.1.3 key usage check in HttpClient (#4926) @nelsonkopliku * Fix leaving ghost esbuild process on Trento startup (#4924) @skrech * Create SIDs list properly using filtered array IDs (#4497) @arbulu89 * Make only SAPSYSTEM and SAPLOCALHOST properties mandatory (#4409) @arbulu89 * Relax gcp image metadata requirement (#4429) @nelsonkopliku * Fix loading checks execution detail when catalog is still loading (#4363) @nelsonkopliku * Flip activity log `from_date` and `to_date` logic (#4346) @arbulu89 * Normalize query string to list (#4299) @arbulu89 * Fix cluster registered broadcast (#4343) @arbulu89 ### Maintenance * Relicense under GPL-3.0-or-later (#4920) @nelsonkopliku * Rename ability to checks_customization (#4914) @antgamdia * Rename old SUMA instances in backend (8) (#4837) @antgamdia * Rename old SUMA instances in backend (7) (#4836) @antgamdia * Rename old SUMA instances in backend (6) (#4835) @antgamdia * Rename old SUMA instances in backend (5) (#4834) @antgamdia * Increase PR number limit for npm ecosystem for dependabot (#4886) @arbulu89 * Rename old SUMA instances in backend (4) (#4833) @antgamdia * Rename old SUMA instances in backend (3) (#4830) @antgamdia * Rename old SUMA instances in backend (2) (#4828) @antgamdia * Rename old SUMA instances in backend (1) (#4827) @antgamdia, @nelsonkopliku * Use shared OTP toolchain matrix (#4850) @nelsonkopliku * Update saml certificates (#4797) @nelsonkopliku * Drop the stale tailwindcss yaml override (#4796) @nelsonkopliku * pin packageManager to npm@10.8.2 (#4794) @nelsonkopliku * Convert e2e lockfile to version 3 (#4795) @nelsonkopliku * Use automerge reusable workflow (#4779) @antgamdia * Revert backport workflow back to normal (#4752) @skrech * Remove 'env: :prod' from top level eventstore dep (#4711) @skrech * Enable backport action (#4666) @skrech * Ensure AI configuration changes in relevant test (#4664) @nelsonkopliku * Use uuid instead of crypto.randomUUID (#4655) @nelsonkopliku * Improve ai e2e tests (#4654) @nelsonkopliku * Use "trento-checks" img (#4583) @antgamdia * Fix flaky test in home deregistration suite (#4602) @arbulu89 * Fix Liz z-index (#4594) @nelsonkopliku * Add default version for dependabot (#4574) @antgamdia * Remove unnecessary strong consistency dispatch (#4573) @arbulu89 * Remove GCP scenario from demo (#4557) @arbulu89 * Remove GCP scenario from demo (#4436) @nelsonkopliku * Let :public_key.cacerts_get() raise (#4427) @nelsonkopliku * Enable MCP server in demo (#4338) @antgamdia * [TRNT-4419] Fix cert manager install command in demo (#4353) @antgamdia * [TRNT-4419] Update installation process for demo environment (#4328) @antgamdia * Updated License in spec file (#4341) @skrech * Migrate Cypress.env to Cypress.expose for public config (#4319) @vicenteqa * Export version in rpm packages to use same value during compilation (#4326) @arbulu89 ### Dependencies <details> <summary>208 changes</summary> * Bump eventstore from 1.4.8 to 1.4.10 (#4927) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress-io/github-action from 7.4.4 to 7.4.6 (#4933) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group across 1 directory with 4 updates (#4934) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @storybook/react from 10.6.0 to 10.6.1 in /assets (#4937) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump llm_db from 2026.9.7 to 2026.9.8 (#4935) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 18.9.5 to 18.10.2 (#4936) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromatic from 18.9.5 to 18.10.2 in /assets (#4938) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @storybook/addon-docs from 10.6.0 to 10.6.1 in /assets (#4939) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump tzdata from 1.2.1 to 1.2.2 (#4931) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump globals from 17.12.0 to 17.13.0 in /test/e2e (#4930) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress from 16.1.0 to 16.1.1 in /test/e2e in the cypress group (#4928) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump eslint from 10.11.0 to 10.12.0 in /test/e2e in the eslint group (#4929) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump llm_db from 2026.9.5 to 2026.9.7 (#4916) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump vite from 8.3.0 to 8.3.1 in /assets (#4919) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump posthog-js from 1.434.12 to 1.434.14 in /assets (#4918) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the assistant-ui group in /assets with 4 updates (#4917) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump posthog-js from 1.434.11 to 1.434.12 in /assets (#4911) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group in /assets with 2 updates (#4910) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump posthog-js from 1.434.10 to 1.434.11 in /assets (#4909) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group in /assets with 2 updates (#4908) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump sagents from 0.7.0 to 0.16.1 (#4631) [@dependabot[bot]](https://github.com/apps/dependabot), @nelsonkopliku * Bump contracts version (#4906) @arbulu89 * Bump uuid from 11.1.1 to 14.0.2 in /assets (#4878) [@dependabot[bot]](https://github.com/apps/dependabot), @arbulu89 * Bump copy-to-clipboard from 3.3.3 to 4.0.2 in /assets (#4879) [@dependabot[bot]](https://github.com/apps/dependabot), @arbulu89 * Bump posthog-js from 1.434.8 to 1.434.10 in /assets (#4905) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump llm_db from 2026.9.4 to 2026.9.5 (#4902) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromatic from 18.9.4 to 18.9.5 in /assets (#4901) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump prettier from 3.9.8 to 3.9.9 in /assets (#4903) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump prettier from 3.9.8 to 3.9.9 in /test/e2e (#4900) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump posthog-js from 1.434.7 to 1.434.8 in /assets (#4899) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @storybook/addon-docs from 10.3.4 to 10.6.0 in /assets (#4898) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump date-fns from 4.1.0 to 4.4.0 in /assets (#4897) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump tzdata from 1.0.49 to 1.0.51 in /assets (#4896) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump papaparse from 5.5.3 to 5.7.0 in /assets (#4893) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump redux-saga from 1.5.0 to 1.5.1 in /assets (#4894) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @date-fns/tz from 1.4.1 to 1.5.0 in /assets (#4895) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 18.9.4 to 18.9.5 (#4892) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump react-hot-toast from 2.6.0 to 2.6.1 in /assets (#4891) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump autoprefixer from 10.5.0 to 10.6.1 in /assets (#4888) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump posthog-js from 1.379.2 to 1.434.7 in /assets (#4890) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump source-map-js from 1.2.1 to 1.2.2 in /assets (#4881) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump source-map-js from 1.2.1 to 1.2.2 in /test/e2e (#4882) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump jest from 30.3.0 to 30.5.2 in /assets (#4880) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump react-error-boundary from 6.1.1 to 6.1.6 in /assets (#4877) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromatic from 16.0.0 to 18.9.4 in /assets (#4876) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 5 updates (#4874) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump prettier from 3.9.6 to 3.9.8 in /assets (#4875) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @testing-library/dom from 10.4.1 to 10.4.2 in /assets (#4872) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump react from 19.2.4 to 19.3.0 in /assets (#4870) [@dependabot[bot]](https://github.com/apps/dependabot), @arbulu89 * Bump vite from 8.2.1 to 8.3.0 in /assets (#4871) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump jest-environment-jsdom from 30.3.0 to 30.5.2 in /assets (#4869) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump flop from 0.28.0 to 0.29.0 (#4800) [@dependabot[bot]](https://github.com/apps/dependabot), @arbulu89 * Group babel dependencies for dependabot updates (#4867) @arbulu89 * Bump globals from 17.11.0 to 17.12.0 in /assets (#4866) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group in /assets with 3 updates (#4862) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the assistant-ui group in /assets with 4 updates (#4861) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @assistant-ui/react from 0.15.13 to 0.15.20 in /assets (#4841) [@dependabot[bot]](https://github.com/apps/dependabot), @arbulu89 * Bump isbang/compose-action from 3.1.0 to 3.2.0 (#4856) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress-io/github-action from 7.4.3 to 7.4.4 (#4854) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump llm_db from 2026.9.3 to 2026.9.4 (#4860) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump eslint from 10.10.0 to 10.11.0 in /test/e2e in the eslint group (#4859) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 18.8.1 to 18.9.4 (#4855) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump llm_db from 2026.9.2 to 2026.9.3 (#4858) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#4857) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump prettier from 3.9.6 to 3.9.8 in /test/e2e (#4852) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress from 16.0.0 to 16.1.0 in /test/e2e in the cypress group (#4851) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump brace-expansion in /assets (#4847) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump tzdata from 1.1.5 to 1.2.1 (#4838) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump undici from 6.28.0 to 6.29.0 in /test/e2e (#4843) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dompurify from 3.4.13 to 3.4.16 in /assets (#4846) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump axios from 1.19.0 to 1.20.0 in /assets (#4844) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.6.0 to 1.7.0 (#4819) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump brace-expansion from 5.0.9 to 5.0.12 in /test/e2e (#4845) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump mox from 1.3.1 to 1.3.2 (#4840) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group in /assets with 2 updates (#4839) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump llm_db from 2026.8.3 to 2026.9.2 (#4802) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dialyxir from 1.4.7 to 1.4.8 (#4809) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump postcss from 8.5.26 to 8.5.28 in /assets (#4823) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 18.7.2 to 18.8.1 (#4820) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @ag-ui/core from 0.0.57 to 0.0.59 in /assets (#4817) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump eslint-plugin-cypress from 7.0.1 to 7.0.2 in /test/e2e in the eslint group (#4818) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group across 1 directory with 3 updates (#4595) [@dependabot[bot]](https://github.com/apps/dependabot), @nelsonkopliku * Bump the eslint group in /assets with 2 updates (#4810) [@dependabot[bot]](https://github.com/apps/dependabot) * bump tzdata to 1.1.5 (#4799) @nelsonkopliku * Bump @storybook/react-vite from 10.5.7 to 10.6.0 in /assets (#4804) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 18.7.1 to 18.7.2 (#4801) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group across 1 directory with 4 updates (#4798) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress from 15.21.1 to 16.0.0 in /test/e2e in the cypress group across 1 directory (#4780) [@dependabot[bot]](https://github.com/apps/dependabot), @nelsonkopliku * Bump @testing-library/react from 16.3.2 to 16.3.3 in /assets (#4786) [@dependabot[bot]](https://github.com/apps/dependabot) * Drop the stale tailwindcss yaml override (#4796) @nelsonkopliku * pin packageManager to npm@10.8.2 (#4794) @nelsonkopliku * Convert e2e lockfile to version 3 (#4795) @nelsonkopliku * Bump esbuild from 0.28.1 to 0.28.2 in /assets (#4788) [@dependabot[bot]](https://github.com/apps/dependabot), @nelsonkopliku * Bump mox from 1.2.0 to 1.3.1 (#4792) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump ex_doc from 0.40.3 to 0.40.4 (#4785) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dflook/terraform-output from 3.0.0 to 3.0.1 (#4787) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 4 updates (#4783) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump globals from 17.11.0 to 17.12.0 in /test/e2e (#4781) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump open_api_spex from 3.22.3 to 3.22.4 (#4782) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump phoenix_live_view from 1.1.31 to 1.2.9 (#4677) [@dependabot[bot]](https://github.com/apps/dependabot), @gagandeepb * Bump globals from 17.9.0 to 17.11.0 in /test/e2e (#4672) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 (#4773) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @testing-library/jest-dom from 6.9.1 to 7.0.1 in /assets (#4678) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @cypress/webpack-preprocessor from 7.1.2 to 8.0.0 in /test/e2e in the cypress group across 1 directory (#4769) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump flop from 0.26.6 to 0.28.0 (#4762) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#4739) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group across 1 directory with 4 updates (#4772) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 18.6.0 to 18.7.1 (#4770) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump postcss-selector-parser from 6.1.2 to 6.1.4 in /assets (#4774) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @humanfs/node from 0.16.7 to 0.16.8 in /assets (#4724) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump fast-uri from 3.1.5 to 3.1.7 in /test/e2e (#4722) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump joken from 2.6.2 to 2.7.0 (#4771) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group across 1 directory with 3 updates (#4673) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump js-yaml in /assets (#4765) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 18.1.0 to 18.6.0 (#4760) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump telemetry_metrics from 1.1.0 to 1.2.0 (#4761) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress from 15.21.0 to 15.21.1 in /test/e2e in the cypress group (#4759) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump fflate from 0.4.8 to 0.4.9 in /assets (#4743) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump llm_db from 2026.8.2 to 2026.8.3 (#4742) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the cypress group across 1 directory with 2 updates (#4671) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @faker-js/faker from 10.4.0 to 10.6.0 in /assets (#4741) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress-io/github-action from 7.4.1 to 7.4.3 (#4738) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump browserslist from 4.28.2 to 4.28.8 in /test/e2e (#4709) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump llm_db from 2026.7.5 to 2026.8.2 (#4674) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @headlessui/react from 2.2.9 to 2.2.10 in /assets (#4661) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dorny/paths-filter from 4.0.2 to 4.0.3 (#4662) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress from 15.19.0 to 15.20.0 in /test/e2e in the cypress group (#4660) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump flop from 0.26.5 to 0.26.6 (#4659) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump isbang/compose-action from 3.0.0 to 3.1.0 (#4663) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump globals from 17.8.0 to 17.9.0 in /test/e2e (#4637) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/setup-node from 6.4.0 to 7.0.0 (#4640) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump docker/login-action from 4.4.0 to 4.6.0 (#4641) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump npm from 12.0.1 to 12.0.2 in /test/e2e (#4627) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dflook/terraform-destroy-workspace from 2.2.3 to 3.0.0 (#4632) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dflook/terraform-apply from 2.2.3 to 3.0.0 (#4634) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump coverallsapp/github-action from 2.3.6 to 2.3.8 (#4633) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dflook/terraform-new-workspace from 2.2.3 to 3.0.0 (#4630) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 7.0.0 to 7.0.1 (#4628) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump globals from 17.7.0 to 17.8.0 in /test/e2e (#4623) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump phoenix_live_reload from 1.6.2 to 1.7.0 (#4619) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump credo from 1.7.18 to 1.7.19 (#4610) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump npm from 11.18.0 to 12.0.1 in /test/e2e (#4543) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump systeminformation from 5.31.6 to 5.33.1 in /test/e2e (#4511) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress-io/github-action from 7.4.0 to 7.4.1 (#4546) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress from 15.18.0 to 15.19.0 in /test/e2e in the cypress group across 1 directory (#4539) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump prettier from 3.9.4 to 3.9.6 in /test/e2e (#4542) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 17.7.2 to 18.1.0 (#4545) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dflook/terraform-output from 2.2.3 to 3.0.0 (#4566) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump brace-expansion from 2.1.2 to 2.1.4 in /test/e2e (#4565) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump slackapi/slack-github-action from 3.0.3 to 4.0.0 (#4568) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump undici from 6.25.0 to 6.28.0 in /test/e2e (#4576) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump js-yaml from 4.3.0 to 4.3.1 in /test/e2e (#4593) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the assistant-ui and AG-UI packages (#4596) @nelsonkopliku * Bump langchain ref (#4585) @nelsonkopliku * Bump postcss from 8.5.12 to 8.5.23 in /test/e2e (#4551) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump js-yaml from 4.2.0 to 4.3.0 in /test/e2e (#4527) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/cache from 5.0.5 to 6.1.0 (#4483) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 (#4520) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump docker/login-action from 4.2.0 to 4.4.0 (#4519) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#4521) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group across 1 directory with 2 updates (#4501) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @storybook/react-webpack5 from 10.3.6 to 10.4.6 in /assets (#4480) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress from 15.17.0 to 15.18.0 in /test/e2e in the cypress group across 1 directory (#4477) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump prettier from 3.8.3 to 3.8.5 in /assets (#4482) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump prettier from 3.8.4 to 3.9.4 in /test/e2e (#4481) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 17.5.0 to 17.7.2 (#4484) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump globals from 17.6.0 to 17.7.0 in /test/e2e (#4479) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress-split from 1.24.31 to 1.25.0 in /test/e2e in the cypress group across 1 directory (#4455) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump redux-saga from 1.4.2 to 1.5.0 in /assets (#4456) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump eslint from 10.4.1 to 10.5.0 in /test/e2e in the eslint group (#4457) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump prettier from 3.8.3 to 3.8.4 in /test/e2e (#4458) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump semver from 7.8.4 to 7.8.5 in /test/e2e (#4459) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.3 to 7.0.0 (#4461) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 17.4.1 to 17.5.0 (#4462) [@dependabot[bot]](https://github.com/apps/dependabot) * Update /assets npm lockfile to remediate transitive vulnerabilities (#4435) @vicenteqa * Bump chromaui/action from 17.3.0 to 17.4.1 (#4432) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.2 to 6.0.3 (#4431) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump docker/login-action from 4.1.0 to 4.2.0 (#4430) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @ag-ui/client from 0.0.52 to 0.0.57 in /assets (#4419) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/setup-node from 6.3.0 to 6.4.0 (#4317) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the cypress group across 1 directory with 2 updates (#4418) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump semver from 7.8.1 to 7.8.4 in /test/e2e (#4420) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @babel/plugin-transform-modules-commonjs from 7.28.6 to 7.29.7 in /assets (#4416) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump tar and npm in /test/e2e (#4406) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump isbang/compose-action from 2.6.0 to 3.0.0 (#4417) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 17.2.0 to 17.3.0 (#4422) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.5.1 to 1.6.0 (#4423) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress-io/github-action from 7.1.10 to 7.4.0 (#4424) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump esbuild and storybook in /assets (#4410) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump form-data from 4.0.5 to 4.0.6 in /assets (#4408) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump @babel/core from 7.29.0 to 7.29.6 in /assets (#4407) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump js-yaml from 4.1.1 to 4.2.0 in /test/e2e (#4405) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump form-data from 4.0.5 to 4.0.6 in /test/e2e (#4402) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump react-router from 7.15.0 to 7.15.1 in /assets (#4398) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group across 1 directory with 2 updates (#4388) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump esbuild and tsx in /test/e2e (#4386) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump chromaui/action from 16.6.3 to 17.2.0 (#4361) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#4360) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump date-fns from 4.1.0 to 4.4.0 in /test/e2e (#4359) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 (#4349) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump tmp from 0.2.4 to 0.2.7 in /test/e2e (#4344) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump posthog-js from 1.369.3 to 1.379.2 in /assets (#4337) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump dompurify from 3.4.0 to 3.4.11 in /assets (#4403) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump tzdata from 1.0.48 to 1.0.49 in /assets (#4332) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump cypress from 15.13.1 to 15.15.0 in /test/e2e in the cypress group across 1 directory (#4312) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump npm from 11.13.0 to 11.14.1 in /test/e2e (#4333) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the eslint group across 1 directory with 2 updates (#4348) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump react-router from 7.13.2 to 7.15.0 in /assets (#4354) [@dependabot[bot]](https://github.com/apps/dependabot) </details> **Full Changelog**: https://github.com/trento-project/web/compare/3.1.0...3.2.0 Changes in supportutils-plugin-trento: - Release 3.2.0 ## What's Changed * Relicense under GPL-3.0-or-later (#40) @nelsonkopliku * Update license in spec file (#28) @skrech ### Maintenance * Use automerge reusable workflow (#36) @antgamdia * Enable backport action (#33) @skrech ### Dependencies <details> <summary>8 changes</summary> * Bump the common-workflows group with 4 updates (#39) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.6.0 to 1.7.0 (#38) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 3 updates (#37) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 (#35) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 2 updates (#34) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 5.0.1 to 7.0.1 (#32) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.3.4 to 1.6.0 (#30) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group across 1 directory with 2 updates (#26) [@dependabot[bot]](https://github.com/apps/dependabot) </details> **Full Changelog**: https://github.com/trento-project/support/compare/3.1.0...3.2.0 Changes in trento-agent: - Release 3.2.0 ## What's Changed * Bump contracts ref (#716) @nelsonkopliku * Update go version to 1.26 (#649) @antgamdia * Bump github.com/prometheus-community/pro-bing from 0.8.0 to 0.9.0 (#611) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/sync from 0.20.0 to 0.21.0 (#612) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/mod from 0.36.0 to 0.37.0 (#613) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Bump gopkg.in/ini.v1 from 1.67.2 to 1.67.3 (#614) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group across 1 directory with 2 updates (#615) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 (#616) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Bump isbang/compose-action from 2.5.0 to 2.6.0 (#617) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Add status gatherer (#578) @balanza, Emanuele De Cupis, [@github-actions[bot]](https://github.com/apps/github-actions) * Bump golang.org/x/net to v0.55.0 (#593) @balanza, Emanuele De Cupis * Bump contracts ref (#595) @balanza, Emanuele De Cupis, @nelsonkopliku * Bump github.com/tidwall/gjson from 1.18.0 to 1.19.0 (#596) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/mod from 0.34.0 to 0.36.0 (#597) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Bump gopkg.in/ini.v1 from 1.67.1 to 1.67.2 (#598) @balanza, Emanuele De Cupis, [@dependabot[bot]](https://github.com/apps/dependabot) * Remove repo template to use project-wide template instead. (#599) @eromanova97 * Bump golang.org/x/net to v0.55.0 (#592) @balanza, Emanuele De Cupis ### Features * Improve support for ppc64le (#653) @antgamdia * Adapt agent to Pacemaker 3.0.2 (#610) @antgamdia ### Maintenance * Relicense under GPL-3.0-or-later (#712) @nelsonkopliku * Use automerge reusable workflow (#705) @antgamdia * Revert backport workflow back to normal (#699) @skrech * Temporary switch backport to pull_request_target (#667) @skrech * Enable backport action (#658) @skrech * Use .tool-versions in CI (#637) @antgamdia * Publish v-prefix tag when releasing (#638) @antgamdia * Update license in spec (#587) @skrech ### Dependencies <details> <summary>36 changes</summary> * Bump github.com/rabbitmq/amqp091-go from 1.13.0 to 1.14.0 (#715) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/sync from 0.23.0 to 0.24.0 (#713) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 4 updates (#711) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump isbang/compose-action from 3.1.0 to 3.2.0 (#710) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.6.0 to 1.7.0 (#709) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 3 updates (#706) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/sync from 0.22.0 to 0.23.0 (#704) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 (#703) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/mod from 0.40.0 to 0.41.0 (#666) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group with 2 updates (#660) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#662) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#656) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump isbang/compose-action from 3.0.0 to 3.1.0 (#655) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#654) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 7.0.0 to 7.0.1 (#652) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/wagslane/go-rabbitmq from 0.15.0 to 0.16.1 (#647) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/setup-go from 6.5.0 to 7.0.0 (#648) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/cache from 5.0.5 to 6.1.0 (#609) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/setup-go from 6.4.0 to 6.5.0 (#608) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.3 to 7.0.0 (#607) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/prometheus-community/pro-bing from 0.8.0 to 0.9.0 (#606) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump isbang/compose-action from 2.6.0 to 3.0.0 (#605) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/sync from 0.20.0 to 0.21.0 (#604) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/mod from 0.36.0 to 0.37.0 (#603) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump endorama/asdf-parse-tool-versions from 1.5.1 to 1.6.0 (#602) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump gopkg.in/ini.v1 from 1.67.2 to 1.67.3 (#601) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/checkout from 6.0.2 to 6.0.3 (#600) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#591) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump the common-workflows group across 1 directory with 2 updates (#583) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 (#582) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump isbang/compose-action from 2.5.0 to 2.6.0 (#579) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump actions/cache from 5.0.4 to 5.0.5 (#576) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump gopkg.in/ini.v1 from 1.67.1 to 1.67.2 (#586) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump golang.org/x/mod from 0.34.0 to 0.36.0 (#588) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump github.com/tidwall/gjson from 1.18.0 to 1.19.0 (#589) [@dependabot[bot]](https://github.com/apps/dependabot) * Bump contracts ref (#590) @nelsonkopliku </details> **Full Changelog**: https://github.com/trento-project/agent/compare/3.1.0...3.2.0 ansible-trento-1.1.0-160100.1.1.noarch.rpm ansible-trento-1.1.0-160100.1.1.src.rpm trento-checks-1.4.0-160100.1.1.noarch.rpm trento-checks-1.4.0-160100.1.1.src.rpm trento-wanda-2.2.0-160100.1.1.aarch64.rpm trento-wanda-2.2.0-160100.1.1.src.rpm trento-web-3.2.0-160100.1.1.aarch64.rpm trento-web-3.2.0-160100.1.1.src.rpm trento-web-debuginfo-3.2.0-160100.1.1.aarch64.rpm trento-web-debugsource-3.2.0-160100.1.1.aarch64.rpm supportutils-plugin-trento-3.2.0-160100.1.1.noarch.rpm supportutils-plugin-trento-3.2.0-160100.1.1.src.rpm mcp-server-trento-1.2.0-160100.1.1.ppc64le.rpm mcp-server-trento-1.2.0-160100.1.1.src.rpm trento-wanda-2.2.0-160100.1.1.ppc64le.rpm trento-web-3.2.0-160100.1.1.ppc64le.rpm trento-web-debuginfo-3.2.0-160100.1.1.ppc64le.rpm trento-web-debugsource-3.2.0-160100.1.1.ppc64le.rpm trento-agent-3.2.0-160100.1.1.ppc64le.rpm trento-agent-3.2.0-160100.1.1.src.rpm mcp-server-trento-1.2.0-160100.1.1.s390x.rpm trento-wanda-2.2.0-160100.1.1.s390x.rpm trento-web-3.2.0-160100.1.1.s390x.rpm trento-web-debuginfo-3.2.0-160100.1.1.s390x.rpm trento-web-debugsource-3.2.0-160100.1.1.s390x.rpm trento-agent-3.2.0-160100.1.1.s390x.rpm mcp-server-trento-1.2.0-160100.1.1.x86_64.rpm trento-wanda-2.2.0-160100.1.1.x86_64.rpm trento-web-3.2.0-160100.1.1.x86_64.rpm trento-web-debuginfo-3.2.0-160100.1.1.x86_64.rpm trento-web-debugsource-3.2.0-160100.1.1.x86_64.rpm trento-agent-3.2.0-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-26 Recommended update for az-cli-cmd, aws-cli-cmd, flake-pilot important SUSE SLFO 1.3 This update for az-cli-cmd, aws-cli-cmd, flake-pilot fixes the following issues: Changes in az-cli-cmd: - Allow to skip missing host volume sharing paths (bsc#1274855) Changes in aws-cli-cmd: - Allow to skip missing host volume sharing paths (bsc#1274855) Changes in flake-pilot: - Fix: aws and az do not work on the immutable flavor (bsc#1282900) - Update to version 3.2.10: * Make sure bubblewrap holds no host mounts - Update to version 3.2.9: * Differentiate stderr and stdout channels * Fix EOF wait in firecracker-pilot * Fix handling of resume and force_vsock options * Fix race condition * Fix firecracker exit code handling * Fix bwrap lookup in bubblewrwap-pilot * Use the which crate to lookup a binary in PATH - Update to version 3.2.8: * No color output by default flake-pilot no longer prints color by default. This change affects the messages as well as any progress information. Applied the change on the documentation side as well. (bsc#1285040) - Update to version 3.2.7: * Update user guide: Fix gcloud example - Update to version 3.2.6: * Update user guide: Refactor the section how to build your own app images * Update user guide: reference Leap16 variant of claude image in the examples * Fix package name in claude image - Update to version 3.2.5: * Update claude image: Add backports repo which provides poetry * Allow to configure tmpfs size in bwrap sandbox * Detect and report squatted private meta data dirs * Add poetry to firecracker claude image - Update to version 3.2.4: * Allow install as documented * Refactor bubblewrap overlay and write area - Do not unconditionally pull newer or prune podman-pilot no longer asks the registry for a newer image or prunes images on every launch. Both are now opt-in pilot options, %pull_newer and %prune_images. They can be set in a registration's pilot_options or given at call time, like the existing options. - Update to version 3.2.3: * Fix indentation * Do not call systemfiles script as root * Document FLAKE_LOG_STYLE environment variable in user guide - Refactor running privileged applications - Update to version 3.2.2: * Volume export/release guest address from state * Close DHCP port on the host for VMs * Close DNS port on the host for VMs * Add locking to the firecracker network state file * Load kvm module in sci if present * sci accepted commands from any vsock peer * Add kiwi to claude firecracker image * Validate given names and paths in flake-ctl * Update documentation: Clearly state isolation limits - Update to version 3.2.1: * Delete OSS scanner metadata * Refactor firecracker networking per security scan - Update to version 3.2.0: * Fix bubblewrap documentation and code comments * Drop sci injection * Drop include feature from flake-pilot. * Update troubleshooting section * Create the metadata directory in init * Get rid of some sudo restrictions * Add privileges documentation chapter * Use absolute paths for every sudo target - Update to version 3.1.79: * Use sysctl to enable IP forwarding * Export NFS volumes strictly to one app * Update firecracker appstore images: drop insecure settings with regards to sudo and ssh * Drop runas registration option - Update to version 3.1.78: * Sign up for Anthropics OSS scanner * Leap16 requires NetworkManager * Move claude firecracker image to Leap16 * Cleanup unused code - Update to version 3.1.77: * Add support for direct OCI export * Fix spec file - Update to version 3.1.76: * Switch hardcoded paths in spec to macros * Add /etc/flakes/APP.d drop-in directory * Add license statement for the logo * Add a logo to the project - Update to version 3.1.75: * Add app store URLs to user guide - Update to version 3.1.74: * Add missing %post for tmpfiles - Update to version 3.1.73: * Fix Makefile - Update to version 3.1.72: * Move system wide flake podman storage to var * Drop rootless_storage_path from config * Update state file handling - Update to version 3.1.71: * Improve write performance onoverlay * Update to latest version of pi for deepseek * Fix sudoers setup for firecracker images * Add deepseek(pi) firecracker image - Update to version 3.1.70: * Auto select outgoing interface * Check if storage path really exists * Drop the garbage collector from firecracker-pilot * Make sure firecracker-pilot gets HOME from userdb * Allow firecracker show on config without include * Fix size constraints * Add storage information to firecracker show - Update to version 3.1.69: * Fix setup of resolver link - Update to version 3.1.68: * firecracker-pilot should not delete storage * remount / to make it visible in the overlay * Leap16 uses NetworkManager * immediately write journal * Make sure overlay write mount is visible to / * fix overlay storage handling - Update to version 3.1.67: * Move to leap16 in the examples * Update claude firecracker app * Move firecracker images to ext4 * Switch firecracker storage to ext4 - Update to version 3.1.66: * Update main page: Add information on the main page to be more use case focused * Add sanity check for NFS server - Update to version 3.1.65: * Deduplicate podman code between pilot and ctl tool * Add new command flake-ctl podman reset * Move leap firecracker image to Leap 16 - Update to version 3.1.64: * Update documentation: Add url to the flake store on s3, cloudfront - Update to version 3.1.63: * Use mount call with full path * Fix overlay dir creation for bubblewrap pilot - Update to version 3.1.62: * Fix overlay-src sorting in bubblewrap-pilot * bubblewrap pilot should create user overlay * Add sanity check for firecracker iptables rules - Update to version 3.1.61: * Update appstore URL: Now serving from cloudfront (https) * Make sure to set a User-Agent - Update to version 3.1.60: * Update appstore URL: Now serving from an S3 bucket and not from git LFS * Remove LFS - Update to version 3.1.59: * Check if the pilot template exists * Refactor registration file reading/writing * Add new pilot named bubblewrap-pilot * Refactor podman appstore: Add build category and a simple push script to automate building and push to an AWS ECR - Update to version 3.1.58: * Add flake-ctl firecracker/podman remove checks * Add tap device sanity check - Update to version 3.1.57: * Update appstore: Add openssl-devel to claude system * Add network and volume info to firecracker show * Adapt boxbuild options to kiwi v11 * pull newer kiwi container * Update appstore: Added some useful software to the claude image - Update to version 3.1.56: * Update architecture diagram * Update appstore: Install latest version of claude - Update to version 3.1.55: * Add troubleshooting section regarding users * Add troubleshooting section for firewalld - Update to version 3.1.54: * Dynamically select private network - Update to version 3.1.53: * Fix overlay root (/) permission settings * Drop use of pivot_root * Fix default firecracker setup at registration time * Update appstore: Add an ai user to the claude image * Add handler for terminal resize over vsock * Update completion - Update to version 3.1.52: * Fix flake-pilot-firecracker-guestvm-tools spec * Add doc chapter about firecracker volumes * Implement firecracker NFS volume add/remove * Implement firecracker NFS volume handling * Add support for NFS mounts in sci - Update to version 3.1.51: * Fix UDS socket setup * Fix firecracker network setup * Update appstore: Make sure nfs-client exists in the firecracker images - Update to version 3.1.50: * Fix evaluation of %ignore_missing_volume_path * Add new pilot_options section to the flake config (bsc#1274855) - Update to version 3.1.49: * Fixed Makefile: ghpages target missing the setup - Update to version 3.1.48: * Fix bumpversion config * Refactor documentation: Create a user guide rather than a README * Fix CWE-59 / Privilege Escalation issues (bsc#1277029) - Update to version 3.1.47: * Fix --no-net firecracker registrations * Do not store network.yaml meta file in flakes dir * Update README: Rewrite networking chapter for firecracker * Delete unused documentation diagrams * Add flake-ctl firecracker network remove * Add flake-ctl firecracker network add * Add flake-ctl firecracker network init * Update README: Fix information about user vs. system wide flakes * Add support for Per-instance boot_args * Fix tap device setup - Update to version 3.1.46: * Drop --user flag az-cli-cmd-1.37.1-160100.4.1.noarch.rpm az-cli-cmd-1.37.1-160100.4.1.src.rpm aws-cli-cmd-1.36.2-160100.4.1.noarch.rpm aws-cli-cmd-1.36.2-160100.4.1.src.rpm flake-pilot-3.2.10-160100.1.1.aarch64.rpm flake-pilot-3.2.10-160100.1.1.src.rpm flake-pilot-bubblewrap-3.2.10-160100.1.1.aarch64.rpm flake-pilot-firecracker-3.2.10-160100.1.1.aarch64.rpm flake-pilot-firecracker-dracut-netstart-3.2.10-160100.1.1.noarch.rpm flake-pilot-firecracker-guestvm-tools-3.2.10-160100.1.1.aarch64.rpm flake-pilot-firecracker-guestvm-tools-debuginfo-3.2.10-160100.1.1.aarch64.rpm flake-pilot-podman-3.2.10-160100.1.1.aarch64.rpm flake-pilot-3.2.10-160100.1.1.ppc64le.rpm flake-pilot-bubblewrap-3.2.10-160100.1.1.ppc64le.rpm flake-pilot-firecracker-3.2.10-160100.1.1.ppc64le.rpm flake-pilot-firecracker-guestvm-tools-3.2.10-160100.1.1.ppc64le.rpm flake-pilot-podman-3.2.10-160100.1.1.ppc64le.rpm flake-pilot-3.2.10-160100.1.1.s390x.rpm flake-pilot-bubblewrap-3.2.10-160100.1.1.s390x.rpm flake-pilot-firecracker-3.2.10-160100.1.1.s390x.rpm flake-pilot-firecracker-guestvm-tools-3.2.10-160100.1.1.s390x.rpm flake-pilot-firecracker-guestvm-tools-debuginfo-3.2.10-160100.1.1.s390x.rpm flake-pilot-podman-3.2.10-160100.1.1.s390x.rpm flake-pilot-3.2.10-160100.1.1.x86_64.rpm flake-pilot-bubblewrap-3.2.10-160100.1.1.x86_64.rpm flake-pilot-firecracker-3.2.10-160100.1.1.x86_64.rpm flake-pilot-firecracker-guestvm-tools-3.2.10-160100.1.1.x86_64.rpm flake-pilot-firecracker-guestvm-tools-debuginfo-3.2.10-160100.1.1.x86_64.rpm flake-pilot-podman-3.2.10-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-27 Recommended update for virt-bridge-setup important SUSE SLFO 1.3 This update for virt-bridge-setup fixes the following issues: Changes in virt-bridge-setup: Update to version 3.0: * Fix: virt-bridge-setup add --no-clone-mac option doesn't work (bsc#1284989) * Use GetAll to avoid multiple dbus call * Fix forward delay value (value should be 0-30) virt-bridge-setup-3.0-160100.1.1.noarch.rpm virt-bridge-setup-3.0-160100.1.1.src.rpm openSUSE-Leap-16.1-28 Security update for hawk-apiserver, hawk2 important SUSE SLFO 1.3 This update for hawk-apiserver, hawk2 fixes the following issues: Changes in hawk-apiserver: Version 0.2.4+git.1792406875.6ed758a: * Doc: update HA documentation URLs (bsc#1280368) * Dev: decouple Action and OpDefaults (code refactory) * enable custom user parameters (bsc#1274860) * cib/live/clones is handled in the hawk-apiserver instead of hawk * cib/live is handled in the hawk-apiserver instead of hawk * Add XInputsKvGroup (bsc#1267910) * Enable other Primitive-Operation attributes Changes in hawk2: Update to version 2.7.2+git.1789128469.a738abc1 (bsc#1267909): * Test: enable new attributes in test_check_cluster_configuration * Dev: update RSC_DEFAULTS and clone defaults * Test: give sle15 more time when choosing between sle15 and sle16 * Dev: bump jQuery version to 4.0.0 * Dev: bump jQuery version to 3.5.0 * Dev: bump jQuery version to 2.2.4 * Test: update the e2e test for the change allowing custom parameters * Dev: enable custom Parameters and Meta Attributes (bsc#1274860) * CI/CD: update hawk examiner entry point * Test: enable test_add_clone against hawk-apiserver verion 0.2.1 * Test: fix SyntaxWarning: invalid escape sequence '\|' * Test: make the tests compatible against hawk-apiserver ver0.2.0 Bump rails stack v8.1.3.1, net-imap v0.6.6 and other gems to fix security issues: * CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996) * CVE-2026-66066: unsafe image processing operations on untrusted uploads can allow arbitrary file reading and remote code execution (bsc#1273348) * CVE-2026-73490: loofah: improper handling of SVG attributes in the HTML5 sanitizer allows bypass of local-reference restrictions (bsc#1275179) * CVE-2026-73491: loofah: improper handling of javascript: URIs can lead to XSS (bsc#1275183) * CVE-2026-73492: loofah: improper handling of javascript: and vbscript: URIs can lead to XSS (bsc#1275188) * CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275200) * CVE-2026-71847: json: heap use-after free in JSON::ResumableParser partial_value can lead to crash on truncated duplicate-key streams) (bsc#1275213) hawk-apiserver-0.2.4+git.1792406875.6ed758a-160100.1.1.aarch64.rpm hawk-apiserver-0.2.4+git.1792406875.6ed758a-160100.1.1.src.rpm hawk2-2.7.2+git.1789128469.a738abc1-160100.1.1.aarch64.rpm hawk2-2.7.2+git.1789128469.a738abc1-160100.1.1.src.rpm hawk2-debuginfo-2.7.2+git.1789128469.a738abc1-160100.1.1.aarch64.rpm hawk2-debugsource-2.7.2+git.1789128469.a738abc1-160100.1.1.aarch64.rpm hawk-apiserver-0.2.4+git.1792406875.6ed758a-160100.1.1.ppc64le.rpm hawk2-2.7.2+git.1789128469.a738abc1-160100.1.1.ppc64le.rpm hawk2-debuginfo-2.7.2+git.1789128469.a738abc1-160100.1.1.ppc64le.rpm hawk2-debugsource-2.7.2+git.1789128469.a738abc1-160100.1.1.ppc64le.rpm hawk-apiserver-0.2.4+git.1792406875.6ed758a-160100.1.1.s390x.rpm hawk2-2.7.2+git.1789128469.a738abc1-160100.1.1.s390x.rpm hawk2-debuginfo-2.7.2+git.1789128469.a738abc1-160100.1.1.s390x.rpm hawk2-debugsource-2.7.2+git.1789128469.a738abc1-160100.1.1.s390x.rpm hawk-apiserver-0.2.4+git.1792406875.6ed758a-160100.1.1.x86_64.rpm hawk2-2.7.2+git.1789128469.a738abc1-160100.1.1.x86_64.rpm hawk2-debuginfo-2.7.2+git.1789128469.a738abc1-160100.1.1.x86_64.rpm hawk2-debugsource-2.7.2+git.1789128469.a738abc1-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-29 Recommended update for SAPHanaSR-angi moderate SUSE SLFO 1.3 This update for SAPHanaSR-angi fixes the following issues: Changes in SAPHanaSR-angi: - Update to version 1.3.5 (jsc#PED-17086): * DR passive cluster in scale-up performance-optimised setup is now in state 'supported' * Introducing a new sub-package 'SAPHanaSR-angi-testenv' which contains test environment services developed and described in man pages to help debugging problems on test clusters ONLY. This package is NOT allowed to be installed and used on production cluster as it may interrupt or damage your productive database. * Add an alert agent that can react on cluster resources timeout alerts. SAPHanaSR-alert-timeout can jump in when any takeover occurs to document the system status, e.g. process status * Enhance SAPHanaSR-hookHelper to collect system status information on resource agent timeout (alert logs) * Added system services/timers: SAPHanaSR-pacemaker.timer delays the pacemaker start to reduce problems on fast rebooting systems, e.g. node joins to early before takeover is finished * Reducing systemd load and speed up operation by specifying the unit-name for sub-command list-unit-files * Avoid stop before register for ScaleUp scenarios as it is not needed in this case. * Fix expensive external calls by using internal bash features * Fix set/get_hana_attributes to no longer mask the real return value * Remove redundant virtual host fallback logic * Call saphostctrl ListInstances with timeout to prevent indefinitely blocking of the resource agent * Recall get_local_virtual_name() in sht_monitor_clone(), if the virtual host name is still not set * srHook susTKOver: if the given SID is not configured in the cluster, do NOT block the takeover * Fix SAPHanaSR-angi package description (bsc#1272407) * new man page: SAPHanaSR-CostOpt_setup.7 SAPHanaSR-alert-timeout.8 SAPHanaSR-pacemaker.timer.7 * update man pages: SAPHanaController-scale-out.7 SAPHanaController-scale-up.7 SAPHanaSR-ScaleOut-XSA.7 SAPHanaSR-ScaleOut.7 SAPHanaSR-ScaleOut_basic_cluster.7 SAPHanaSR-ScaleUp-CostOpt.7 SAPHanaSR-alert-fencing.8 SAPHanaSR-angi-scenarios.7 SAPHanaSR-angi.7 SAPHanaSR-hookHelper.8 SAPHanaSR-manageProvider.8 SAPHanaSR-replay-archive.8 SAPHanaSR-show-hadr-runtimes.8 SAPHanaSR-showAttr.8 SAPHanaSR-showAttr_properties.5 SAPHanaSR-upgrade-to-angi-demo.8 SAPHanaSR.7 SAPHanaSR_basic_cluster.7 SAPHanaSR_maintenance_examples.7 SAPHanaSR_multi-target.7 SAPHanaSR_upgrade_to_angi.7 SAPHanaSR_with_DR_HA.7 SAPHanaSR_with_DR_HA_setup.7 ocf_suse_SAPHanaController.7 ocf_suse_SAPHanaFilesystem.7 ocf_suse_SAPHanaTopology.7 susChkSrv.py.7 susCostOpt.py.7 susHanaSR.py.7 susHanaSrMultiTarget.py.7 susTkOver.py.7 SAPHanaSR-angi-1.3.5-160100.1.1.noarch.rpm SAPHanaSR-angi-1.3.5-160100.1.1.src.rpm SAPHanaSR-angi-testenv-1.3.5-160100.1.1.noarch.rpm openSUSE-Leap-16.1-3 Security update for udisks2 important SUSE SLFO 1.3 This update for udisks2 fixes the following issue: - CVE-2026-7867: Local Privilege Escalation via as-user option spoofing (bsc#1274430). libudisks2-0-2.11.1-160100.3.1.aarch64.rpm libudisks2-0-debuginfo-2.11.1-160100.3.1.aarch64.rpm libudisks2-0-devel-2.11.1-160100.3.1.aarch64.rpm libudisks2-0_btrfs-2.11.1-160100.3.1.aarch64.rpm libudisks2-0_btrfs-debuginfo-2.11.1-160100.3.1.aarch64.rpm libudisks2-0_lsm-2.11.1-160100.3.1.aarch64.rpm libudisks2-0_lsm-debuginfo-2.11.1-160100.3.1.aarch64.rpm libudisks2-0_lvm2-2.11.1-160100.3.1.aarch64.rpm libudisks2-0_lvm2-debuginfo-2.11.1-160100.3.1.aarch64.rpm typelib-1_0-UDisks-2_0-2.11.1-160100.3.1.aarch64.rpm udisks2-2.11.1-160100.3.1.aarch64.rpm udisks2-2.11.1-160100.3.1.src.rpm udisks2-bash-completion-2.11.1-160100.3.1.noarch.rpm udisks2-debuginfo-2.11.1-160100.3.1.aarch64.rpm udisks2-debugsource-2.11.1-160100.3.1.aarch64.rpm udisks2-docs-2.11.1-160100.3.1.noarch.rpm udisks2-lang-2.11.1-160100.3.1.noarch.rpm udisks2-zsh-completion-2.11.1-160100.3.1.noarch.rpm libudisks2-0-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0-debuginfo-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0-devel-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0_btrfs-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0_btrfs-debuginfo-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0_lsm-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0_lsm-debuginfo-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0_lvm2-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0_lvm2-debuginfo-2.11.1-160100.3.1.ppc64le.rpm typelib-1_0-UDisks-2_0-2.11.1-160100.3.1.ppc64le.rpm udisks2-2.11.1-160100.3.1.ppc64le.rpm udisks2-debuginfo-2.11.1-160100.3.1.ppc64le.rpm udisks2-debugsource-2.11.1-160100.3.1.ppc64le.rpm libudisks2-0-2.11.1-160100.3.1.s390x.rpm libudisks2-0-debuginfo-2.11.1-160100.3.1.s390x.rpm libudisks2-0-devel-2.11.1-160100.3.1.s390x.rpm libudisks2-0_btrfs-2.11.1-160100.3.1.s390x.rpm libudisks2-0_btrfs-debuginfo-2.11.1-160100.3.1.s390x.rpm libudisks2-0_lsm-2.11.1-160100.3.1.s390x.rpm libudisks2-0_lsm-debuginfo-2.11.1-160100.3.1.s390x.rpm libudisks2-0_lvm2-2.11.1-160100.3.1.s390x.rpm libudisks2-0_lvm2-debuginfo-2.11.1-160100.3.1.s390x.rpm typelib-1_0-UDisks-2_0-2.11.1-160100.3.1.s390x.rpm udisks2-2.11.1-160100.3.1.s390x.rpm udisks2-debuginfo-2.11.1-160100.3.1.s390x.rpm udisks2-debugsource-2.11.1-160100.3.1.s390x.rpm libudisks2-0-2.11.1-160100.3.1.x86_64.rpm libudisks2-0-debuginfo-2.11.1-160100.3.1.x86_64.rpm libudisks2-0-devel-2.11.1-160100.3.1.x86_64.rpm libudisks2-0_btrfs-2.11.1-160100.3.1.x86_64.rpm libudisks2-0_btrfs-debuginfo-2.11.1-160100.3.1.x86_64.rpm libudisks2-0_lsm-2.11.1-160100.3.1.x86_64.rpm libudisks2-0_lsm-debuginfo-2.11.1-160100.3.1.x86_64.rpm libudisks2-0_lvm2-2.11.1-160100.3.1.x86_64.rpm libudisks2-0_lvm2-debuginfo-2.11.1-160100.3.1.x86_64.rpm typelib-1_0-UDisks-2_0-2.11.1-160100.3.1.x86_64.rpm udisks2-2.11.1-160100.3.1.x86_64.rpm udisks2-debuginfo-2.11.1-160100.3.1.x86_64.rpm udisks2-debugsource-2.11.1-160100.3.1.x86_64.rpm openSUSE-Leap-16.1-30 Security update for the Linux Kernel important SUSE SLFO 1.3 The SUSE Linux Enterprise 16.1 NVIDIA kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-72472: nfs: use nfsi->rwsem to protect traversal of the file lock list (bsc#1277031). - CVE-2026-74274: cxl/region: Fill first free targets[] slot during auto-discovery (bsc#1276487). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80547: s390/vfio_ccw: Implement a crw lock (bsc#1277563 bsc#1284428). - CVE-2026-80548: s390/vfio_ccw: Selectively expand io_mutex (bsc#1277565 bsc#1284428). - CVE-2026-80549: s390/vfio_ccw: Move cp cleanup out of not operational (bsc#1277575 bsc#1284428). - CVE-2026-80550: s390/vfio_ccw: Fix out of bounds check on CCW array (bsc#1277548 bsc#1284428). - CVE-2026-80551: s390/vfio_ccw: Ensure first IDAW remains constant (bsc#1277534 bsc#1284428). - CVE-2026-80552: s390/vfio_ccw: Ensure index for read/write regions are within range (bsc#1277559 bsc#1284428). - CVE-2026-80553: s390/vfio_ccw: Cancel existing workqueues (bsc#1277510 bsc#1284428). - CVE-2026-80554: s390/vfio_ccw: Limit the number of channel program segments (bsc#1277507 bsc#1284428). - CVE-2026-80555: s390/vfio_ccw: Free all memory if cp_init() fails (bsc#1277514 bsc#1284428). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89602: erofs: skip sufficiently large global buffers when resizing (bsc#1280827). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89633: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (bsc#1280867). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). - CVE-2026-89648: ceph: cap delegated inode count in ceph_parse_deleg_inos() (bsc#1280427). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89762: apparmor: fix cred UAF caused by begin_current_label_crit_section() (bsc#1280749). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-89812: drm/amdgpu: force complete the MES ring fences on reset (bsc#1281146). - CVE-2026-89813: drm/amdgpu: force complete the KIQ ring fences on reset (bsc#1281147). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). - CVE-2026-93211: nfsd: initialize DRC hash table before registering shrinker (bsc#1282740). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). - CVE-2026-93284: drm/pagemap: dma-unmap pages before handling migration errors (bsc#1282743). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97410: netconsole: take target_cleanup_list_lock in drop_netconsole_target() (bsc#1283082). - CVE-2026-97498: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction (bsc#1282756). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97988: vhost: invalidate vring access on IOTLB transitions (bsc#1283397). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98027: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size (bsc#1283803). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98039: bpf: Require MEM_PERCPU for percpu kptr stores (bsc#1284063). - CVE-2026-98047: bpf: Check ancestor frames for rbtree callbacks (bsc#1284068). - CVE-2026-98058: bpf: Mark syscall helpers as sleepable (bsc#1283848). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98166: drm/ttm: fix swapped-out resources never leaving their bulk_move range (bsc#1284300). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tables (bsc#1284742). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet header (bsc#1284944). - CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacement (bsc#1284945). - CVE-2026-98466: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (bsc#1286218). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98555: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure (bsc#1286769). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-98720: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (bsc#1286743). - CVE-2026-98895: net/mlx5: HWS, Handle destroying table that has a miss table (bsc#1288009). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-99176: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (bsc#1288703). - CVE-2026-99178: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (bsc#1288713). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/amdxdna: Set HMM_PFN_REQ_WRITE for writable BO faults (git-fixes). - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: APEI: GHES: Bound CXL event record copy to the firmware section length (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: fan: Fix memory leak due to leftover devm_kcalloc() argument (git-fixes). - ACPI: HMAT: preserve hmat_adist_nb notifier block (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Don't constrain playback params in notify mode (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: aloop: Update the PCM Slave controls for a matching playback (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: compress: reject restarting an ACTIVE task via origin_seqno (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: control_led: Fix deadlock between sysfs writes and card disconnect (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3402VA (git-fixes). - ALSA: hda/tas2781: Skip invalid TAS2563 UEFI calibration data (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Don't free card at probe error in vga_switcheroo handler (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: intel: Don't free card in the probe work (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Protect the index scan against control removal (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Handle period elapsed calls outside the locks (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: mpu401: shut down timer before freeing MPU (git-fixes). - ALSA: mtpav: restore negation dropped in guard() conversion (git-fixes). - ALSA: oxygen: use helper to activate the SPDIF PCM control (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: pcmtest: Fix a bogus pointer read in snd_pcmtst_pcm_pointer() (git-fixes). - ALSA: pcmtest: handle multiple wraps in random capture fill (git-fixes). - ALSA: pcmtest: Honor the enable parameter (git-fixes). - ALSA: pcmtest: Pin the module while pattern files are open (git-fixes). - ALSA: pcmtest: Reject invalid fill_mode values (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: us122l: mark hwdep mappings VM_MIXEDMAP (git-fixes). - ALSA: usb-audio: Bound packet copies by the PCM buffer size (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: virtio: reset I/O message fill level on prepare (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 (jsc#NVIDIA-55 git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: audio-graph-card2: Fix use-after-free in audio_graph2_link_c2c() (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es8375: use devm_clk_get_optional() for mclk (git-fixes). - ASoC: codecs: es*: Modify the maximum value of DMIC_GAIN (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sma1307: validate setting firmware layout (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd937x: request watchdog IRQs without devm (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa883x: Fix VI sense port channel count (git-fixes). - ASoC: codecs: wsa884x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: Fix VI sense port channel count (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8323: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: es8375: report resume restore errors (git-fixes). - ASoC: fs210x: report register restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: fsl_asrc_m2m: Fix bogus compress task pointer assignments (git-fixes). - ASoC: fsl_asrc_m2m: fix pm_runtime usage counter leak on error (git-fixes). - ASoC: fsl_xcvr: free IRQ before canceling reset work (git-fixes). - ASoC: hdac_hda: Allocate the private data at codec driver bind (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Constrain UL8 FE to its back end's capabilities (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8189: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8189: Propagate APLL enable errors (git-fixes). - ASoC: mediatek: mt8189: Propagate APLL errors (git-fixes). - ASoC: mediatek: mt8189: Propagate MCK enable errors (git-fixes). - ASoC: mediatek: mt8189: Propagate MCLK errors (git-fixes). - ASoC: mediatek: mt8189: Propagate reg_rw clock errors (git-fixes). - ASoC: mediatek: mt8189: Propagate runtime resume errors (git-fixes). - ASoC: mediatek: mt8189: Propagate TDM clock errors (git-fixes). - ASoC: mediatek: mt8189: Validate MCK ID (git-fixes). - ASoC: mediatek: mt8189: Validate sysclk frequency (git-fixes). - ASoC: mediatek: mt8189: Validate TDM MCLK frequency (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mediatek: mt8365: Fix out-of-bounds read in get_iir_coef() (git-fixes). - ASoC: mediatek: mt8365: Handle constraint return value in FE startup (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: pcm6240: do not free an unrequested IRQ (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: qcom: q6asm-dai: wrap the position of a full ring to 0 (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: qcom: sdm845: Disable the quaternary MI2S bit clock on shutdown (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rockchip: rockchip_sai: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt712: avoid duplicate reset in io_init (git-fixes). - ASoC: rt721-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1015: make control calibration failures observable (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt1318: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: samsung: midas_wm1811: run FLL1 at the AIF1 configured rate when idle (git-fixes). - ASoC: SDCA: Check return value on a missing FDL_Set_Index Range (git-fixes). - ASoC: SDCA: Improve scanning the SWFT during FDL (git-fixes). - ASoC: SDCA: propagate sdw_slave_read_prop() failure in class_read_prop (git-fixes). - ASoC: sdw_utils: clear stale RT711 device reference on exit (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-card-test: Check return value of kunit_device_register() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-link: Correct stream stop operations in snd_soc_link_trigger (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_probe() error unwind ordering (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes). - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes). - ASoC: sta32x: make power restoration transactional (git-fixes). - ASoC: tas2781: Fix TAS2781/TAS5825 PPC version logic conflict (git-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: ahci_st: Do not ignore errors when getting the reset controls (git-fixes). - ata: libahci: Free the IRQs when activating a multi-IRQ host fails (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_dwc_460ex: Don't enable interrupt if libATA core registration fails (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bpf, x86: Fix timed may_goto with private stack (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: algif_skcipher - rewind rounded output bytes (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - Initialize DBC ioctl mutex before registering device (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - enable all clusters clock gating (stable-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: lskcipher - preserve state across unaligned chunks (git-fixes). - crypto: mxs-dcp - handle zero-length skcipher requests (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix error source for QAT GEN6 transmit interface faults (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - dmaengine: xilinx_dma: Move descriptors to done list based on completion bit (git-fixes). - Documentation: devres: Remove non-existent SPI register helpers (git-fixes). - Documentation: RAS: Use the real EDAC PCI parity control names (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - dpaa2-ptp: fix support for PTP_EXTTS_REQUEST2 ioctl (git-fixes). - dpll: use exact lookup for reference sync pin id (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: copy function name into dcn_fpu trace event (git-fixes). - drm/amd/display: copy function name into dcn_optc_lock_unlock_state trace event (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: re-enable GFXOFF for compute on GFX12 (git-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: don't drop an SVM CWSR reference that was never taken (git-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/amdkfd: fix SMI event cross-process information leak (stable-fixes). - drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/amdkfd: wait for a GPU reset before freeing a BO (git-fixes). - drm/appletbdrm: Add suspend and resume support (git-fixes). - drm/appletbdrm: Fix incorrect error message on encoder attach failure (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/crt: convert to struct intel_display (stable-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/display: pass display to intel_crtc_for_pipe() (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dp: Initialize the debugfs connector pointer (git-fixes). - drm/msm/dpu: compute the CRTC bandwidth from the state being checked (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/dpu: round up the compressed INTF width (git-fixes). - drm/msm/hdmi: Handle msm_hdmi_power_on() errors during .atomic_pre_enable() (git-fixes). - drm/msm/hdmi_bridge: Correct poweroff/audio cleanup order in post_disable (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC) (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panic: Do not use un-escaped URL as format string (git-fixes). - drm/panic: Test address from kmap op for NULL (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (stable-fixes). - e1000e: add system to disable K1 list (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firewire: core: fix source bus ID detection for AT context in big-endian systems (git-fixes). - firmware: arm_scmi: Don't reuse raw xfers with async_done still armed (git-fixes). - firmware: arm_scmi: Protect xfer->async_done with xfer->lock (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - genirq/msi: Refactor iommu_dma_compose_msi_msg() (jsc#PED-16989). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Handle direction register read errors in IRQ paths (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - gpio: Respect valid_mask when requesting GPIOs (stable-fixes). - gpiolib: clear requested flag if line is invalid (git-fixes). - gpiolib: don't report -ENOMEM for a requested line without a label (git-fixes). - gpiolib: Free chip resources when allocating the label fails (git-fixes). - gpiolib: sanitize the return value of gpio_chip::request() (stable-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: i2c-hid: Unfollow the panel on shutdown (git-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: logitech-hidpp: cancel reset_hi_res_work on probe failure (git-fixes). - HID: mcp2200: validate READ_ALL response length (git-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: prodikeys: validate fixed-format MIDI reports (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (bsc#1285891). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (asus_rog_ryujin) Add per-device configuration (stable-fixes). - hwmon: (asus_rog_ryujin) Rely on subsystem locking (stable-fixes). - hwmon: (coretemp) Fix handling of isolated SMT siblings (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (gigabyte_waterforce) reject short input reports (git-fixes). - hwmon: (k10temp) Stop matching Hygon devices (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (git-fixes). - i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function (stable-fixes). - ibmveth: check headers in the RX large send and checksum helpers (bsc#1285888). - ibmveth: disable the reset work before unregister in remove (bsc#1285888). - ibmveth: do not close twice after a failed reopen (bsc#1285888). - ibmveth: fix netpoll races with RX replenish (bsc#1285888). - ibmveth: fix TX LTB and filter unwind on open-fail (bsc#1285888). - ibmveth: h_free logical LAN on open-fail after register (bsc#1285888). - ibmveth: release the pool kobjects when probe fails (bsc#1285888). - ibmveth: return the error when set_channels cannot add TX queues (bsc#1285888). - ibmveth: step past bad RX correlators instead of spinning or oopsing (bsc#1285888). - ibmveth: wait for in-flight transmits in ibmveth_close() (bsc#1285888). - ibmveth: wait for the RX poll to return before freeing the RX queue (bsc#1285888). - ice: add E835 device IDs (jsc#PED-14404 jsc#PED-15079 jsc#PED-16956). - idpf: keep the netdev when a reset fails (bsc#1285391). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: adxl313: reject devices without match data (git-fixes). - iio: accel: adxl380: reject devices without match data (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: ad7192: reject devices without match data (git-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: max11205: reject devices without match data (git-fixes). - iio: adc: mcp3911: reject devices without match data (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: dac: ad5755: validate SPI match data (git-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: frequency: adf4377: reject devices without match data (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: imu: inv_icm42600: fix odr change not caught in certain cases (git-fixes). - iio: imu: inv_icm42600: force accel odr change when switching power mode (git-fixes). - iio: light: apds9306: fix default sampling frequency definition (git-fixes). - iio: potentiometer: x9250: reject devices without match data (git-fixes). - iio: pressure: bmp280: validate SPI match data (git-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: pressure: rohm-bm1390: Fix AVE_NUM initialization (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - inet: Avoid ehash lookup race in inet_ehash_insert() (bsc#1286554). - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (bsc#1286554). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: matrix_keypad - propagate error code from matrix_keypad_build_keymap() (git-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - interconnect: qcom: icc-rpm: Handle icc_link_create() failures (git-fixes). - iommu/arm-smmu-v3-iommufd: Add hw_info to impl_ops (jsc#PED-16989). - iommu/arm-smmu-v3-iommufd: Add vsmmu_size/type and vsmmu_init impl ops (jsc#PED-16989). - iommu/arm-smmu-v3-iommufd: Reject unsupported bits in invalidation commands (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3-sva: Enable Hardware Access and Hardware Dirty bits (bsc#1288217). - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Add missing S2FWB feature detection (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Add update_safe bits to fix STE update sequence (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (jsc#PED-16989). - iommu/arm-smmu-v3: Declare eats_s1chk and eats_trans as host-endian u64 (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Disable the impl before disabling the SMMU on shutdown (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is Translate (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (jsc#PED-16989). - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (jsc#PED-16989). - iommu/arm-smmu-v3: Import IOMMUFD module namespace (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (jsc#PED-16989). - iommu/arm-smmu-v3: Introduce struct arm_smmu_vmaster (jsc#PED-16989). - iommu/arm-smmu-v3: Log better event records (jsc#PED-16989). - iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the update sequence (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Mark STE MEV safe when computing the update sequence (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Replace arm_vsmmu_alloc with arm_vsmmu_init (jsc#PED-16989). - iommu/arm-smmu-v3: Report events that belong to devices attached to vIOMMU (jsc#PED-16989). - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (jsc#PED-16989). - iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations (jsc#PED-16989). - iommu/arm-smmu-v3: Support IDR5.DS and widen the TLBI SCALE field (jsc#PED-16989 git-fixes). - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (jsc#PED-16989). - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (jsc#PED-16989). - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (jsc#PED-16989). - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (jsc#PED-16989). - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (jsc#PED-16989). - iommu/dma: Restore locking around msi_page_list (jsc#PED-16989 git-fixes). - iommu/exynos-iommu: Set release_domain to exynos_identity_domain (git-fixes). - iommu/selftest: prevent use of uninitialized variable (jsc#PED-16989 git-fixes). - iommu/tegra241-cmdqv: Add IOMMU_VEVENTQ_TYPE_TEGRA241_CMDQV support (jsc#PED-16989). - iommu/tegra241-cmdqv: Add user-space use support (jsc#PED-16989). - iommu/tegra241-cmdqv: Do not statically map LVCMDQs (jsc#PED-16989). - iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown (jsc#PED-16989 git-fixes). - iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field (jsc#PED-16989 git-fixes). - iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID (jsc#PED-16989 git-fixes). - iommu/tegra241-cmdqv: Simplify deinit flow in tegra241_cmdqv_remove_vintf() (jsc#PED-16989). - iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init (jsc#PED-16989 git-fixes). - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (jsc#PED-16989 git-fixes). - iommu/tegra241-cmdqv: Use request_threaded_irq (jsc#PED-16989). - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (jsc#PED-16989). - iommu: Add iommu_copy_struct_from_full_user_array helper (jsc#PED-16989). - iommu: Add iommu_copy_struct_to_user helper (jsc#PED-16989). - iommu: Allow an input type in hw_info op (jsc#PED-16989). - iommu: Avoid copying the user array twice in the full-array copy helper (jsc#PED-16989 git-fixes). - iommu: Deprecate viommu_alloc op (jsc#PED-16989). - iommu: Introduce get_viommu_size and viommu_init ops (jsc#PED-16989). - iommu: Make iommu_dma_prepare_msi() into a generic operation (jsc#PED-16989). - iommu: Pass in a driver-level user data structure to viommu_init op (jsc#PED-16989). - iommu: Turn fault_data to iommufd private pointer (jsc#PED-16989). - iommu: Use enum iommu_hw_info_type for type in hw_info op (jsc#PED-16989). - iommufd/access: Add internal APIs for HW queue to use (jsc#PED-16989). - iommufd/access: Bypass access->ops->unmap for internal use (jsc#PED-16989). - iommufd/driver: Add iommufd_hw_queue_depend/undepend() helpers (jsc#PED-16989). - iommufd/driver: Fix counter initialization for counted_by annotation (jsc#PED-16989 git-fixes). - iommufd/fault: Add an iommufd_fault_init() helper (jsc#PED-16989). - iommufd/fault: Move two fault functions out of the header (jsc#PED-16989). - iommufd/fault: Use a separate spinlock to protect fault->deliver list (jsc#PED-16989 git-fixes). - iommufd/iommufd_private.h: Avoid -Wflex-array-member-not-at-end warning (jsc#PED-16989 git-fixes). - iommufd/selftest: Add container_of helpers (jsc#PED-16989). - iommufd/selftest: Add coverage for IOMMUFD_CMD_HW_QUEUE_ALLOC (jsc#PED-16989). - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO (jsc#PED-16989). - iommufd/selftest: Add coverage for the new mmap interface (jsc#PED-16989). - iommufd/selftest: Add coverage for viommu data (jsc#PED-16989). - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (jsc#PED-16989). - iommufd/selftest: Add IOMMU_TEST_OP_TRIGGER_VEVENT for vEVENTQ coverage (jsc#PED-16989). - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (jsc#PED-16989). - iommufd/selftest: Add IOMMU_VEVENTQ_ALLOC test coverage (jsc#PED-16989). - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (jsc#PED-16989). - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (jsc#PED-16989). - iommufd/selftest: Add mock_viommu_cache_invalidate (jsc#PED-16989). - iommufd/selftest: Add refcount to mock_iommu_device (jsc#PED-16989). - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (jsc#PED-16989). - iommufd/selftest: Drop parent domain from mock_iommu_domain_nested (jsc#PED-16989). - iommufd/selftest: Fix ioctl return value in _test_cmd_trigger_vevents() (jsc#PED-16989 git-fixes). - iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} (jsc#PED-16989 git-fixes). - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (jsc#PED-16989). - iommufd/selftest: Replace mock_viommu_alloc with mock_viommu_init (jsc#PED-16989). - iommufd/selftest: Require vdev_id when attaching to a nested domain (jsc#PED-16989). - iommufd/selftest: Support user_data in mock_viommu_alloc (jsc#PED-16989). - iommufd/selftest: Update hw_info coverage for an input data_type (jsc#PED-16989). - iommufd/viommu: Add driver-defined vDEVICE support (jsc#PED-16989). - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (jsc#PED-16989). - iommufd/viommu: Add IOMMUFD_CMD_HW_QUEUE_ALLOC ioctl (jsc#PED-16989). - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (jsc#PED-16989). - iommufd/viommu: Add iommufd_viommu_find_dev helper (jsc#PED-16989). - iommufd/viommu: Add iommufd_viommu_get_vdev_id helper (jsc#PED-16989). - iommufd/viommu: Add iommufd_viommu_report_event helper (jsc#PED-16989). - iommufd/viommu: Allow driver-specific user data for a vIOMMU object (jsc#PED-16989). - iommufd/viommu: Explicitly define vdev->virt_id (jsc#PED-16989). - iommufd/viommu: Introduce IOMMUFD_OBJ_HW_QUEUE and its related struct (jsc#PED-16989). - iommufd/viommu: Publish a vDEVICE only after vdevice_init() succeeds (jsc#PED-16989 git-fixes). - iommufd/viommu: Support get_viommu_size and viommu_init ops (jsc#PED-16989). - iommufd: Abstract an iommufd_eventq from iommufd_fault (jsc#PED-16989). - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (jsc#PED-16989). - iommufd: Add IOMMUFD_OBJ_VEVENTQ and IOMMUFD_CMD_VEVENTQ_ALLOC (jsc#PED-16989). - iommufd: Add mmap interface (jsc#PED-16989). - iommufd: Allow an input data_type via iommu_hw_info (jsc#PED-16989). - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (jsc#PED-16989). - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (jsc#PED-16989). - iommufd: Apply the new iommufd_object_alloc_ucmd helper (jsc#PED-16989). - iommufd: Avoid locking internal accesses during unmap (jsc#PED-16989 git-fixes). - iommufd: Balance veventq->num_events inc/dec (jsc#PED-16989 git-fixes). - iommufd: Correct virt_id kdoc at struct iommu_vdevice_alloc (jsc#PED-16989). - iommufd: Drop unused ictx in struct iommufd_vdevice (jsc#PED-16989). - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (jsc#PED-16989). - iommufd: Fix data_len byte-count vs element-count mismatch (jsc#PED-16989 git-fixes). - iommufd: Fix iommu_vevent_header tables markup (jsc#PED-16989 git-fixes). - iommufd: Fix refcounting race during mmap (jsc#PED-16989 git-fixes). - iommufd: Fix typos in kernel-doc comments (jsc#PED-16989 git-fixes). - iommufd: Implement sw_msi support natively (jsc#PED-16989). - iommufd: Initialize the flags of vevent in iommufd_viommu_report_event() (jsc#PED-16989 git-fixes). - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (jsc#PED-16989). - iommufd: Introduce iommufd_object_alloc_ucmd helper (jsc#PED-16989). - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (jsc#PED-16989). - iommufd: Move _iommufd_object_alloc helper to a sharable file (jsc#PED-16989). - iommufd: Move _iommufd_object_alloc out of driver.c (jsc#PED-16989). - iommufd: Move struct iommufd_object to public iommufd header (jsc#PED-16989). - iommufd: Move vevent memory allocation outside spinlock (jsc#PED-16989 git-fixes). - iommufd: Prevent ALIGN() overflow (jsc#PED-16989 git-fixes). - iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() (jsc#PED-16989 git-fixes). - iommufd: Reject invalid read count in iommufd_veventq_fops_read() (jsc#PED-16989 git-fixes). - iommufd: Rename fault.c to eventq.c (jsc#PED-16989). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (jsc#PED-16989). - iommufd: Return EOPNOTSUPP for failures due to driver bugs (jsc#PED-16989). - iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails (jsc#PED-16989 git-fixes). - iommufd: Set domain->iommufd_hwpt in all hwpt->domain allocators (jsc#PED-16989 git-fixes). - iommufd: Set veventq_depth upper bound (jsc#PED-16989 git-fixes). - iommufd: Use enum iommu_veventq_type for type in struct iommufd_veventq (jsc#PED-16989). - iommufd: Use enum iommu_viommu_type for type in struct iommufd_viommu (jsc#PED-16989). - iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read (jsc#PED-16989 git-fixes). - iommufd: Verify object in iommufd_object_finalize/abort() (jsc#PED-16989). - iommufd: viommu: free memory allocated by kvcalloc() using kvfree() (jsc#PED-16989 git-fixes). - irqchip: Have CONFIG_IRQ_MSI_IOMMU be selected by irqchips that need it (jsc#PED-16989). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - KVM: TDX: Check if there is valid exit infos based on vp_enter_ret (git-fixes). - KVM: TDX: Enable Notify VM exit (git-fixes). - KVM: x86/mmu: Fix NX page unaccounting for TDP MMU pages (git-fixes). - KVM: x86/mmu: Reload MMU on *every* page pre-fault attempt/iteration (git-fixes). - KVM: x86/mmu: Use KVM's max TDP level to determine need for 32-bit TDP root (git-fixes). - KVM: x86: Take SRCU in kvm_zap_gfn_range() (git-fixes). - KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: ktd2692: Pass context to regulator cleanup (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cec: extron: clear response tail before dispatch (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: alvium-csi2: balance runtime PM usage count on remove (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imagination: Fix value clamping in calculate_qp_tables (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vcodec: destroy core workqueue on remove (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: don't sleep in the clk .is_enabled callback (git-fixes). - media: microchip-isc: fix awb_mutex and lock lifecycle (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: fix WB offset and gain register field masking (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: microchip-isc: take a reference on the parsed endpoints (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: nuvoton: npcm-video: quiesce VCD IRQ before teardown (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: qcom: camss: vfe-17x: Fix write master buffer done being dropped (git-fixes). - media: qcom: camss: vfe: Fix VFE reset while another line is streaming (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: sti: delta: use unaligned accessors for MJPEG SOF fields (git-fixes). - media: stm32: dcmipp: replace s_stream with enable/disable_streams (stable-fixes). - media: stm32: dcmipp: use v4l2_subdev_is_streaming (stable-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: cancel svid ctrl work on release (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT (git-fixes). - memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset (git-fixes). - memory: brcmstb_dpfe: validate firmware section sizes (git-fixes). - memory: emif: fix device_node reference leak on np_ddr (git-fixes). - memory: exynos5422-dmc: handle clock enable failures (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da903x: Cancel IRQ work during teardown (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: rk8xx: Register poweroff handler in atomic phase (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: tps65217: Use devres for IRQ domain and wake teardown (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence "DMA mask not set" (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - misc: nsm: fix CBOR short-length decoding (git-fixes). - misc: nsm: mark device ready before registering the hwrng and misc device (git-fixes). - mm: add stubs for PFNMAP memory failure registration functions (jsc#PED-16989). - mm: change ghes code to allow poison of non-struct pfn (jsc#PED-16989). - mm: fixup pfnmap memory failure handling to use pgoff (jsc#PED-16989 git-fixes). - mm: handle poisoning of pfn without struct pages (jsc#PED-16989). - mshv_vtl: Check per-CPU register page before mmap (git-fixes). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: spansion: Remove s25fs256s0 (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net-sysfs: release queue trackers before allowing reuse (bsc#1278140). - net-sysfs: remove rtnl_trylock from device attributes (bsc#1278140). - net-sysfs: remove rtnl_trylock from queue attributes (bsc#1278140). - net-sysfs: restore behavior for not running devices (bsc#1278140). - net/mlx5: HWS, fix flow meter offset within its bulk (git-fixes). - net/mlx5: Only set num_doorbells on a fully initialized SF (git-fixes). - net/mlx5e: Fix NULL deref in PTP TX timestamp recovery warn (git-fixes). - net/mlx5e: use skb_share_check() in the loopback selftest hook (git-fixes). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: enetc: fix support for PTP_EXTTS_REQUEST2 ioctl (git-fixes). - net: ethernet: mtk_wed: Fix dma_unmap_single() size (git-fixes). - net: ethernet: ti: am65-cpts: fix support for PTP_EXTTS_REQUEST2 ioctl (git-fixes). - net: phy: marvell: keep WOL_EIE across interrupt reconfiguration (git-fixes). - net: phy: qca83xx: read resolved QCA8337 link status (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT (git-fixes). - nvme: bound FDP config log reads to the received buffer (git-fixes). - nvmet: require authentication before property set (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI/TPH: Validate the firmware Steering Tag response (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom-ep: Deinitialize endpoint on remove (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rcar-gen4: Add Application/Local register reset control (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - peci: npcm: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - phy: rockchip: usbdp: Do not lose USB3 PHY status (git-fixes). - phy: rockchip: usbdp: Drop seamless DP takeover (git-fixes). - phy: rockchip: usbdp: Fix devm_clk_bulk_get_all check (git-fixes). - phy: rockchip: usbdp: Handle missing clock-names DT property gracefully (git-fixes). - phy: rockchip: usbdp: Handle rk_udphy_reset_deassert errors (git-fixes). - phy: rockchip: usbdp: Hold mutex in DP PHY configure (git-fixes). - phy: rockchip: usbdp: Only enable USB3 when not in high-speed mode (git-fixes). - phy: rockchip: usbdp: Update mode_change after error handling (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: mediatek: paris: don't double-check the GPIO number (stable-fixes). - pinctrl: nuvoton: Fix clock reference leak in ma35_get_bank_data() (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix clock reference leak in stm32_pctl_probe() (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/chrome: cros_ec_typec: Validate SVID and mode counts in discovery data (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() (git-fixes). - platform/x86/amd/pmf: Validate the APTS state index (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86/intel/pmc: Fix stale NVL PCD-S S0ix_LPM telemetry constants (git-fixes). - platform/x86/intel/pmt: Block mmap when callback is present (git-fixes). - platform/x86/intel: power-domains: Handle failed init in tpmi_get_linux_die_id() (git-fixes). - platform/x86: asus-wmi: fix screenpad power state detection (git-fixes). - platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming (git-fixes). - platform/x86: asus-wmi: fix unclear usage of bd->props.power (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-bioscfg: allow clearing current_password (git-fixes). - platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token (git-fixes). - platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one in password length check (git-fixes). - platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix oops on short integer attribute buffer (git-fixes). - platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() (git-fixes). - platform/x86: hp-bioscfg: NUL-terminate the SPM auth token (git-fixes). - platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() (git-fixes). - platform/x86: hp-bioscfg: validate SPM state returned by firmware (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - platform/x86: simatic-ipc: fix platform device leak on registration failure (git-fixes). - platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() (git-fixes). - PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq27xxx: synchronize work cancellation on suspend (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: mm8013: Publish the OF module alias (git-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - powerpc/syscall: Return the preset value of skipped syscalls (jsc#PED-15113 git-fixes). - pwm: lp3943: fix NULL pointer dereference for an unconfigured channel (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - pwm: renesas-tpu: Fix runtime PM reference leak (git-fixes). - pwm: tiehrpwm: Clear period on disable to allow reconfiguration (git-fixes). - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (bsc#1286554). - RDMA/hns: Fix the use of uninitialized variable (git-fixes). - RDMA/ionic: Fix double removal of CMB mmap entries in create QP error path (git-fixes). - RDMA/ionic: Fix XArray initialization to use XArray flags (git-fixes). - RDMA/irdma: Bound in-flight CQP ops across deferred completions (git-fixes). - RDMA/irdma: check vport device allocation (git-fixes). - RDMA/irdma: Free IRQ when CEQ vector mapping fails (git-fixes). - RDMA/mlx5: Use DEFINE_RAW_FLEX for leftovers flow attributes (git-fixes). - RDMA/rxe: bound the ODP page index against the umem in rxe_check_pagefault() (git-fixes). - RDMA/rxe: Reject IB_ACCESS_ON_DEMAND changes after MR creation (git-fixes). - RDMA/rxe: Reject prefetch of a non-ODP MR (git-fixes). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: fixed: reject incompatible platform devices (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: qcom-rpmh: Fix the return value in rpmh_regulator_vrm_get_optimum_mode() kernel-doc (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Revert "Input: matrix_keypad - force switch rows to input mode" (git-fixes). - Revert "mkspec: Exclude rt flavor from kernel-syms dependencies" (bsc#1244337). - Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware" (git-fixes). - Revert "rpm/mkspec: Fix missing kernel-syms-rt creation" (bsc#1244337). - Revert "wifi: mac80211: do not use old MBSSID elements" (git-fixes). - Revert "wifi: rtw89: fix unable to receive probe responses under MLO connection" (stable-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (bsc#1279778). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL (bsc#1287642). - s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed (bsc#1287642). - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects (bsc#1287642). - s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (bsc#1287642). - s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object (bsc#1287642). - s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio_ccw: Calculate idal length based on idaw type (bsc#1284428). - scsi: qla2xxx: Add 29xx extended logio IOCB support (bsc#1275737). - scsi: qla2xxx: Add 29xx series PCI device ID support (bsc#1275737). - scsi: qla2xxx: Add 29xx support in queue initialisation path (bsc#1275737). - scsi: qla2xxx: Add 64G/128G port speed setting support (bsc#1275737). - scsi: qla2xxx: Add 128-byte IOCB definitions for 29xx (bsc#1275737). - scsi: qla2xxx: Add abort command handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add BSG MPI firmware load/dump for 29xx (bsc#1275737). - scsi: qla2xxx: Add build-time size check for VP config IOCB layout (bsc#1275737). - scsi: qla2xxx: Add extended status continuation and marker IOCBs (bsc#1275737). - scsi: qla2xxx: Add FC operational firmware load for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash block read/write BSG support for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash read/write interface for 29xx (bsc#1275737). - scsi: qla2xxx: Add LS4 pass-through IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add NVRAM config support for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Add size check for ELS status entry layout on 29xx (bsc#1275737). - scsi: qla2xxx: Add size check for extended VP report ID entry (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in data rate functions (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in memory allocation (bsc#1275737). - scsi: qla2xxx: Adjust feature gating in BSG paths for 29xx support (bsc#1275737). - scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737). - scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737). - scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737). - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737). - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737). - scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() (bsc#1275737). - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity (bsc#1275737). - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (bsc#1275737). - scsi: qla2xxx: Clarify MPI optrom address/length units (bsc#1275737). - scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737). - scsi: qla2xxx: Drop vport reference under lock in report ID acquisition (bsc#1275737). - scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737). - scsi: qla2xxx: Enable get_adapter_id mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_firmware_state for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_fw_version mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable init_firmware mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable qla2x00_shutdown for 29xx (bsc#1275737). - scsi: qla2xxx: Enable serdes, resource count and FCE trace for 29xx (bsc#1275737). - scsi: qla2xxx: Enable set_els_cmds and echo_test for 29xx (bsc#1275737). - scsi: qla2xxx: Enhance ABTS processing for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance ct_entry_24xx_ext iocb handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance purex_entry handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance task management IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Extend execute_fw mailbox to include 29xx (bsc#1275737). - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate (bsc#1275737). - scsi: qla2xxx: Fix an error code in qla_get_tmf() (bsc#1275737). - scsi: qla2xxx: Fix an loop timeout test (bsc#1275737). - scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737). - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737). - scsi: qla2xxx: Fix endianness annotations in vp_rpt_id_entry structures (bsc#1275737). - scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737). - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737). - scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters (bsc#1275737). - scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort (bsc#1275737). - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737). - scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737). - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737). - scsi: qla2xxx: Fix the ql2xfc2target parameter description (bsc#1275737). - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (bsc#1275737). - scsi: qla2xxx: Handle INTx not connected while passing through (bsc#1275737). - scsi: qla2xxx: Handle sts_cont_entry_ext_t for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737). - scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737). - scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Improve firmware dump data capture (bsc#1275737). - scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737). - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (bsc#1275737). - scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737). - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737). - scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (bsc#1275737). - scsi: qla2xxx: Replace __le16 bitfields with scalar and accessors (bsc#1275737). - scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737). - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737). - scsi: qla2xxx: Skip image-set-valid attribute for 29xx (bsc#1275737). - scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737). - scsi: qla2xxx: Skip unsupported sysfs attributes for 29xx (bsc#1275737). - scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737). - scsi: qla2xxx: Update handling of ELS IOCBs for 29xx series (bsc#1275737). - scsi: qla2xxx: Update handling of status entries for 29xx series (bsc#1275737). - scsi: qla2xxx: Update IO path to use 128-byte IOCBs for 29xx (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b1 (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b2 (bsc#1275737). - scsi: qla2xxx: Update VP control IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Use 64-bit FPM word counters for 29xx host stats (bsc#1275737). - scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics (bsc#1275737). - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737). - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs (bsc#1275737). - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd (bsc#1275737). - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737). - scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737). - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests: ALSA: pcmtest: Check the frame count of each transfer (git-fixes). - selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture (git-fixes). - selftests: ALSA: pcmtest: Make room for the longest fill pattern (git-fixes). - serial: 8250_exar: store the GPIO platform device in struct exar8250 (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: 8250_omap: set priv->line before enabling the IRQ (git-fixes). - serial: 8250_uniphier: Use devm_clk_get_enabled() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: ma35d1: Do not force-enable an unselected console (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: max310x: fix breaks not reaching the wire in RS485 mode (git-fixes). - serial: msm: select PM_OPP (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix cifs_pick_channel when channel needs reconnect (git-fixes). - smb: client: harden DFS cache against invalid target hints (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc/tegra: pmc: Add kerneldoc for wake-up variables (git-fixes). - soc/tegra: pmc: Document tegra_pmc.syscore field (stable-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - soundwire: intel_auxdevice: Fix system suspend/resume handling (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() (git-fixes). - spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op (git-fixes). - spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path (git-fixes). - spi: ch341: fix devres lifetime (git-fixes). - spi: ch341: handle transfers without a TX or RX buffer (git-fixes). - spi: ch341: switch to use devm_spi_alloc_host() (stable-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: ljca: validate the response length before copying the data (git-fixes). - spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() (stable-fixes). - spi: microchip-core-qspi: set min_speed_hz during probe (stable-fixes). - spi: mpc52xx: clean up interrupt handling (stable-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: handle DMA setup failures (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: rspi: Fix DMA mode when the DMA controller is built as a module (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_handler(): fix race condition between transfer completion and RX FIFO interrupt (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: tegra114: assert CS GPIO for every transfer in a message (git-fixes). - spi: tegra114: initialize native chip selects inactive (git-fixes). - spi: tegra210-quad: Cache TRANS_STATUS in ISR for timeout handler (bsc#1288594). - spi: tegra210-quad: Convert to hard IRQ with high-priority workqueue (bsc#1288594). - spi: tegra210-quad: Fix false positive WARN on interrupt timeout with transfer complete (bsc#1288594). - spi: tegra210-quad: Process small PIO transfers in hard IRQ context (bsc#1288594). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: av7110: fix sp8870 initialization failure state (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: gov_power_allocator: Fix NULL pointer dereference in update_tz() (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/power turbostat: Fix add_counter issue if > 24 counters (git-fixes). - tools/power turbostat: Fix fd_perf leak on reset (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (jsc#PED-16989). - vfio/nvgrace-gpu: Add Blackwell-Next GPU readiness check via CXL DVSEC (jsc#PED-16989). - vfio/nvgrace-gpu: Add GB200 SKU to the devid table (jsc#PED-16989). - vfio/nvgrace-gpu: Add GB300 SKU to the devid table (jsc#PED-16989). - vfio/nvgrace-gpu: Add support for huge pfnmap (jsc#PED-16989). - vfio/nvgrace-gpu: Check the HBM training and C2C link status (jsc#PED-16989). - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (jsc#PED-16989). - vfio/nvgrace-gpu: Inform devmem unmapped after reset (jsc#PED-16989). - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (jsc#PED-16989). - vfio/nvgrace-gpu: register device memory for poison handling (jsc#PED-16989). - vfio/nvgrace-gpu: split the code to wait for GPU ready (jsc#PED-16989). - vfio/nvgrace-gpu: Use a core-only open_device in fallback mode (jsc#PED-16989 git-fixes). - vfio/nvgrace-gpu: wait for the GPU mem to be ready (jsc#PED-16989). - vfio/pci: Align huge faults to order (jsc#PED-16989 git-fixes). - vfio/pci: Fallback huge faults for unaligned pfn (jsc#PED-16989 git-fixes). - vfio: refactor vfio_pci_mmap_huge_fault function (jsc#PED-16989). - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (jsc#PED-16989). - vfio: use vfio_pci_core_setup_barmap to map bar in mmap (jsc#PED-16989). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: reg: protect regdb pointer with RCU (git-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: fix 22000 series SMEM parsing (stable-fixes). - wifi: iwlwifi: mvm: fix P2P-Device binding handling (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: compute the assoc RSSI from the chain signals (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: restore DBDC state after ext PHY failure (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: publish wcid before MCU add commands (git-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7921: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: disable the RX NAPIs before the DMA cleanup (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: nl80211: check link is beaconing for color change (stable-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtl8xxxu: free RX skb when URB submission fails (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - workqueue: Fix unbound pool lifetime for pending pwqs (bsc#1289119). - workqueue: release pwq pools by pool type (bsc#1289119). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/microcode/intel: Reject problematic loading on Granite Rapids systems (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). kernel-devel-nvidia-6.12.0-160100.7.1.noarch.rpm True kernel-source-nvidia-6.12.0-160100.7.1.noarch.rpm True kernel-source-nvidia-6.12.0-160100.7.1.src.rpm True cluster-md-kmp-nvidia64kb-6.12.0-160100.7.1.aarch64.rpm True cluster-md-kmp-nvidia64kb-debuginfo-6.12.0-160100.7.1.aarch64.rpm True dlm-kmp-nvidia64kb-6.12.0-160100.7.1.aarch64.rpm True dlm-kmp-nvidia64kb-debuginfo-6.12.0-160100.7.1.aarch64.rpm True gfs2-kmp-nvidia64kb-6.12.0-160100.7.1.aarch64.rpm True gfs2-kmp-nvidia64kb-debuginfo-6.12.0-160100.7.1.aarch64.rpm True kernel-nvidia64kb-6.12.0-160100.7.1.aarch64.rpm True kernel-nvidia64kb-6.12.0-160100.7.1.nosrc.rpm True kernel-nvidia64kb-debuginfo-6.12.0-160100.7.1.aarch64.rpm True kernel-nvidia64kb-debugsource-6.12.0-160100.7.1.aarch64.rpm True kernel-nvidia64kb-devel-6.12.0-160100.7.1.aarch64.rpm True kernel-nvidia64kb-extra-6.12.0-160100.7.1.aarch64.rpm True kernel-nvidia64kb-extra-debuginfo-6.12.0-160100.7.1.aarch64.rpm True kernel-nvidia64kb-optional-6.12.0-160100.7.1.aarch64.rpm True kernel-nvidia64kb-optional-debuginfo-6.12.0-160100.7.1.aarch64.rpm True kselftests-kmp-nvidia64kb-6.12.0-160100.7.1.aarch64.rpm True kselftests-kmp-nvidia64kb-debuginfo-6.12.0-160100.7.1.aarch64.rpm True ocfs2-kmp-nvidia64kb-6.12.0-160100.7.1.aarch64.rpm True ocfs2-kmp-nvidia64kb-debuginfo-6.12.0-160100.7.1.aarch64.rpm True kernel-syms-nvidia-6.12.0-160100.7.1.aarch64.rpm True kernel-syms-nvidia-6.12.0-160100.7.1.src.rpm True openSUSE-Leap-16.1-31 Security update for MozillaFirefox important SUSE SLFO 1.3 This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-120, bsc#1286955): - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-111497: brotli: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287809). - CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component. - CVE-2026-117861: Sandbox escape in the DOM: Navigation component. - CVE-2026-117862: Privilege escalation due to incorrect boundary conditions in the Networking component. - CVE-2026-117863: Information disclosure due to uninitialized memory in the Audio/Video component. - CVE-2026-117864: Sandbox escape in the Form Manager component. - CVE-2026-117865: Use-after-free in the JavaScript: GC component. - CVE-2026-117866: Privilege escalation due to use-after-free in the Graphics: Canvas2D component. - CVE-2026-117867: Use-after-free in the Layout component. - CVE-2026-117868: Sandbox escape in the DOM: Networking component. - CVE-2026-117869: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117870: Use-after-free in the JavaScript Engine component. - CVE-2026-117871: Invalid pointer in the Graphics component. - CVE-2026-117872: Use-after-free in the JavaScript: Standard Library component. - CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playback component. - CVE-2026-117874: Use-after-free in the Internationalization component. - CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow component. - CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component. - CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component. - CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB component. - CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables component. - CVE-2026-117880: Use-after-free in the XML component. - CVE-2026-117881: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117882: Use-after-free in the Layout component. - CVE-2026-117883: Use-after-free in the DOM: HTML Parser component. - CVE-2026-117884: Use-after-free in the Networking component. - CVE-2026-117885: Use-after-free in the Layout: Grid component. - CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text component. - CVE-2026-117887: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component. - CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine component. - CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT component. - CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component. - CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC: Networking component. - CVE-2026-117893: Incorrect boundary conditions in the Security: PSM component. - CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling component. - CVE-2026-117895: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117896: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables component. - CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component. - CVE-2026-117899: Use-after-free in the Networking: HTTP component. - CVE-2026-117900: Use-after-free in the DOM: Editor component. - CVE-2026-117901: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component. - CVE-2026-117903: Use-after-free in the Audio/Video component. - CVE-2026-117904: Use-after-free in the JavaScript: GC component. - CVE-2026-117905: Use-after-free in the Audio/Video: Playback component. - CVE-2026-117906: Use-after-free in the CSS Parsing and Computation component. - CVE-2026-117907: Use-after-free in the Networking component. - CVE-2026-117908: Use-after-free in the Graphics: ImageLib component. - CVE-2026-117909: Use-after-free in the JavaScript: GC component. - CVE-2026-117910: Invalid pointer in the JavaScript Engine component. - CVE-2026-117911: Use-after-free in the Audio/Video: Playback component. - CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and Computation component. - CVE-2026-117913: Use-after-free in the SVG component. - CVE-2026-117914: Use-after-free in the SVG component. - CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and Inline component. - CVE-2026-117916: Use-after-free in the XSLT component. - CVE-2026-117917: Invalid pointer in the Graphics: WebRender component. - CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component. - CVE-2026-117919: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117920: Use-after-free in the DOM: HTML Parser component. - CVE-2026-117921: Use-after-free in the CSS Parsing and Computation component. - CVE-2026-117922: Use-after-free in the Networking: WebSockets component. - CVE-2026-117923: Use-after-free in the Audio/Video component. - CVE-2026-117924: Use-after-free in the XSLT component. - CVE-2026-117925: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117926: Incorrect boundary conditions in the SVG component. - CVE-2026-117927: Use-after-free in the SVG component. - CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and Computation component. - CVE-2026-117929: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component. - CVE-2026-117931: Use-after-free in the DOM: Events component. - CVE-2026-117932: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation component. - CVE-2026-117934: Use-after-free in the Layout component. - CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component. - CVE-2026-117936: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117937: Invalid pointer in the JavaScript Engine component. - CVE-2026-117938: Use-after-free in the Layout component. - CVE-2026-117939: Use-after-free in the XML component. - CVE-2026-117940: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component. - CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine: JIT component. - CVE-2026-117943: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117944: Use-after-free in the Layout component. - CVE-2026-117945: Incorrect boundary conditions in the XML component. - CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine component. - CVE-2026-117947: Use-after-free in the XML component. - CVE-2026-117948: Use-after-free in the SVG component. - CVE-2026-117949: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML component. - CVE-2026-117951: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117952: Uninitialized memory in the Networking component. - CVE-2026-117953: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117954: Use-after-free in the Layout: Positioned component. - CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly component. - CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component. - CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component. - CVE-2026-117958: Site isolation issue in the Networking: HTTP component. - CVE-2026-117959: Site isolation issue in the DOM: Service Workers component. - CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component. - CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and Fonts component. - CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. - CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers component. - CVE-2026-117964: Use-after-free in the Panning and Zooming component. - CVE-2026-117965: Same-origin policy bypass in the Address Bar component. - CVE-2026-117966: Site isolation issue in the Networking: HTTP component. - CVE-2026-117967: Mitigation bypass in the DOM: Security component. - CVE-2026-117968: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component. - CVE-2026-117970: Race condition in the Disability Access APIs component. - CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview component. - CVE-2026-117972: Use-after-free in the Graphics component. - CVE-2026-117973: Use-after-free in the Networking: DNS component. - CVE-2026-117974: Use-after-free in the XML component. - CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics: WebRender component. - CVE-2026-117976: Site isolation issue in the DOM: Navigation component. - CVE-2026-117977: Other issue in the Console component. - CVE-2026-117978: Incorrect boundary conditions in the Graphics component. - CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender component. - CVE-2026-117980: Use-after-free in the Graphics component. - CVE-2026-117981: Privilege escalation in the Toolkit component. - CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component. - CVE-2026-117983: Use-after-free in the Graphics component. - CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling and Overflow component. - CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics component. - CVE-2026-117986: Use-after-free in the Graphics component. - CVE-2026-117987: Use-after-free in the Graphics component. - CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. - CVE-2026-117989: Use-after-free in the Graphics component. - CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. - CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and Fonts component. - CVE-2026-117992: Information disclosure in the CSS Parsing and Computation component. - CVE-2026-117993: Integer overflow in the Graphics: Text component. - CVE-2026-117994: Use-after-free in the JavaScript: GC component. - CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus Handling component. - CVE-2026-117996: Incorrect boundary conditions in the WebRTC component. - CVE-2026-117997: Sandbox escape due to use-after-free in the Widget component. - CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions component. - CVE-2026-117999: Race condition in the IPC component. - CVE-2026-118000: Information disclosure in the Networking: HTTP component. - CVE-2026-118002: Information disclosure due to race condition in the Networking component. - CVE-2026-118003: Information disclosure in the Networking: DNS component. - CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and Animations component. MozillaFirefox-153.6.0-160100.1.1.aarch64.rpm MozillaFirefox-153.6.0-160100.1.1.src.rpm MozillaFirefox-branding-upstream-153.6.0-160100.1.1.aarch64.rpm MozillaFirefox-debuginfo-153.6.0-160100.1.1.aarch64.rpm MozillaFirefox-debugsource-153.6.0-160100.1.1.aarch64.rpm MozillaFirefox-devel-153.6.0-160100.1.1.noarch.rpm MozillaFirefox-translations-common-153.6.0-160100.1.1.aarch64.rpm MozillaFirefox-translations-other-153.6.0-160100.1.1.aarch64.rpm MozillaFirefox-153.6.0-160100.1.1.ppc64le.rpm MozillaFirefox-branding-upstream-153.6.0-160100.1.1.ppc64le.rpm MozillaFirefox-debuginfo-153.6.0-160100.1.1.ppc64le.rpm MozillaFirefox-debugsource-153.6.0-160100.1.1.ppc64le.rpm MozillaFirefox-translations-common-153.6.0-160100.1.1.ppc64le.rpm MozillaFirefox-translations-other-153.6.0-160100.1.1.ppc64le.rpm MozillaFirefox-153.6.0-160100.1.1.s390x.rpm MozillaFirefox-branding-upstream-153.6.0-160100.1.1.s390x.rpm MozillaFirefox-debuginfo-153.6.0-160100.1.1.s390x.rpm MozillaFirefox-debugsource-153.6.0-160100.1.1.s390x.rpm MozillaFirefox-translations-common-153.6.0-160100.1.1.s390x.rpm MozillaFirefox-translations-other-153.6.0-160100.1.1.s390x.rpm MozillaFirefox-153.6.0-160100.1.1.x86_64.rpm MozillaFirefox-branding-upstream-153.6.0-160100.1.1.x86_64.rpm MozillaFirefox-debuginfo-153.6.0-160100.1.1.x86_64.rpm MozillaFirefox-debugsource-153.6.0-160100.1.1.x86_64.rpm MozillaFirefox-translations-common-153.6.0-160100.1.1.x86_64.rpm MozillaFirefox-translations-other-153.6.0-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-32 Security update for the Linux Kernel important SUSE SLFO 1.3 The SUSE Linux Enterprise 16.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). - CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629). - CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). - CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). - CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073). - CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004). - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). - CVE-2026-31746: s390/zcrypt: Fix memory leak with CCA cards used as accelerator (bsc#1263978). - CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619). - CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541). - CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335). - CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). - CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444). - CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587). - CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). - CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). - CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036). - CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068). - CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). - CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121). - CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141). - CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). - CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). - CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710). - CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897). - CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586). - CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). - CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). - CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501). - CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612). - CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860). - CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). - CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). - CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). - CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013). - CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010). - CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979). - CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972). - CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113). - CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242). - CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). - CVE-2026-52991: sched/psi: fix race between file release and pressure write (bsc#1269134). - CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114). - CVE-2026-53031: bpf: Validate node_id in arena_alloc_pages() (bsc#1269380). - CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388). - CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140). - CVE-2026-53048: gfs2: prevent NULL pointer dereference during unmount (bsc#1269162). - CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). - CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695). - CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412). - CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783). - CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530). - CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965). - CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (bsc#1269969). - CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). - CVE-2026-53109: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy (bsc#1269417). - CVE-2026-53110: s390: always declare expoline thunks (bsc#1269985). - CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (bsc#1269167). - CVE-2026-53114: perf: Extend the bit width of the arch-specific flag (bsc#1269999). - CVE-2026-53126: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (bsc#1269635). - CVE-2026-53129: fs/mbcache: cancel shrink work before destroying the cache (bsc#1269633). - CVE-2026-53142: drm/xe/display: fix oops in suspend/shutdown without display (bsc#1269402). - CVE-2026-53154: mm/hugetlb: restore reservation on error in hugetlb folio copy paths (bsc#1269665). - CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306). - CVE-2026-53180: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888). - CVE-2026-53207: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison (bsc#1269590). - CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686). - CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381). - CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301). - CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256). - CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774). - CVE-2026-53269: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579). - CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815). - CVE-2026-53330: drm/amd/display: Fix out-of-bounds read in (bsc#1270090). - CVE-2026-53336: nvmem: layouts: onie-tlv: fix hang on unknown types (bsc#1270108). - CVE-2026-53337: net: bonding: fix NULL pointer dereference in bond_do_ioctl() (bsc#1270251). - CVE-2026-53341: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (bsc#1270139). - CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1270111). - CVE-2026-53370: perf/x86/intel: Improve validation and configuration of ACR masks (bsc#1271836). - CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). - CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). - CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230). - CVE-2026-63803: hdlc_ppp: sync per-proto timers before freeing hdlc state (bsc#1272284). - CVE-2026-63804: gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1272287). - CVE-2026-63808: exfat: fix potential use-after-free in exfat_find_dir_entry() (bsc#1272260). - CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297). - CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182). - CVE-2026-63828: apparmor: mediate the implicit connect of TCP fast open sendmsg (bsc#1272175). - CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). - CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486). - CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385). - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390). - CVE-2026-63889: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (bsc#1272423). - CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). - CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641). - CVE-2026-63901: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501). - CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877). - CVE-2026-63925: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008). - CVE-2026-63926: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019). - CVE-2026-63941: KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor (bsc#1272869). - CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). - CVE-2026-63969: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484). - CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). - CVE-2026-63985: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963). - CVE-2026-63986: ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure (bsc#1272969). - CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). - CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027). - CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). - CVE-2026-63995: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033). - CVE-2026-63996: ethtool: cmis: require exact CDB reply length (bsc#1273032). - CVE-2026-63997: ethtool: module: avoid leaking a netdev ref on module flash errors (bsc#1273036). - CVE-2026-63998: ethtool: module: call ethnl_ops_complete() on module flash errors (bsc#1273037). - CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure (bsc#1273038). - CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030). - CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). - CVE-2026-64004: net/iucv: fix locking in .getsockopt (bsc#1273804). - CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831). - CVE-2026-64006: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834). - CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). - CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). - CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). - CVE-2026-64027: net: shaper: Reject reparenting of existing nodes (bsc#1273767). - CVE-2026-64033: RDMA/rtrs: Fix use-after-free in path file creation cleanup (bsc#1273134). - CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). - CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). - CVE-2026-64052: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983). - CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272894). - CVE-2026-64055,CVE-2026-64056: net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893). - CVE-2026-64055: net: ethernet: cortina: Drop half-assembled SKB (bsc#1272893). - CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). - CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). - CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). - CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). - CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). - CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). - CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). - CVE-2026-64071: nvme-pci: fix use-after-free in nvme_free_host_mem() (bsc#1273486). - CVE-2026-64073: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490). - CVE-2026-64088: batman-adv: tt: fix negative tt_buff_len (bsc#1273463). - CVE-2026-64089: batman-adv: tt: fix negative last_changeset_len (bsc#1272513). - CVE-2026-64093: batman-adv: tp_meter: directly shut down timer on cleanup (bsc#1273461). - CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). - CVE-2026-64109: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (bsc#1273748). - CVE-2026-64112: rbd: eliminate a race in lock_dwork draining on unmap (bsc#1273741). - CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262). - CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). - CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). - CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749). - CVE-2026-64119: l2tp: use list_del_rcu in l2tp_session_unhash (bsc#1273746). - CVE-2026-64123: net: hsr: defer node table free until after RCU readers (bsc#1273763). - CVE-2026-64125: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346). - CVE-2026-64131: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063). - CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). - CVE-2026-64146: erofs: fix metabuf leak in inode xattr initialization (bsc#1273681). - CVE-2026-64147: pds_core: fix debugfs_lookup dentry leak and error handling (bsc#1273119). - CVE-2026-64148: pds_core: fix error handling in pdsc_devcmd_wait (bsc#1273956). - CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). - CVE-2026-64162: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (bsc#1272366). - CVE-2026-64164: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (bsc#1273957). - CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). - CVE-2026-64177: phonet/pep: disable BH around forwarded sk_receive_skb() (bsc#1272148). - CVE-2026-64179: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() (bsc#1272149). - CVE-2026-64180: mm/memory_hotplug: fix memory block reference leak on remove (bsc#1273679). - CVE-2026-64184: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() (bsc#1272199). - CVE-2026-64185: sysfs: don't remove existing directory on update failure (bsc#1272200). - CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210). - CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (bsc#1272213). - CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). - CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). - CVE-2026-64212: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it (bsc#1272792). - CVE-2026-64214: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() (bsc#1272799). - CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). - CVE-2026-64222: octeontx2-pf: avoid double free of pool->stack on AQ init failure (bsc#1272788). - CVE-2026-64224: octeontx2-pf: fix double free in rvu_rep_rsrc_init() (bsc#1272804). - CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (bsc#1272786). - CVE-2026-64232: block: recompute nr_integrity_segments in blk_insert_cloned_request (bsc#1272791). - CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). - CVE-2026-64239: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() (bsc#1273898). - CVE-2026-64244: drivers/base/memory: set mem->altmap after successful device registration (bsc#1273812). - CVE-2026-64253: kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1273904). - CVE-2026-64256: xfs: don't wrap around quota ids in dqiterate (bsc#1273271). - CVE-2026-64265: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (bsc#1273947). - CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276). - CVE-2026-64269: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg (bsc#1273280). - CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). - CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). - CVE-2026-64286: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (bsc#1274058). - CVE-2026-64287: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (bsc#1273325). - CVE-2026-64294: mm: do file ownership checks with the proper mount idmap (bsc#1273525). - CVE-2026-64296: exfat: bound uniname advance in exfat_find_dir_entry() (bsc#1273975). - CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). - CVE-2026-64298: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (bsc#1273550). - CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). - CVE-2026-64300: perf/aux: Fix page UAF in map_range() (bsc#1273852). - CVE-2026-64307: crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) (bsc#1273567). - CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1274028). - CVE-2026-64316: crypto: caam - use print_hex_dump_devel to guard key hex dumps (bsc#1273598). - CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936). - CVE-2026-64321: nvme: target: rdma: fix ndev refcount leak on queue connect (bsc#1273864). - CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958). - CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305). - CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). - CVE-2026-64326: block: skip sync_blockdev() on surprise removal in bdev_mark_dead() (bsc#1273312). - CVE-2026-64327: usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks (bsc#1273283). - CVE-2026-64354: bpf: Validate BTF repeated field counts before expansion (bsc#1274060). - CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422). - CVE-2026-64364: HID: multitouch: fix out-of-bounds bit access on mt_io_flags (bsc#1273495). - CVE-2026-64368: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (bsc#1273997). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). - CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). - CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868). - CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). - CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603). - CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860). - CVE-2026-64382: smb: client: fix double-free in SMB2_open() replay (bsc#1273291). - CVE-2026-64383: smb: client: fix double-free in SMB2_flush() replay (bsc#1273426). - CVE-2026-64384: smb: client: fix change notify replay double-free (bsc#1274541). - CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay (bsc#1274539). - CVE-2026-64386: smb: client: fix query_info() replay double-free (bsc#1274543). - CVE-2026-64387: smb: client: fix query directory replay double-free (bsc#1274545). - CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). - CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). - CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). - CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077). - CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). - CVE-2026-64415: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup (bsc#1273317). - CVE-2026-64416: mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host (bsc#1273286). - CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). - CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-64434: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref (bsc#1273880). - CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). - CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277). - CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). - CVE-2026-64452: 6lowpan: fix NHC entry use-after-free on error path (bsc#1273460). - CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). - CVE-2026-64458: mm/damon/ops-common: handle extreme intervals in damon_hot_score() (bsc#1273788). - CVE-2026-64460: PCI/IOV: Skip VF Resizable BAR restore on read error (bsc#1273448). - CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). - CVE-2026-64463: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres (bsc#1273273). - CVE-2026-64472: vfio/mlx5: Fix racy bitfields and tighten struct layout (bsc#1274075). - CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). - CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). - CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). - CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). - CVE-2026-64477: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (bsc#1274264). - CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). - CVE-2026-64518: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key() (bsc#1273524). - CVE-2026-64519: NFSD: Fix infinite loop in layout state revocation (bsc#1274252). - CVE-2026-64526: ethtool: tsconfig: fix missing ethnl_ops_complete() (bsc#1274052). - CVE-2026-64534: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error (bsc#1273803). - CVE-2026-64535: nvmet-tcp: Fix potential UAF when ddgst mismatch (bsc#1273809). - CVE-2026-64537: bridge: cfm: reject invalid CCM interval at configuration time (bsc#1273289). - CVE-2026-64538: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1273335). - CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). - CVE-2026-64545: net, bpf: check master for NULL in xdp_master_redirect() (bsc#1273318). - CVE-2026-64548: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (bsc#1273337). - CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813). - CVE-2026-64552: virtio-net: fix len check in receive_big() (bsc#1273323). - CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336). - CVE-2026-64554: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (bsc#1273340). - CVE-2026-64555: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() (bsc#1273331). - CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006). - CVE-2026-64569: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n (bsc#1274009). - CVE-2026-64576: nexthop: initialize extack in nh_res_bucket_migrate() (bsc#1274030). - CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040). - CVE-2026-64586: wifi: brcmfmac: drain bus_reset work on device removal (bsc#1274492). - CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). - CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). - CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). - CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581). - CVE-2026-68086: mm/khugepaged: write all dirty file folios when collapsing (bsc#1274713). - CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). - CVE-2026-68105: drm/amdgpu: Fix kernel panic during driver load failure (bsc#1274849). - CVE-2026-68116: vxlan: mdb: Fix source list corruption on a failed replace (bsc#1274876). - CVE-2026-68117: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (bsc#1274881). - CVE-2026-68120: rtase: Workaround for TX hang caused by hardware packet parsing (bsc#1274887). - CVE-2026-68123: openvswitch: fix GSO userspace truncation underflow (bsc#1275169). - CVE-2026-68124: mctp: serial: handle zero-length frames to prevent rx buffer overflow (bsc#1275192). - CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust (bsc#1275237). - CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238). - CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517). - CVE-2026-68132: super: fix emergency thaw deadlock on frozen block devices (bsc#1275553). - CVE-2026-68133: ice: fix PTP Call Trace during PTP release (bsc#1275555). - CVE-2026-68134: ptp: ptp_s390: Add missing facility check (bsc#1275556). - CVE-2026-68135: net: hip04: fix RX buffer leak on build_skb failure (bsc#1275557). - CVE-2026-68139: net/mlx5e: Use sender devcom for MPV master-up (bsc#1275578). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). - CVE-2026-68142: geneve: require CAP_NET_ADMIN in the device netns for changelink (bsc#1275582). - CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583). - CVE-2026-68144: phonet: pep: fix use-after-free in pep_get_sb() (bsc#1275481). - CVE-2026-68145: iomap: fix out-of-bounds bitmap_set() with zero-length range (bsc#1275584). - CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). - CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). - CVE-2026-68149: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() (bsc#1275294). - CVE-2026-68152: amt: fix use-after-free in AMT delayed works (bsc#1275300). - CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301). - CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303). - CVE-2026-68156: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (bsc#1275305). - CVE-2026-68157: libceph: guard missing CRUSH type name lookup (bsc#1275306). - CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown (bsc#1274892). - CVE-2026-68164: mm/damon/core: disallow overlapping input ranges for damon_set_regions() (bsc#1274955). - CVE-2026-68165: mm/damon/core: validate ranges in damon_set_regions() (bsc#1274927). - CVE-2026-68166: userfaultfd: prevent registration of special VMAs (bsc#1274930). - CVE-2026-68169: mptcp: pm: userspace: fix use-after-free in get_local_id (bsc#1274952). - CVE-2026-68183: firmware: stratix10-svc: fix memory leaks and list corruption bugs (bsc#1274957). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). - CVE-2026-68205: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (bsc#1274934). - CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). - CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704). - CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). - CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). - CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). - CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). - CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). - CVE-2026-68267: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (bsc#1275139). - CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). - CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970). - CVE-2026-68286: drop_monitor: perform u64_stats updates under IRQ-disabled section (bsc#1275973). - CVE-2026-68288: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD (bsc#1275975). - CVE-2026-68289: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() (bsc#1275976). - CVE-2026-68293: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (bsc#1275091). - CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). - CVE-2026-68296: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM (bsc#1275045). - CVE-2026-68297: tipc: fix u16 MTU truncation in media and bearer MTU validation (bsc#1275040). - CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088). - CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083). - CVE-2026-68302: amt: re-read skb header pointers after every pull (bsc#1275081). - CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). - CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665). - CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662). - CVE-2026-68319: pds_core: fix deadlock between reset thread and remove (bsc#1274657). - CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659). - CVE-2026-68321: net: txgbe: fix FDIR filter leak on remove (bsc#1274652). - CVE-2026-68322: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (bsc#1274656). - CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). - CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651). - CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646). - CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645). - CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect (bsc#1274642). - CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect (bsc#1274644). - CVE-2026-68335: rds: drop incoming messages that cross network namespace boundaries (bsc#1274640). - CVE-2026-68336: bonding: fix devconf_all NULL dereference when IPv6 is disabled (bsc#1274639). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). - CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). - CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). - CVE-2026-68375: bnxt_en: Handle partially initialized auxiliary devices (bsc#1274835). - CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831). - CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). - CVE-2026-68386: bpf, sockmap: Reject unhashed UDP sockets on sockmap update (bsc#1274814). - CVE-2026-68393: Bluetooth: hci_sync: extend conn_hash lookup critical sections (bsc#1274904). - CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900). - CVE-2026-68399: bpf: Fix UAF in sock clone early bailouts (bsc#1274897). - CVE-2026-68400: firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (bsc#1274912). - CVE-2026-68408: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (bsc#1274709). - CVE-2026-68418: RDMA/irdma: Prevent user-triggered null deref on QP create (bsc#1274690). - CVE-2026-68419: RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1274698). - CVE-2026-68420: xfrm: reject optional IPTFS templates in outbound policies (bsc#1274701). - CVE-2026-68422: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() (bsc#1274706). - CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700). - CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800). - CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). - CVE-2026-68442: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps (bsc#1274773). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834). - CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). - CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). - CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). - CVE-2026-68470: wifi: mac80211: validate extension-frame layout before RX (bsc#1276500). - CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). - CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). - CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72011: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() (bsc#1276781). - CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). - CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). - CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). - CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). - CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). - CVE-2026-72022: llc: fix SAP refcount leak in llc_ui_autobind() (bsc#1276785). - CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). - CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). - CVE-2026-72032: net/mlx5: HWS, fix matcher leak on resize target setup failure (bsc#1276955). - CVE-2026-72034: fhandle: reject detached mounts in capable_wrt_mount() (bsc#1276957). - CVE-2026-72035: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1276961). - CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034). - CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). - CVE-2026-72046: gve: fix header buffer corruption with header-split and HW-GRO (bsc#1275519). - CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72080: fs/resctrl: Fix use-after-free during unmount (bsc#1277172). - CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). - CVE-2026-72091: accel/amdxdna: reject user command submission without a command BO (bsc#1277238). - CVE-2026-72092: accel/amdxdna: reject command submission on devices without a submit op (bsc#1277269). - CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). - CVE-2026-72100: dm-integrity: fix a bug if the bio is out of limits (bsc#1277311). - CVE-2026-72101: dm-integrity: fix leaking uninitialized kernel memory (bsc#1276831). - CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). - CVE-2026-72103: dm: avoid leaking the caller's thread keyring via the table device file (bsc#1277315). - CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). - CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). - CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). - CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). - CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). - CVE-2026-72132: NFS: Charge unstable writes by request size, not folio size (bsc#1277551). - CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). - CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). - CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). - CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). - CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). - CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). - CVE-2026-72176: mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error (bsc#1277230). - CVE-2026-72177: mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() (bsc#1277227). - CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). - CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). - CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). - CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). - CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). - CVE-2026-72234: batman-adv: access unicast_ttvn skb->data only after skb realloc (bsc#1275672). - CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). - CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). - CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). - CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). - CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). - CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). - CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). - CVE-2026-72254: netfilter: nft_fib: reject fib expression on the netdev egress hook (bsc#1277204). - CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). - CVE-2026-72280: KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 (bsc#1277726). - CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). - CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923). - CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). - CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). - CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). - CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). - CVE-2026-72307: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() (bsc#1277160). - CVE-2026-72308: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() (bsc#1277159). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). - CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). - CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). - CVE-2026-72331: accel/amdxdna: Fix VMA access race (bsc#1277767). - CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773). - CVE-2026-72341: net/mlx5e: Fix publication race for priv->channel_stats[] (bsc#1277660). - CVE-2026-72342: net/mlx5e: Fix HV VHCA stats agent registration race (bsc#1277775). - CVE-2026-72343: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation (bsc#1277776). - CVE-2026-72345: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback (bsc#1277782). - CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). - CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). - CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). - CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). - CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). - CVE-2026-72366: netfs: Fix netfs_create_write_req() to handle async cache object creation (bsc#1276333). - CVE-2026-72370: iomap: release pages on atomic dio size mismatch (bsc#1277799). - CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). - CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). - CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). - CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). - CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). - CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). - CVE-2026-72414: net: dsa: sja1105: round up PTP perout pin duration (bsc#1278039). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). - CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-72430: net/sched: act_ct: fix nf_connlabels leak on two error paths (bsc#1277118). - CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). - CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). - CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). - CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). - CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). - CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). - CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). - CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). - CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). - CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). - CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). - CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). - CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). - CVE-2026-72464: xprtrdma: Post receive buffers after RPC completion (bsc#1277069). - CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057). - CVE-2026-72467: xprtrdma: Check frwr_wp_create() during connect (bsc#1277059). - CVE-2026-72468: xprtrdma: Initialize re_id before removal registration (bsc#1277062). - CVE-2026-72469: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1277047). - CVE-2026-72472: nfs: use nfsi->rwsem to protect traversal of the file lock list (bsc#1277031). - CVE-2026-72473: xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1277037). - CVE-2026-72485: coresight: platform: defer connection counter increment until alloc succeeds (bsc#1276771). - CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). - CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). - CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-72494: RDMA/irdma: Replace waitqueue and flag with completion (bsc#1276941). - CVE-2026-72495: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (bsc#1276937). - CVE-2026-72497: RDMA/bnxt_re: Add a max slot check for SQ (bsc#1276913). - CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown (bsc#1276551). - CVE-2026-72500: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown (bsc#1276552). - CVE-2026-72501: RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1276546). - CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542). - CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). - CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). - CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). - CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). - CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). - CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). - CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). - CVE-2026-74269: bnxt: fix head underflow on XDP head-grow (bsc#1276507). - CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). - CVE-2026-74274: cxl/region: Fill first free targets[] slot during auto-discovery (bsc#1276487). - CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). - CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). - CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). - CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). - CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471). - CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). - CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). - CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). - CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452). - CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446). - CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). - CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). - CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). - CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). - CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). - CVE-2026-74316: NFSD: Handle layout stid in nfsd4_drop_revoked_stid() (bsc#1276870). - CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). - CVE-2026-74318: btrfs: fix deadlock cloning inline extent when using flushoncommit (bsc#1276864). - CVE-2026-74321: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() (bsc#1277202). - CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr->pd (bsc#1277095). - CVE-2026-74336: wifi: mac80211: bound S1G TIM PVB walk to the TIM element (bsc#1277102). - CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285). - CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). - CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). - CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). - CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). - CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). - CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). - CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). - CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). - CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). - CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). - CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). - CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). - CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). - CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). - CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). - CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). - CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). - CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). - CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408). - CVE-2026-74395: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (bsc#1277077). - CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). - CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74400: bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries (bsc#1277076). - CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). - CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). - CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). - CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). - CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). - CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). - CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). - CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335). - CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). - CVE-2026-74477: uprobes: Fix NULL pointer dereference in hprobe_expire() (bsc#1276342). - CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). - CVE-2026-74481: mm/page_reporting: use system_freezable_wq to fix UAF during suspend (bsc#1276355). - CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346). - CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). - CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). - CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). - CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). - CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). - CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864). - CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950). - CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954). - CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). - CVE-2026-74517: KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs (bsc#1276258). - CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). - CVE-2026-74526: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (bsc#1275807). - CVE-2026-74527: octeontx2-af: Block VFs from clobbering special CGX PKIND state (bsc#1275805). - CVE-2026-74533: Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero (bsc#1275804). - CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801). - CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812). - CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). - CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). - CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894). - CVE-2026-74545: rtase: fix double free of multi-frag skb on DMA map failure (bsc#1275679). - CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695). - CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688). - CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). - CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). - CVE-2026-74563: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (bsc#1275574). - CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74566: keys: make keyring key-chunk byte order agree with keyring_diff_objects() (bsc#1275566). - CVE-2026-74567: keys: fix out-of-bounds read in keyring_get_key_chunk() (bsc#1275569). - CVE-2026-74571: btrfs: skip global block reserve accounting for rescue mounts (bsc#1275561). - CVE-2026-74577: net: mpls: initialize rtm_tos in mpls_getroute() (bsc#1275572). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). - CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). - CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). - CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). - CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066). - CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). - CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). - CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). - CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). - CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). - CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). - CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). - CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). - CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). - CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). - CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). - CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). - CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). - CVE-2026-74610: tls: don't leave a full plaintext sk_msg ring unpushed (bsc#1277054). - CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). - CVE-2026-74617: dibs: initialise dibs->lock in dibs_dev_alloc() (bsc#1277815). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). - CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). - CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). - CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). - CVE-2026-74629: net/dibs: Correct freeing of dmb_clientid_arr (bsc#1278189). - CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). - CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). - CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). - CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). - CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). - CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). - CVE-2026-74644: mm/damon/ops-common: putback folios on invalid migrate nid (bsc#1277033). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). - CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). - CVE-2026-74662: inet: frags: publish queues before arming timer (bsc#1277277). - CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). - CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407). - CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). - CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). - CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). - CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). - CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). - CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). - CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). - CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). - CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). - CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). - CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). - CVE-2026-74707: xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h (bsc#1277920). - CVE-2026-74708: xsk: validate launch-time metadata size (bsc#1276915). - CVE-2026-74709: xsk: Fix immature cq descriptor production (bsc#1276578). - CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). - CVE-2026-74712: vdpa/mlx5: Fix buffer length in create_direct_keys() (bsc#1276577). - CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). - CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). - CVE-2026-74716: accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() (bsc#1276571). - CVE-2026-74717: net/mlx5: fw_tracer, return NULL on create error (bsc#1276569). - CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74721: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() (bsc#1276575). - CVE-2026-74722: btrfs: fix memory leak in btrfs_do_encoded_write() (bsc#1276561). - CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). - CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). - CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). - CVE-2026-74730: NFS: Pin the 'struct nfs_server' during a FREE_STATEID call (bsc#1276566). - CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). - CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). - CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). - CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). - CVE-2026-80529: xfs: don't swallow dquot recovery verification errors (bsc#1277688). - CVE-2026-80531: xfs: avoid UAF on sc->tempip in xrep_tempfile_create (bsc#1277680). - CVE-2026-80533: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair (bsc#1277636). - CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022). - CVE-2026-80535: xfs: don't double-lock when deleting a self-referential directory (bsc#1277641). - CVE-2026-80547: s390/vfio_ccw: Implement a crw lock (bsc#1277563 bsc#1284428). - CVE-2026-80548: s390/vfio_ccw: Selectively expand io_mutex (bsc#1277565 bsc#1284428). - CVE-2026-80549: s390/vfio_ccw: Move cp cleanup out of not operational (bsc#1277575 bsc#1284428). - CVE-2026-80550: s390/vfio_ccw: Fix out of bounds check on CCW array (bsc#1277548 bsc#1284428). - CVE-2026-80551: s390/vfio_ccw: Ensure first IDAW remains constant (bsc#1277534 bsc#1284428). - CVE-2026-80552: s390/vfio_ccw: Ensure index for read/write regions are within range (bsc#1277559 bsc#1284428). - CVE-2026-80553: s390/vfio_ccw: Cancel existing workqueues (bsc#1277510 bsc#1284428). - CVE-2026-80554: s390/vfio_ccw: Limit the number of channel program segments (bsc#1277507 bsc#1284428). - CVE-2026-80555: s390/vfio_ccw: Free all memory if cp_init() fails (bsc#1277514 bsc#1284428). - CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). - CVE-2026-80558: libceph: Avoid using invalid osd indices from primary_temp (bsc#1277485). - CVE-2026-80561: libceph: fix multiple unsafe decodes in decode_locker() (bsc#1277265). - CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). - CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). - CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). - CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). - CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). - CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). - CVE-2026-80609: qede: fix out-of-bounds check for cqe->len_list (bsc#1278334). - CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). - CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). - CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). - CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). - CVE-2026-80657: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer (bsc#1277300). - CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). - CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). - CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). - CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245). - CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). - CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). - CVE-2026-80727: x86/mce: Set up the polling timer before CMCI discovery (bsc#1278703). - CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). - CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). - CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). - CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). - CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). - CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). - CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80813: nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() (bsc#1279537). - CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). - CVE-2026-80838: vxlan: keep the last remote linked during FDB flush (bsc#1279842). - CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). - CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). - CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). - CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). - CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). - CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). - CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). - CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). - CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). - CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). - CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). - CVE-2026-80896: add bug number to existing mshv change (bsc#1279462). - CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). - CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). - CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). - CVE-2026-80981: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (bsc#1280268). - CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). - CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). - CVE-2026-80985,CVE-2026-80986: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (bsc#1280262 bsc#1280317). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). - CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). - CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). - CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). - CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). - CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). - CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). - CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). - CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). - CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). - CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). - CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). - CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). - CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). - CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). - CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). - CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). - CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). - CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). - CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). - CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). - CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). - CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). - CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). - CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). - CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). - CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). - CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). - CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). - CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). - CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). - CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89602: erofs: skip sufficiently large global buffers when resizing (bsc#1280827). - CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89619: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer (bsc#1280473). - CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). - CVE-2026-89633: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (bsc#1280867). - CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). - CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). - CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). - CVE-2026-89648: ceph: cap delegated inode count in ceph_parse_deleg_inos() (bsc#1280427). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576). - CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). - CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). - CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). - CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). - CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). - CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). - CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). - CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). - CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). - CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). - CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). - CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). - CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). - CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). - CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). - CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). - CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). - CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). - CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). - CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). - CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). - CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). - CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). - CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). - CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). - CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). - CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). - CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). - CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). - CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). - CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89762: apparmor: fix cred UAF caused by begin_current_label_crit_section() (bsc#1280749). - CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). - CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). - CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). - CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). - CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). - CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). - CVE-2026-89812: drm/amdgpu: force complete the MES ring fences on reset (bsc#1281146). - CVE-2026-89813: drm/amdgpu: force complete the KIQ ring fences on reset (bsc#1281147). - CVE-2026-89814: drm/amdgpu: clamp the isolation index for rings outside a partition (bsc#1281075). - CVE-2026-89815: drm/ttm: Drop tt->restore after successful restore (bsc#1281076). - CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). - CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). - CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). - CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). - CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). - CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). - CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). - CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). - CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). - CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). - CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). - CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). - CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). - CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). - CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). - CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). - CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). - CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). - CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). - CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). - CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). - CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). - CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). - CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). - CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). - CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). - CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). - CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). - CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). - CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). - CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). - CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). - CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). - CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). - CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). - CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). - CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). - CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). - CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). - CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). - CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). - CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). - CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). - CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). - CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). - CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). - CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). - CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). - CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). - CVE-2026-93211: nfsd: initialize DRC hash table before registering shrinker (bsc#1282740). - CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). - CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). - CVE-2026-93284: drm/pagemap: dma-unmap pages before handling migration errors (bsc#1282743). - CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). - CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). - CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). - CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). - CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). - CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). - CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). - CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). - CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). - CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97410: netconsole: take target_cleanup_list_lock in drop_netconsole_target() (bsc#1283082). - CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). - CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). - CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). - CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). - CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). - CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). - CVE-2026-97498: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction (bsc#1282756). - CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). - CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). - CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). - CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). - CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). - CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). - CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). - CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). - CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). - CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). - CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). - CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). - CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). - CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). - CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). - CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). - CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). - CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). - CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). - CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). - CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). - CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). - CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). - CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). - CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). - CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). - CVE-2026-97944: x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() (bsc#1283143). - CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). - CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97988: vhost: invalidate vring access on IOTLB transitions (bsc#1283397). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). - CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). - CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98027: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size (bsc#1283803). - CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). - CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). - CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98039: bpf: Require MEM_PERCPU for percpu kptr stores (bsc#1284063). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98047: bpf: Check ancestor frames for rbtree callbacks (bsc#1284068). - CVE-2026-98058: bpf: Mark syscall helpers as sleepable (bsc#1283848). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). - CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). - CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). - CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98166: drm/ttm: fix swapped-out resources never leaving their bulk_move range (bsc#1284300). - CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). - CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). - CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). - CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). - CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). - CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). - CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). - CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). - CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). - CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). - CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). - CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). - CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). - CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). - CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). - CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). - CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). - CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). - CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). - CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). - CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tables (bsc#1284742). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet header (bsc#1284944). - CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacement (bsc#1284945). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-98466: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (bsc#1286218). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98555: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure (bsc#1286769). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-98720: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (bsc#1286743). - CVE-2026-98895: net/mlx5: HWS, Handle destroying table that has a miss table (bsc#1288009). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-99176: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (bsc#1288703). - CVE-2026-99178: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (bsc#1288713). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). - CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: - accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain (git-fixes). - accel/amdxdna: Set HMM_PFN_REQ_WRITE for writable BO faults (git-fixes). - accel/amdxdna: Skip unmapped range in aie2_populate_range() (git-fixes). - accel/ivpu: Limit firmware log name prints to field size (git-fixes). - accel/ivpu: Validate firmware log buffer metadata (git-fixes). - accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes). - accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes). - accel/qaic: reject BO sizes that overflow page count (git-fixes). - accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status() (git-fixes). - accessibility: speakup: unregister tty ldisc on later init failures (git-fixes). - ACPI: APEI: Fix ERST timeout unit conversion (git-fixes). - ACPI: APEI: GHES: Bound CXL event record copy to the firmware section length (git-fixes). - ACPI: battery: Adjust charging status validation check (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: fan: Fix memory leak due to leftover devm_kcalloc() argument (git-fixes). - ACPI: HMAT: preserve hmat_adist_nb notifier block (git-fixes). - ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes). - ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: fix stack buffer overflow in query_capability() (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: processor: idle: Expand _LPI package sanity checks (git-fixes). - ACPI: processor: validate MADT IOAPIC entry bounds (git-fixes). - ACPI: processor_idle: Mark LPI enter functions as __cpuidle (git-fixes). - ACPI: scan: fix bus ID cleanup on device_add() failures (git-fixes). - ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPI: video: Release PCI device reference after lookup (git-fixes). - ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). - ACPICA: add boundary checks in two places (stable-fixes). - ACPICA: Add package limit checks in parser functions (stable-fixes). - ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes). - ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes). - ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). - ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). - ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes). - ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ACPICA: Prevent adding invalid references (stable-fixes). - ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes). - ACPICA: validate handler object type in two places (stable-fixes). - ALSA: 6fire: bound the MIDI event length from the device (git-fixes). - ALSA: 6fire: Clean ups with guard() (stable-fixes). - ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). - ALSA: 6fire: Fix UAF at error handling during probe (stable-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Check card index validity at probe (stable-fixes). - ALSA: aloop: Don't constrain playback params in notify mode (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: aloop: Update the PCM Slave controls for a matching playback (git-fixes). - ALSA: bcd2000: clear the URB pointers on disconnect (git-fixes). - ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). - ALSA: caiaq: Fix potential double-free at error path (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: caiaq: unregister the input device when probe fails (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: compress: reject restarting an ACTIVE task via origin_seqno (git-fixes). - ALSA: control: Don't add invalid kcontrols to LED layer (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: control_led: Fix deadlock between sysfs writes and card disconnect (git-fixes). - ALSA: core: Add scoped cleanup helper for card references (stable-fixes). - ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). - ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes). - ALSA: core: Fix use-after-free in snd_card_do_free() (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). - ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers (git-fixes). - ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270) (git-fixes). - ALSA: dummy: Check card index validity at probe (stable-fixes). - ALSA: dummy: Report a change when one capture switch channel moves (git-fixes). - ALSA: es18xx: check control allocation before private data setup (stable-fixes). - ALSA: FCP: do not copy out an uninitialised init response (git-fixes). - ALSA: FCP: fix OOB write in fcp_meter_ctl_get() (git-fixes). - ALSA: FCP: Use a private URB for the notification endpoint (git-fixes). - ALSA: harmony: initialize locks before requesting IRQ (git-fixes). - ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). - ALSA: hda/common: Use guard() for mutex locks (stable-fixes). - ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). - ALSA: hda/core: Use guard() for mutex locks (stable-fixes). - ALSA: hda/ext: preserve PPLCCTL bits when clearing reset (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes). - ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes). - ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes). - ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). - ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). - ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes). - ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). - ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). - ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). - ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). - ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). - ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r (stable-fixes). - ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3402VA (git-fixes). - ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). - ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR (git-fixes). - ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). - ALSA: hda/tas2781: Accept V1 calibration data without CRC (git-fixes). - ALSA: hda/tas2781: fix ACPI reference handling (git-fixes). - ALSA: hda/tas2781: Skip invalid TAS2563 UEFI calibration data (git-fixes). - ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). - ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: cix-ipbloq: Avoid build with 32bit archs (git-fixes). - ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). - ALSA: hda: Don't free card at probe error in vga_switcheroo handler (git-fixes). - ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). - ALSA: hda: Fix connection list comparison in proc output (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: intel: Don't free card in the probe work (git-fixes). - ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: hda: Report a change when only the channel status bytes move (git-fixes). - ALSA: hda: restore MFG widget enumeration after core split (git-fixes). - ALSA: hda: trace PCM open only after assigning a stream (git-fixes). - ALSA: hpi: Check transport errors during HPI6000 adapter initialization (git-fixes). - ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes). - ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Protect the index scan against control removal (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Handle period elapsed calls outside the locks (git-fixes). - ALSA: line6: reject oversized playback packets (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: mpu401: Check card index validity at probe (stable-fixes). - ALSA: mpu401: shut down timer before freeing MPU (git-fixes). - ALSA: mtpav: restore negation dropped in guard() conversion (git-fixes). - ALSA: mtpav: shut down output timer before card teardown (git-fixes). - ALSA: mts64: Check card index validity at probe (stable-fixes). - ALSA: oxygen: use helper to activate the SPDIF PCM control (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes). - ALSA: pcm: set timer->private_data before registering the PCM timer (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: pcmtest: Fix a bogus pointer read in snd_pcmtst_pcm_pointer() (git-fixes). - ALSA: pcmtest: handle multiple wraps in random capture fill (git-fixes). - ALSA: pcmtest: Honor the enable parameter (git-fixes). - ALSA: pcmtest: Pin the module while pattern files are open (git-fixes). - ALSA: pcmtest: Reject invalid fill_mode values (git-fixes). - ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (git-fixes). - ALSA: portman2x4: Check card index validity at probe (stable-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). - ALSA: scarlett2: Use a private URB for the notification endpoint (git-fixes). - ALSA: seq: Don't leak the extension cell pointer in the bounce payload (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: midi: Optimize event_input locking with RCU (git-fixes). - ALSA: seq: midi: Serialize input teardown with event_input (git-fixes). - ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). - ALSA: seq: Serialize compat port-info ioctls (git-fixes). - ALSA: serial-u16550: Check card index validity at probe (stable-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Copy FB name string more safely (stable-fixes). - ALSA: ump: Copy safe string name to rawmidi (stable-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: ump: do not touch legacy_rmidi before it exists (git-fixes). - ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion (git-fixes). - ALSA: ump: Update rawmidi name per EP name update (stable-fixes). - ALSA: us122l: mark hwdep mappings VM_MIXEDMAP (git-fixes). - ALSA: us122l: Prevent write upgrades for read mappings (git-fixes). - ALSA: us144mkii: re-anchor capture URBs on resubmission (git-fixes). - ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes). - ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). - ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes). - ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). - ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). - ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git-fixes). - ALSA: usb-audio: Bound packet copies by the PCM buffer size (git-fixes). - ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). - ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes). - ALSA: usb-audio: Complete cleanup after system-resume errors (git-fixes). - ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (git-fixes). - ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). - ALSA: usb-audio: fix OOB write on Type II inbound URBs (git-fixes). - ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). - ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (git-fixes). - ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). - ALSA: usbusx2y: validate URB actual_length in interrupt callback (git-fixes). - ALSA: usx2y: bound the hwdep mmap fault offset (git-fixes). - ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). - ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer() (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: virmidi: Check card index validity at probe (stable-fixes). - ALSA: virtio: reset device before deleting virtqueues (git-fixes). - ALSA: virtio: reset I/O message fill level on prepare (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - Also reflect disabled BATMAN in supported.conf Fixes: d1d27330a5f7 ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). - apparmor: advertise the tcp fast open fix is applied (git-fixes). - arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). - arm64: bti: Disable in-kernel BTI with recent versions of Clang (git-fixes). - arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). - arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable this workaround by default for aarch64. - arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. - arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. - arm64: errata: work around NVIDIA Olympus device store/load ordering (jsc#PED-16701). - arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. - arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). - arm64: hibernate: clone only the linear map that exists at runtime (git-fixes). - arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). - arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). - arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). - arm64: mm: Fix the break-before-make flush range for erratum 2645198 (git-fixes). - arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). - arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). - arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). - arm64: percpu: Fix this_cpu_write() casting (git-fixes). - arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). - arm_mpam: Apply T241-MPAM-6 to 63-bit counters (git-fixes). - arm_mpam: Disable driver unbind to avoid UAF (git-fixes). - arm_mpam: Fix a NULL pointer dereference on unbinding after an error (git-fixes). - ASoC: ab8500: Correct digital interface format setup (git-fixes). - ASoC: ab8500: Repair the DAPM capture graph (git-fixes). - ASoC: ab8500: Reset the audio block before configuring it (git-fixes). - ASoC: ab8500: Skip missing DMIC GPIOs on AB8505 (git-fixes). - ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). - ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git-fixes). - ASoC: adau1761: sort the register default table (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). - ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC (git-fixes). - ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes). - ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). - ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). - ASoC: amd: yc: disable MSI on resume (git-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). - ASoC: apple: mca: increase SERDES reset delay (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: audio-graph-card2: Fix use-after-free in audio_graph2_link_c2c() (git-fixes). - ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). - ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes). - ASoC: codecs: aw88261: reduce log spam (stable-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es8375: use devm_clk_get_optional() for mclk (git-fixes). - ASoC: codecs: es*: Modify the maximum value of DMIC_GAIN (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses (git-fixes). - ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses (git-fixes). - ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). - ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). - ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). - ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). - ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). - ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git-fixes). - ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sma1307: validate setting firmware layout (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd937x: request watchdog IRQs without devm (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa883x: Fix VI sense port channel count (git-fixes). - ASoC: codecs: wsa884x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: Fix VI sense port channel count (git-fixes). - ASoC: cs35l33: drain threaded IRQ before runtime suspend (git-fixes). - ASoC: cs35l34: drain threaded IRQ before runtime suspend (git-fixes). - ASoC: cs35l41: sort the register default table (git-fixes). - ASoC: cs35l45: sort the register default table (git-fixes). - ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). - ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: cs4265: sort the register default table (git-fixes). - ASoC: cx2072x: sort the register default table (git-fixes). - ASoC: dapm: Fix off-by-one check on the second enum channel (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8323: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: es8375: report resume restore errors (git-fixes). - ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS (git-fixes). - ASoC: fs210x: report register restore errors (git-fixes). - ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready (git-fixes). - ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). - ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: fsl_asrc_m2m: Fix bogus compress task pointer assignments (git-fixes). - ASoC: fsl_asrc_m2m: fix pm_runtime usage counter leak on error (git-fixes). - ASoC: fsl_audmix: rework runtime PM handling in probe (git-fixes). - ASoC: fsl_easrc: sort the register default table (git-fixes). - ASoC: fsl_easrc: Use div64_u64 for 64-by-64 division (git-fixes). - ASoC: fsl_micfil: balance mclk enable/disable (git-fixes). - ASoC: fsl_xcvr: free IRQ before canceling reset work (git-fixes). - ASoC: hdac_hda: Allocate the private data at codec driver bind (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Fix hlink refcount leak on component registration failure (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes). - ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). - ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes). - ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Refactor and fix init_config access (git-fixes). - ASoC: Intel: avs: Reset the stream unless it is already prepared (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: Intel: catpt: Complete coredump handling (stable-fixes). - ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). - AsoC: intel: sst: fix PCI device reference leak on probe failure (git-fixes). - ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). - ASoC: loongson: Fix error handling in ACPI property parsing (git-fixes). - ASoC: max9860: sort the register default table (git-fixes). - ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183-afe-pcm: Shorten memif_data table using macros (stable-fixes). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (git-fixes). - ASoC: mediatek: mt8183-afe-pcm: use local `dev` pointer in driver callbacks (stable-fixes). - ASoC: mediatek: mt8183: Check runtime resume during probe (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Constrain UL8 FE to its back end's capabilities (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8189: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8189: Propagate APLL enable errors (git-fixes). - ASoC: mediatek: mt8189: Propagate APLL errors (git-fixes). - ASoC: mediatek: mt8189: Propagate MCK enable errors (git-fixes). - ASoC: mediatek: mt8189: Propagate MCLK errors (git-fixes). - ASoC: mediatek: mt8189: Propagate reg_rw clock errors (git-fixes). - ASoC: mediatek: mt8189: Propagate runtime resume errors (git-fixes). - ASoC: mediatek: mt8189: Propagate TDM clock errors (git-fixes). - ASoC: mediatek: mt8189: Validate MCK ID (git-fixes). - ASoC: mediatek: mt8189: Validate sysclk frequency (git-fixes). - ASoC: mediatek: mt8189: Validate TDM MCLK frequency (git-fixes). - ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable (stable-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: Check runtime resume during probe (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). - ASoC: mediatek: mt8365: Fix out-of-bounds read in get_iir_coef() (git-fixes). - ASoC: mediatek: mt8365: Handle constraint return value in FE startup (git-fixes). - ASoC: meson: Keep link pointers valid on realloc failure (git-fixes). - ASoC: ml26124: sort the register default table (git-fixes). - ASoC: mt6351: Publish the OF module alias (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: pcm512x: sort the register default table (git-fixes). - ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). - ASoC: pcm6240: do not free an unrequested IRQ (git-fixes). - ASoC: pm4125-sdw: sort the register default table (git-fixes). - ASoC: pxa: Use devm_clk_get_optional() for extclk clock (git-fixes). - ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: keep the graph start count in sync with the DSP (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes). - ASoC: qcom: q6asm-dai: wrap the position of a full ring to 0 (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: qcom: sdm845: Disable the quaternary MI2S bit clock on shutdown (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). - ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). - ASoC: rockchip: rockchip_sai: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). - ASoC: rt274: sort the register default table (git-fixes). - ASoC: rt286: sort the register default table (git-fixes). - ASoC: rt298: sort the register default table (git-fixes). - ASoC: rt700-sdw: always drain jack work on remove (git-fixes). - ASoC: rt700: drop duplicate reg_default entry (git-fixes). - ASoC: rt700: sort the register default table (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdca: sort the register default tables (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt711: sort the register default table (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca-dmic: sort the register default table (git-fixes). - ASoC: rt712-sdca-sdw: sort the register default table (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes). - ASoC: rt712: avoid duplicate reset in io_init (git-fixes). - ASoC: rt715-sdca: drop duplicate reg_default entries (git-fixes). - ASoC: rt715-sdca: sort the register default tables (git-fixes). - ASoC: rt715: sort the register default table (git-fixes). - ASoC: rt721-sdca-sdw: sort the register default table (git-fixes). - ASoC: rt721-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1015: make control calibration failures observable (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1017-sdca-sdw: sort the register default table (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt1316-sdw: sort the register default table (git-fixes). - ASoC: rt1318-sdw: sort the register default table (git-fixes). - ASoC: rt1318: return cache sync errors from resume (git-fixes). - ASoC: rt1318: sort the register default table (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get (git-fixes). - ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git-fixes). - ASoC: samsung: midas_wm1811: run FLL1 at the AIF1 configured rate when idle (git-fixes). - ASoC: SDCA: Add better pm_runtime error handling in func probe (git-fixes). - ASoC: SDCA: Check return value on a missing FDL_Set_Index Range (git-fixes). - ASoC: SDCA: Improve scanning the SWFT during FDL (git-fixes). - ASoC: SDCA: propagate sdw_slave_read_prop() failure in class_read_prop (git-fixes). - ASoC: sdw_utils: clear stale RT711 device reference on exit (git-fixes). - ASoC: sgtl5000: sort the register default table (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-card-test: Check return value of kunit_device_register() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-link: Correct stream stop operations in snd_soc_link_trigger (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_probe() error unwind ordering (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout (git-fixes). - ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). - ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture (git-fixes). - ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes). - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes). - ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() (git-fixes). - ASoC: SOF: topology: Use acpi mach from the machine driver (git-fixes). - ASoC: SOF: validate topology volume range before allocation (git-fixes). - ASoC: spacemit: advertise only DMA-backed DAI streams (git-fixes). - ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes). - ASoC: sta32x: make power restoration transactional (git-fixes). - ASoC: sti-sas: sort the register default table (git-fixes). - ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). - ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). - ASoC: tas2552: sort the register default table (git-fixes). - ASoC: tas2764: sort the register default table (git-fixes). - ASoC: tas2780: sort the register default table (git-fixes). - ASoC: tas2781: fix clang build error for goto bypassing cleanup variable (git-fixes). - ASoC: tas2781: Fix TAS2781/TAS5825 PPC version logic conflict (git-fixes). - ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). - ASoC: tas2783-sdw: drop duplicate reg_default entry (git-fixes). - ASoC: tas2783-sdw: sort the register default table (git-fixes). - ASoC: tegra210_i2s: sort the register default table (git-fixes). - ASoC: tegra210_i2s: sort the Tegra264 register default table (git-fixes). - ASoC: tegra210_mixer: sort the register default table (git-fixes). - ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). - ASoC: tegra: Fix the I2S enable default value (git-fixes). - ASoC: tegra: Fix the MIXER enable default value (git-fixes). - ASoC: tegra: Sort ADMAIF register defaults (git-fixes). - ASoC: tegra: Sort MBDRC register defaults (git-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes). - ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks (git-fixes). - ASoC: ux500: Allow repeated MSP prepare calls (git-fixes). - ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). - ASoC: ux500: Deassert the MSP reset during probe (git-fixes). - ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). - ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). - ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). - ASoC: ux500: Propagate MSP setup errors (git-fixes). - ASoC: ux500: Remove obsolete PRCMU QoS calls (stable-fixes). - ASoC: ux500: Request the MSP MMIO resource (git-fixes). - ASoC: ux500: Validate MSP DAI configuration (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes). - ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - ASoC: xilinx: formatter_pcm: fix stream_data leak on open error (git-fixes). - ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). - ata: ahci_st: Do not ignore errors when getting the reset controls (git-fixes). - ata: libahci: Free the IRQs when activating a multi-IRQ host fails (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_dwc_460ex: Don't enable interrupt if libATA core registration fails (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - auxdisplay: charlcd: cancel backlight work on registration failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - batman-adv: bla: fix freeing of claims on meshif deletion (git-fixes). - batman-adv: bla: prevent CRC corruptions after claim flush (git-fixes). - batman-adv: dat: avoid unaligned fault in IP extraction (git-fixes). - batman-adv: fix stale receive device on merged fragments (git-fixes). - batman-adv: mcast: ensure unshared skb for multicast packets (git-fixes). - batman-adv: mcast: linearize skbuff for packet generation (git-fixes). - batman-adv: reject unrepresentable multicast TVLV offsets (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). - Bluetooth: btintel: bound firmware ID by TLV length (git-fixes). - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). - Bluetooth: btintel: Fix diagnostics event detection (git-fixes). - Bluetooth: btintel: validate DDC record lengths (git-fixes). - Bluetooth: btintel: validate version TLV value lengths (git-fixes). - Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). - Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). - Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes). - Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes). - Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). - Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). - Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes). - Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git-fixes). - Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). - Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). - Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git-fixes). - Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). - Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes). - Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). - Bluetooth: btmtk: Do not discard the subsystem reset timeout (git-fixes). - Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read() (stable-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes). - Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). - Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path (git-fixes). - Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). - Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX (git-fixes). - Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event (git-fixes). - Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes). - Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). - Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). - Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). - Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). - Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). - Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). - Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). - Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). - Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). - Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). - Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855() (git-fixes). - Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). - Bluetooth: btusb: Fix short read errors in btusb_qca_send_vendor_req() (stable-fixes). - Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). - Bluetooth: btusb: mediatek: Fix leaked runtime PM reference in reset (git-fixes). - Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). - Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). - Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). - Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes). - Bluetooth: btusb: refactor endpoint lookup (stable-fixes). - Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). - Bluetooth: do not leak an hci_conn when a second LE connect is rejected (git-fixes). - Bluetooth: eir: Fix OOB read in eir_get_service_data() (git-fixes). - Bluetooth: eir: validate service data length before reading UUID (git-fixes). - Bluetooth: hci_aml: validate firmware segment lengths (git-fixes). - Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378 (git-fixes). - Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative (git-fixes). - Bluetooth: hci_codec: validate vendor codec count length (git-fixes). - Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). - Bluetooth: hci_conn: fix the SCO setup context lifetime (git-fixes). - Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (git-fixes). - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes). - Bluetooth: hci_conn: re-enable advertising only for peripheral role (git-fixes). - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes). - Bluetooth: hci_core: Fix race condition during device registration (git-fixes). - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). - Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git-fixes). - Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). - Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection (git-fixes). - Bluetooth: hci_event: fix LE list UAF on reset (git-fixes). - Bluetooth: hci_event: validate LE Set CIG Parameters response (git-fixes). - Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative (git-fixes). - Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative (git-fixes). - Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). - Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). - Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). - Bluetooth: hci_sock: validate event length before filtering (git-fixes). - Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request (git-fixes). - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). - Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). - Bluetooth: hci_sync: Fix command skb lifetime during scan setup (git-fixes). - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths (git-fixes). - Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists (stable-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). - Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). - Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() (git-fixes). - Bluetooth: hci_uart: Fix false success return in hci_uart_setup() (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). - Bluetooth: ISO: do not force BT_LISTEN after a failed BIG sync (git-fixes). - Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). - Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: ISO: lock sk in iso_sock_getname (git-fixes). - Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). - Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). - Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). - Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). - Bluetooth: ISO: zero the sockaddr before returning it in getname (git-fixes). - Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). - Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes). - Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). - Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes). - Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync (git-fixes). - Bluetooth: mgmt: fix pending command UAF in EIR updates (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). - Bluetooth: MGMT: Fix status of pending commands flushed on power off (git-fixes). - Bluetooth: mgmt: fix UAF in pair command cancellation (git-fixes). - Bluetooth: MGMT: free the HCI command when it is cancelled (git-fixes). - Bluetooth: MGMT: free the mesh send cancel command when it is cancelled (git-fixes). - Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: MSFT: validate evt_prefix_len against the response length (git-fixes). - Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). - Bluetooth: qca: fix NVM tag length underflow in TLV parser (git-fixes). - Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes). - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). - Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git-fixes). - Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). - Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes). - Bluetooth: RFCOMM: serialize security confirmation handling (git-fixes). - Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (git-fixes). - Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (git-fixes). - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). - Bluetooth: virtio_bt: avoid OOB read of build info string (git-fixes). - bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). - bnxt_en: Check return value of bnxt_hwrm_vnic_cfg (jsc#PED-16798). - bnxt_en: Delay for 5 seconds after AER DPC for all chips (jsc#PED-16798). - bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() (jsc#PED-16798). - bnxt_en: Drop pci_save_state() after pci_restore_state() (jsc#PED-16798). - bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). - bnxt_en: Implement XDP RSS hash metadata extraction (jsc#PED-16798). - bnxt_en: Implement XDP RSS hash metadata extraction for V3_CMP (jsc#PED-16798). - bnxt_en: Move bnxt_rss_ext_op into header (jsc#PED-16798). - bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). - bnxt_en: Refactor some basic ring setup and adjustment logic (jsc#PED-16798). - bnxt_en: Restore default stat ctxs for ULP when resource is available (jsc#PED-16798). - bnxt_en: Set bp->max_tpa according to what the FW supports (jsc#PED-16798). - bnxt_en: Use absolute target ns from ptp_clock_request (jsc#PED-16798). - bnxt_en: use bnxt_xdp_buff for xdp context (jsc#PED-16798). - bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). - bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). - bpf, x86: Fix timed may_goto with private stack (git-fixes). - btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). - btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). - btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation (git-fixes). - bus: mhi: host: Fix controller cleanup on EDL sysfs failure (git-fixes). - bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET (git-fixes). - bus: ti-sysc: Fix /chosen node reference leak (git-fixes). - cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64) (git-fixes). - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). - can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking (stable-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - char: xilinx_hwicap: unregister class on init errors (git-fixes). - cleanup: add a scoped version of CLASS() (stable-fixes). - cleanup: fix scoped_class() (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - compiler_types: Introduce __flex_counter() and family (bsc#1280139). - config.conf: Exclude rt and azure from kernel-syms. - config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). - cpufreq: intel_pstate: Add and use hybrid_get_cpu_type() (bsc#1240957 bsc#1249104 bsc#1265220). - cpufreq: intel_pstate: Avoid SMP calls to get cpu-type (bsc#1240957 bsc#1249104 bsc#1265220). - cpufreq: intel_pstate: Fix hwp_get_cpu_scaling() (bsc#1240957 bsc#1249104 bsc#1265220). - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (bsc#1240957 bsc#1249104 bsc#1265220). - cpufreq: intel_pstate: Use CPPC to get scaling factors (bsc#1240957 bsc#1249104 bsc#1265220). - cpufreq: intel_pstate: Use HYBRID_SCALING_FACTOR_ADL for Bartlett Lake (bsc#1240957 bsc#1249104 bsc#1265220). - crypto: algif_skcipher - rewind rounded output bytes (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: aspeed - Propagate platform_get_irq() errors (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha204a - fix heap info leak on I2C transfer failure (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - use scatterlist length before DMA mapping (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccm - Set rfc4309 maxauthsize from child (git-fixes). - crypto: ccp - Abort doing SEV INIT if SNP INIT fails (stable-fixes). - crypto: ccp - Add new SEV/SNP platform shutdown API (stable-fixes). - crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). - crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (git-fixes). - crypto: ccp - Fix __sev_snp_shutdown_locked (git-fixes). - crypto: ccp - Fix dereferencing uninitialized error pointer (git-fixes). - crypto: ccp - Fix memory leak in SEV INIT_EX path (git-fixes). - crypto: ccp - Fix possible deadlock in SEV init failure path (git-fixes). - crypto: ccp - Fix SNP panic notifier unregistration (git-fixes). - crypto: ccp - Initialize DBC ioctl mutex before registering device (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (stable-fixes). - crypto: ccp - Move SEV/SNP Platform initialization to KVM (stable-fixes). - crypto: ccp - Register SNP panic notifier only if SNP is enabled (stable-fixes). - crypto: ccp - Reset TMR size at SNP Shutdown (stable-fixes). - crypto: doc - Remove extra parenthesis (git-fixes). - crypto: hisilicon/hpre - enable all clusters clock gating (stable-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: hisilicon/sec2 - fix CCM algorithm long packet failure (git-fixes). - crypto: keembay - Fix AEAD unregister count in error path (git-fixes). - crypto: keembay - Initialize completion before requesting IRQ (git-fixes). - crypto: keembay - publish OF module alias for OCS AES/SM4 (git-fixes). - crypto: lskcipher - preserve state across unaligned chunks (git-fixes). - crypto: lskcipher - propagate errors from unaligned crypt (git-fixes). - crypto: mxs-dcp - fix source scatterlist length access (git-fixes). - crypto: mxs-dcp - handle zero-length skcipher requests (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - cancel work on re-enable SR-IOV timeout (git-fixes). - crypto: qat - clear AES key schedule from stack (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix error source for QAT GEN6 transmit interface faults (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: qce - fix CCM AAD buffer underallocation (git-fixes). - crypto: qce - fix error path in devm_qce_register_algs (git-fixes). - crypto: qcom-rng - Allow zero as a random number (git-fixes). - crypto: qcom-rng - Enable clock in hwrng case (git-fixes). - crypto: rk3288 - fail ahash requests on HASH idle timeout (git-fixes). - crypto: sa2ul - stop probe if context pool creation fails (git-fixes). - crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (stable-fixes). - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (git-fixes). - cxl/acpi: Fix CXL_ACPI and CXL_PMEM Kconfig tristate mismatch (git-fixes). - cxl: Adjust the startup priority of cxl_pmem to be higher (git-fixes). - default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (bsc#1280139). - device property: fix infinite loop in fwnode_for_each_child_node() (git-fixes). - devlink: Fix parent ref leak on tc-bw failure (git-fixes). - dibs: change dibs_class to a const struct (git-fixes). - dibs: Unregister dibs_class after error (git-fixes). - dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). - dma-mapping: add __dma_from_device_group_begin()/end() (bsc#1267586). - dmaengine: Add devm_dma_request_chan() (stable-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes). - dmaengine: dw-edma: Clear stale requests on termination (git-fixes). - dmaengine: dw-edma: Complete descriptors before pausing (git-fixes). - dmaengine: dw-edma: Fix HDMA channel status register access (git-fixes). - dmaengine: dw-edma: Initialize IRQ data before requesting IRQs (git-fixes). - dmaengine: dw-edma: Serialize abort state updates (git-fixes). - dmaengine: dw-edma: Serialize channel state checks (git-fixes). - dmaengine: dw-edma: Terminate all descriptors without callbacks (git-fixes). - dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). - dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). - dmaengine: fsl-edma: tracing: no ptr dereference during log output (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure (git-fixes). - dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). - dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes). - dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). - dmaengine: wait for RCU readers before releasing dma_device (git-fixes). - dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers (git-fixes). - dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout (git-fixes). - dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). - dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - dmaengine: xilinx_dma: Move descriptors to done list based on completion bit (git-fixes). - dmaengine: zynqmp_dma: fix kernel doc for zynqmp_dma_remove() (git-fixes). - Documentation: devres: Remove non-existent SPI register helpers (git-fixes). - Documentation: RAS: Use the real EDAC PCI parity control names (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - dpaa2-ptp: fix support for PTP_EXTTS_REQUEST2 ioctl (git-fixes). - dpll: use exact lookup for reference sync pin id (git-fixes). - driver core: Export get_dev_from_fwnode() (stable-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - driver core: soc: Unregister bus on early device registration failure (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drivers/virt: pkvm: Fix end calculation in mmio_guard_ioremap_hook() (git-fixes). - Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). - Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes). - Drivers: hv: Use meaningful errnos for hypercall status codes (git-fixes). - Drivers: hv: vmbus: Add vmbus_alloc_buffer()/vmbus_free_buffer() for CoCo VMs (bsc#1282646). - Drivers: hv: vmbus: add vmbus_establish_gpadl_caller_decrypted() (bsc#1282646). - Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). - Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). - Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (git-fixes). - drm/amd/amdgpu: disable ASPM on VI if pcie dpm is disabled (git-fixes). - drm/amd/display: Add AV mute wait frames to dce110_set_avmute (stable-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: avoid divide-by-zero in __is_lut_linear() (git-fixes). - drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes). - drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes). - drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). - drm/amd/display: Check for tg ops in dce110_set_avmute (git-fixes). - drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). - drm/amd/display: copy function name into dcn_fpu trace event (git-fixes). - drm/amd/display: copy function name into dcn_optc_lock_unlock_state trace event (git-fixes). - drm/amd/display: dce100: skip non-DP stream encoders for DP MST (stable-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes). - drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix (git-fixes). - drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE (git-fixes). - drm/amd/display: Fix CRC open failure during active rendering (stable-fixes). - drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes). - drm/amd/display: fix dc_lock leak on GPU reset error paths (git-fixes). - drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes). - drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). - drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes). - drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank() (git-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames (stable-fixes). - drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: Remove unused-but-set variable hubp from (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/display: validate plane degamma LUT size for private color prop (git-fixes). - drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes). - drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). - drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). - drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). - drm/amd/pm: adjust the visibility of pp_table sysfs node (stable-fixes). - drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). - drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git-fixes). - drm/amd/pm: fix smu14 power limit range calculation (stable-fixes). - drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). - drm/amd/pm: make pp_features read-only when scpm is enabled (stable-fixes). - drm/amd/pm: Use same metric table for APU (stable-fixes). - drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). - drm/amdgpu/gfx6: Fixup emit_cntxcntl() (git-fixes). - drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets (git-fixes). - drm/amdgpu/gfx6: Use PFP on the compute queues too (git-fixes). - drm/amdgpu/gfx8: drop unecessary BUG_ON() (stable-fixes). - drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/gfx: fix cleaner shader IB buffer overflow (git-fixes). - drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup (git-fixes). - drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup (git-fixes). - drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() (stable-fixes). - drm/amdgpu/userq: fix struct drm_amdgpu_info_device padding for 32bit compile (git-fixes). - drm/amdgpu/userq: only accept doorbell BOs as queue doorbell (git-fixes). - drm/amdgpu/userq: return the memdup_user() error for the user MQD (git-fixes). - drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). - drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) (stable-fixes). - drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older (stable-fixes). - drm/amdgpu/vce: fix integer overflow in image size (stable-fixes). - drm/amdgpu/vcn4: avoid rereading IB param length (stable-fixes). - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (git-fixes). - drm/amdgpu: add a helper to calculate ring distance (stable-fixes). - drm/amdgpu: cap GTT size to physical RAM on APUs (stable-fixes). - drm/amdgpu: check ASPM on the dGPU host link (git-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: check ras and obj before dereference (git-fixes). - drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). - drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git-fixes). - drm/amdgpu: disallow multiple FENCE chunks in one submit (git-fixes). - drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git-fixes). - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). - drm/amdgpu: Failed to check various return code (stable-fixes). - drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). - drm/amdgpu: fix aperture iounmap skipped on device removal (git-fixes). - drm/amdgpu: fix autosuspend cleanup during removal (git-fixes). - drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved (stable-fixes). - drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). - drm/amdgpu: fix division by zero with invalid uvd dimensions (stable-fixes). - drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init() (git-fixes). - drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). - drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (stable-fixes). - drm/amdgpu: fix nbif 6.3.1 l1 low power not functional (git-fixes). - drm/amdgpu: fix rmmio iounmap skipped on device removal (git-fixes). - drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes). - drm/amdgpu: Fix UVD decode image min size calculation (stable-fixes). - drm/amdgpu: Fix UVD dpb min size calculation for H264 (stable-fixes). - drm/amdgpu: Fix UVD min buffer sizes (stable-fixes). - drm/amdgpu: Fix VCE 3 ring align_mask (git-fixes). - drm/amdgpu: Fix VFCT bus number matching with soft filter (stable-fixes). - drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). - drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). - drm/amdgpu: give each kernel job a unique id (stable-fixes). - drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). - drm/amdgpu: Implement insert_end for VCE 3 (git-fixes). - drm/amdgpu: invoke pm_genpd_remove() before freeing genpd (stable-fixes). - drm/amdgpu: make Mac FB workaround generic (stable-fixes). - drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini (git-fixes). - drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). - drm/amdgpu: re-enable GFXOFF for compute on GFX12 (git-fixes). - drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12 (git-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: reject oversized IBs with per-ring packet limits (stable-fixes). - drm/amdgpu: Reject UVD message with dimensions above 4096 (stable-fixes). - drm/amdgpu: Reject UVD message with invalid number of h265 refs (stable-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: remove unused function parameter (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). - drm/amdgpu: restore UMD profile pstate after runtime resume (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). - drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). - drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). - drm/amdgpu: validate GEM_CREATE domain combinations (stable-fixes). - drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). - drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes). - drm/amdkfd: Check bounds in allocate_event_notification_slot (stable-fixes). - drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). - drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). - drm/amdkfd: Don't acquire buffers during CRIU queue restore (git-fixes). - drm/amdkfd: don't drop an SVM CWSR reference that was never taken (git-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (stable-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (stable-fixes). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/amdkfd: fix QID bit leak in pqm_create_queue() (stable-fixes). - drm/amdkfd: fix SMI event cross-process information leak (stable-fixes). - drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). - drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore (git-fixes). - drm/amdkfd: Handle invalid event type in CRIU event restore (stable-fixes). - drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). - drm/amdkfd: Properly acquire queue buffers in CRIU restore (stable-fixes). - drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). - drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping (git-fixes). - drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). - drm/amdkfd: Use kvcalloc to allocate arrays (stable-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/amdkfd: wait for a GPU reset before freeing a BO (git-fixes). - drm/appletbdrm: Add suspend and resume support (git-fixes). - drm/appletbdrm: Fix incorrect error message on encoder attach failure (git-fixes). - drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). - drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes). - drm/aspeed: Balance the display clock enable on teardown (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/bridge: cdns-dsi: Return an error pointer on allocation failure (git-fixes). - drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure (git-fixes). - drm/bridge: display-connector: don't autoenable HPD IRQ (git-fixes). - drm/bridge: display-connector: trigger initial HPD event for DP (git-fixes). - drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure (git-fixes). - drm/bridge: ps8640: propagate AUX transfer register errors (git-fixes). - drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). - drm/bridge: tc358767: clamp the reported AUX read size to the request (git-fixes). - drm/bridge: tc358768: Enforce input bus flags via atomic_check (git-fixes). - drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes). - drm/cirrus-qemu: Validate BAR0 size during probe (git-fixes). - drm/cirrus: Use video aperture helpers (stable-fixes). - drm/connector/hdmi: Fix out of bounds memory read (git-fixes). - drm/connector: Fix epoch_counter docs to reflect reality (git-fixes). - drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes). - drm/dp: don't mark the AUX backlight enabled when enabling failed (git-fixes). - drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). - drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). - drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). - drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). - drm/gud: don't keep a connector without a CRTC as connector_state (git-fixes). - drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). - drm/gud: NUL-terminate TV mode names read from the device (git-fixes). - drm/gud: validate TV mode names before creating enum property (git-fixes). - drm/hibmc: Fix list of formats on the primary plane (git-fixes). - drm/hibmc: Use drm_atomic_helper_check_plane_state() (git-fixes). - drm/i915/crt: convert to struct intel_display (stable-fixes). - drm/i915/cx0_phy: Fix ARL-S host bridge detection (git-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/display: pass display to intel_crtc_for_pipe() (stable-fixes). - drm/i915/dmc: Add sanity check for DMC load address (git-fixes). - drm/i915/dmc: Harden DMC firmware payload parsing (git-fixes). - drm/i915/dp_mst: Fix configuring FEC for a disconnected stream (stable-fixes). - drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). - drm/i915/hdcp: check streams bounds before overflow (git-fixes). - drm/i915/hdcp: Move to using intel_display in intel_hdcp (stable-fixes). - drm/i915/hdcp: require monotonically increasing seq_num_v (git-fixes). - drm/i915/hdcp: Skip inactive MST connectors when building stream list (stable-fixes). - drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). - drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable() (stable-fixes). - drm/i915/vrr: require valid min/max vfreq for VRR (git-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: fix incorrect RCU teardown order (git-fixes). - drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). - drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imagination: clamp freelist reconstruction requests (git-fixes). - drm/imagination: Fix page count for page table for map() interface (git-fixes). - drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). - drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). - drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). - drm/imagination: Size page table preallocation by device address (git-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/lima: call drm_mm_init() with a valid allocation range (git-fixes). - drm/log: Fix infinite loop when scale is too large for display (git-fixes). - drm/log: Fix out-of-bounds read on empty message length (git-fixes). - drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes). - drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). - drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). - drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). - drm/msm/a6xx: Fix A621 GPUCC register list for state capture (git-fixes). - drm/msm/a6xx: Fix A663 GPUCC register list for state capture (git-fixes). - drm/msm/a6xx: Fix RBBM_CLOCK_CNTL3_TP0 value in a730_hwcg (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: Fix stale rpmh votes after suspend (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). - drm/msm/dp: add missing drm_edid_connector_update() before add_modes on cached EDID (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dp: Initialize the debugfs connector pointer (git-fixes). - drm/msm/dpu: clear pending peripheral flush state (git-fixes). - drm/msm/dpu: compute the CRTC bandwidth from the state being checked (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0) (git-fixes). - drm/msm/dpu: round up the compressed INTF width (git-fixes). - drm/msm/dsi: Drop dev_pm_opp_set_rate(0) (git-fixes). - drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value (git-fixes). - drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). - drm/msm/hdmi: Handle msm_hdmi_power_on() errors during .atomic_pre_enable() (git-fixes). - drm/msm/hdmi_bridge: Correct poweroff/audio cleanup order in post_disable (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Only fini scheduler after successful init (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/msm: Recover HW before retire hung submit (git-fixes). - drm/nouveau/bios: skip the IFR header if present (stable-fixes). - drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes). - drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). - drm/nouveau/disp/r535: Add scanline position support + head state support (git-fixes). - drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes). - drm/nouveau/disp: fix HDMI GCP AVMute register offsets on GB20x (git-fixes). - drm/nouveau/disp: fix HDMI vendor infoframes on GB20x (git-fixes). - drm/nouveau/disp: fix head state readback on GB20x (git-fixes). - drm/nouveau/disp: move GSP head-timing ISR and vblank helpers to tu102.c (git-fixes). - drm/nouveau/disp: move the GSP HDMI GCP AVMute write to engine/disp (git-fixes). - drm/nouveau/disp: route GSP-RM display MMIO through nvkm_disp_func hooks (git-fixes). - drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP (git-fixes). - drm/nouveau/gsp: fix vblank interrupts on GB20x (git-fixes). - drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini() (git-fixes). - drm/nouveau/gsp: use per-version DP_CONFIG_STREAM params on r570 firmware (git-fixes). - drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC) (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). - drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes). - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). - drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). - drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). - drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). - drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). - drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes). - drm/nouveau: Use write-combined maps for coherent (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/omap: dsi: Do not copy isr table (git-fixes). - drm/panel-edp: fix i2c adapter leak on probe failure (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes). - drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). - drm/panel: samsung-s6d16d0: Power off on prepare failure (git-fixes). - drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panic: Do not use un-escaped URL as format string (git-fixes). - drm/panic: Test address from kmap op for NULL (git-fixes). - drm/panthor: fix firmware control interface bounds checks (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: harden firmware build-info bounds checks (git-fixes). - drm/panthor: return PTR_ERR() from devm_drm_dev_alloc() (git-fixes). - drm/panthor: skip zero-sized firmware sections (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/radeon: fix autosuspend cleanup during teardown (git-fixes). - drm/radeon: fix r100_copy_blit for large BOs (stable-fixes). - drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). - drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression (git-fixes). - drm/rockchip: analogix_dp: Enable hclk for RK3588 (git-fixes). - drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup (git-fixes). - drm/rockchip: analogix_dp: fix unchecked bound endpoint name length (git-fixes). - drm/rockchip: rk3066_hdmi: Add missing Kconfig selects (git-fixes). - drm/rockchip: vop2: Add RK3576 to the RG swap special case (git-fixes). - drm/rockchip: vop2: Fix wrong wait target in layer cfg done check (git-fixes). - drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format (git-fixes). - drm/rockchip: vop2: Wait for layer cfg done before switching LAYERSEL_REGDONE_SEL (git-fixes). - drm/sched: Create a fake device for KUnit tests (git-fixes). - drm/ssd130x: fix column and row end address in partial updates for ssd132x (git-fixes). - drm/ssd130x: fix column and row end address in partial updates in ssd133x (git-fixes). - drm/sun4i: crtc: Propagate layer initialization error (git-fixes). - drm/sun4i: Drop node references while building component list (git-fixes). - drm/sun4i: dw-hdmi: Drop TCON TOP port reference (git-fixes). - drm/sun4i: fix refcount leak in sun4i_backend_init_sat() (git-fixes). - drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz (git-fixes). - drm/sun4i: hdmi: Don't leak sync polarity bits into packet control (git-fixes). - drm/sun4i: tcon: Drop remote endpoint reference (git-fixes). - drm/sun4i: tcon: Drop TCON TOP device reference (git-fixes). - drm/sun4i: tcon: Set output mux for DSI and LVDS (git-fixes). - drm/sun4i: vi scaler: Fix coefficient selection (git-fixes). - drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation (git-fixes). - drm/sysfb: ofdrm: Fix is_avivo() constant comparison bug (git-fixes). - drm/sysfb: simpledrm: Improve framebuffer-size validation (git-fixes). - drm/sysfb: simpledrm: Improve panel-size validation (git-fixes). - drm/sysfb: simpledrm: Improve stride validation (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader (git-fixes). - drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/tve200: add OF module alias for autoloading (git-fixes). - drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). - drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Free the BO cache size list on teardown (git-fixes). - drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). - drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). - drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). - drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes). - drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes). - drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes). - drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). - drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). - drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm/vmwgfx: validate pitch coming from userspace (git-fixes). - drm/xe/hwmon: document DG2 fan speed reporting quirk (git-fixes). - drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums (git-fixes). - drm/xe/oa: Check managed mutex initialization errors (git-fixes). - drm/xe/oa: Fix sync entry leak on OA config emit failure (git-fixes). - drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes). - drm/xe/oa: Zero OA buffer at allocation (git-fixes). - drm/xe/shrinker: Return the freed page count through a parameter (git-fixes). - drm/xe/xe_gt_idle: Add CCS to the powergating info print (git-fixes). - drm/xe: Fix xe_device_probe() failure (git-fixes). - drm/xe: Introduce xe_gt_dbg_printer() (stable-fixes). - drm/xe: Keep walking on SVM eviction failure (git-fixes). - drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). - drm/xe: Order ring writes before ring tail updates (git-fixes). - drm/xe: skip eviction of a BO with no resource (git-fixes). - drm/xe: Stub out new pagefault layer (stable-fixes). - drm/xe: tests: fix error message in xe_migrate_sanity_test() (git-fixes). - drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). - drm: add drm_memory_stats_is_zero (stable-fixes). - drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes). - drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes). - drm: fix race between partial drm_dev_register() failure and ioctl (git-fixes). - drm: lcdif: Wait for vblank before disabling DMA (git-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - drm: Remove unused header in drm_dumb_buffers.c (git-fixes). - drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (stable-fixes). - drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes). - e1000e: add system to disable K1 list (git-fixes). - efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). - erspan: Initialize options_len before referencing options (bsc#1274727). - ethtool: rss: fix hkey leak when indir_size is 0 (git-fixes). - fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: bitblit: bound-check glyph index in bit_cursor() (git-fixes). - fbdev: clps711x-fb: Remove unreachable unregister_framebuffer() call (git-fixes). - fbdev: core: Fix pointer desynchronization in fb_io_read() (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: kyro: Validate overlay viewport coordinates (git-fixes). - fbdev: omapfb: panel-dsi-cm: initialize lock before registering display (git-fixes). - fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). - fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device() (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: uvesafb: unregister connector callback on init failure (git-fixes). - fbdev: vfb: defer cleanup until the last reference (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firewire: core: fix source bus ID detection for AT context in big-endian systems (git-fixes). - firmware: arm_ffa: Register core as a platform driver (bsc#1278685). - firmware: arm_ffa: Tear down driver during shutdown (bsc#1278685). - firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (bsc#1278685). - firmware: arm_scmi: Avoid IDR updates while cleaning channels (git-fixes). - firmware: arm_scmi: Clean up channels on setup failure (git-fixes). - firmware: arm_scmi: Don't reuse raw xfers with async_done still armed (git-fixes). - firmware: arm_scmi: Drop handle on protocol bind failures (git-fixes). - firmware: arm_scmi: Fix requested device removal race (git-fixes). - firmware: arm_scmi: Free transport channel on IDR failure (git-fixes). - firmware: arm_scmi: Protect device request lookup with RCU (git-fixes). - firmware: arm_scmi: Protect xfer->async_done with xfer->lock (git-fixes). - firmware: arm_scmi: Publish channel state before callbacks (git-fixes). - firmware: arm_scmi: Quiesce notifications before teardown (git-fixes). - firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context (git-fixes). - firmware: arm_scmi: Reject out of range DT protocol IDs (git-fixes). - firmware: arm_scmi: Roll back partial protocol table registration (git-fixes). - firmware: arm_scmi: Unregister device notifier before IDR teardown (git-fixes). - firmware: arm_scmi: Unrequest devices if driver registration fails (git-fixes). - firmware: arm_scmi: Unwind P2A receiver mailbox setup failure (git-fixes). - firmware: arm_scmi: Unwind TX receiver mailbox setup failure (git-fixes). - firmware: arm_scmi: Use channel ID for transport teardown (git-fixes). - firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). - firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). - firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). - firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). - firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). - firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes). - firmware_loader: do not queue completed sysfs fallback requests (git-fixes). - fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (git-fixes). - fpga: dfl: fme: add error handling (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration (git-fixes). - fuse: fix race between interrupt and resend (git-fixes). - gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). - gpio: exar: initialize the ID before registering its cleanup (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Handle direction register read errors in IRQ paths (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - gpio: pisosr: Read "ngpios" as u32 (stable-fixes). - gpio: Respect valid_mask when requesting GPIOs (stable-fixes). - gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind (git-fixes). - gpio: tps65219: Fix GPIO input value reads (git-fixes). - gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). - gpio: xilinx: fix runtime PM leak on request error path (git-fixes). - gpio: zynq: fix runtime PM leak on request error path (git-fixes). - gpiolib: clear requested flag if line is invalid (git-fixes). - gpiolib: don't report -ENOMEM for a requested line without a label (git-fixes). - gpiolib: Free chip resources when allocating the label fails (git-fixes). - gpiolib: sanitize the return value of gpio_chip::request() (stable-fixes). - gpu: host1x: Avoid stack over-read in debug output helpers (git-fixes). - gpu: host1x: Fix offset calculation in trace_write_gather (git-fixes). - gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings (stable-fixes). - HID: alps: fix use-after-free on input2 registration failure (git-fixes). - HID: alps: unregister DualPoint Stick input device on remove (git-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). - HID: asus: fix missing hid_is_usb() check (git-fixes). - HID: asus: fortify keyboard handshake (stable-fixes). - HID: asus: simplify RGB init sequence (stable-fixes). - HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). - HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). - HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). - HID: bpf: serialize device reference release in struct_ops destroy path (git-fixes). - HID: core: fix number/pointer type confusion on long items (git-fixes). - HID: core: fix OOB read of field->usage in hid_set_field() (git-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). - HID: ft260: validate i2c input report length (stable-fixes). - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). - HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). - HID: hyperv: validate initial device info bounds (git-fixes). - HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git-fixes). - HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure (git-fixes). - HID: i2c-hid: Unfollow the panel on shutdown (git-fixes). - HID: lg4ff: validate report length before fixed offsets (git-fixes). - HID: logitech-dj: Fix maxfield check in DJ short report validation (git-fixes). - HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (git-fixes). - HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (stable-fixes). - HID: logitech-dj: Standardise hid_report_enum variable nomenclature (stable-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: logitech-hidpp: cancel reset_hi_res_work on probe failure (git-fixes). - HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). - HID: magicmouse: do not keep a stale msc->input if no input is claimed (git-fixes). - HID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-C (git-fixes). - HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (stable-fixes). - HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (git-fixes). - HID: magicmouse: re-enable multitouch after reset-resume (git-fixes). - HID: mcp2200: validate READ_ALL response length (git-fixes). - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). - HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). - HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). - HID: mcp2221: validate report size in mcp2221_raw_event() (git-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: multitouch: reclassify HTIX5288 to WIN_8_FORCE_MULTI_INPUT_NSMU (git-fixes). - HID: nintendo: Fix imu_timestamp_us double increment per report (git-fixes). - HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (git-fixes). - HID: nintendo: register input device after capabilities are set (git-fixes). - HID: nintendo: stop device IO before hid_hw_stop on probe failure (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: picolcd: clamp eeprom debugfs read to bytes actually received (git-fixes). - HID: pidff: Rework pidff_set_time() to fix warnings (stable-fixes). - HID: pidff: Use ARRAY_SIZE macro instead of sizeof (stable-fixes). - HID: prodikeys: validate fixed-format MIDI reports (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes). - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (bsc#1285891). - HID: rmi: fix OOB access with undersized RMI reports (git-fixes). - HID: roccat: bound device-supplied profile index (git-fixes). - HID: roccat: free buffered reports when destroying device (git-fixes). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (git-fixes). - HID: sensor: custom: Fix field sysfs group cleanup on failure (git-fixes). - HID: sensor: custom: Fix use-after-free in enable_sensor (git-fixes). - HID: synchronize input before cleaning up a failed probe (git-fixes). - HID: tmff: Use 64-bit arithmetic for force feedback scaling (git-fixes). - HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). - HID: zydacron: validate key report length (git-fixes). - host1x: bus: Fix missing ops null check in error teardown (stable-fixes). - hv_netvsc: Allocate send/receive buffers using vmbus_alloc_buffer() (bsc#1282646). - hwmon: (ads7828) Fix external VREF regulator handling (git-fixes). - hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). - hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes). - hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). - hwmon: (asus_rog_ryujin) Add per-device configuration (stable-fixes). - hwmon: (asus_rog_ryujin) Rely on subsystem locking (stable-fixes). - hwmon: (chipcap2) fix channels in humidity alarm notifications (git-fixes). - hwmon: (coretemp) Fix core_data leak on CPUs without PTS (git-fixes). - hwmon: (coretemp) Fix handling of isolated SMT siblings (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Create debugfs entries after hwmon registration (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (corsair-cpro) Remove debugfs entries when probe fails (git-fixes). - hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). - hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination (git-fixes). - hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes). - hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). - hwmon: (emc1403) Rely on subsystem locking (stable-fixes). - hwmon: (gigabyte_waterforce) reject short input reports (git-fixes). - hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). - hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes). - hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). - hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). - hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). - hwmon: (ina2xx) Add support for has_alerts configuration flag (stable-fixes). - hwmon: (ina2xx) Add support for INA234 (stable-fixes). - hwmon: (ina2xx) Add support for INA260 (stable-fixes). - hwmon: (ina2xx) Fix various overflow issues (git-fixes). - hwmon: (ina2xx) Make it easier to add more devices (stable-fixes). - hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes). - hwmon: (ina2xx) Shift INA234 shunt and current registers (stable-fixes). - hwmon: (ina226) Add support for SY24655 (stable-fixes). - hwmon: (k10temp) Stop matching Hygon devices (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (ltc4282) Avoid overflow in maximum power calculation (git-fixes). - hwmon: (ltc4282) Clamp negative current limits (git-fixes). - hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt (git-fixes). - hwmon: (ltc4282) Make sure clk_init_data is fully initialized (git-fixes). - hwmon: (max6621) fix negative temperature offset and crit readings (git-fixes). - hwmon: (max6621) fix temperature clamp range (git-fixes). - hwmon: (nzxt-smart2) Check return value of init_device() in probe (git-fixes). - hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). - hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations (git-fixes). - hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes). - hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). - hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). - hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). - hwmon: (w83793) release probe data through kref (git-fixes). - hwmon: Switch back to struct platform_driver::remove() (stable-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: ks-sa - Fix runtime PM cleanup on registration failure (git-fixes). - hwrng: omap - Fix probe error path cleanup (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start() (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: at91: release DMA channels on remove and probe error (git-fixes). - i2c: at91: release DMA channels when probe defers (git-fixes). - i2c: atr: fix dangling adapter pointer on add failure (git-fixes). - i2c: core: fix debugfs UAF on adapter removal (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: imx: disable autosuspend on remove (git-fixes). - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (git-fixes). - i2c: imx: release DMA channels on probe error (git-fixes). - i2c: imx: separate atomic, dma and non-dma use case (stable-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure (git-fixes). - i2c: mux: Fix channel node leak on adapter add failure (git-fixes). - i2c: mxs: fix DMA channel leak on probe error (git-fixes). - i2c: ocores: Disable clock on failed resume (git-fixes). - i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). - i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (git-fixes). - i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function (stable-fixes). - i2c: xiic: don't clobber msg->len to signal block-read completion (git-fixes). - i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). - i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices (git-fixes). - i3c: dw: rename "pclk" to "apb" to match dt-binding (git-fixes). - i3c: master: Fix device_register() error path (git-fixes). - i3c: master: Fix info leak and UAF in device unregister path (git-fixes). - i3c: master: Fix potential UAF in i3c_device_uevent() (git-fixes). - i3c: master: svc: bound IBI payload to the requested max_payload_len (git-fixes). - i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). - i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). - i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). - i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes). - IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() (git-fixes). - IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). - IB/isert: delay the final Login Response until the session is registered (git-fixes). - IB/isert: post the full-feature receive buffers after session registration (git-fixes). - IB/isert: reject login PDUs declaring more data than was received (git-fixes). - IB/isert: reject PDUs declaring more data than was received (git-fixes). - IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified (git-fixes). - IB/mlx4: Fix refcount leak in add_port() error path (git-fixes). - IB/mlx5: Don't take the rereg_mr fallback without a new translation (git-fixes). - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (git-fixes). - IB/mlx5: Properly support implicit ODP rereg_mr (git-fixes). - ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). - ibmveth: check headers in the RX large send and checksum helpers (bsc#1285888). - ibmveth: disable the reset work before unregister in remove (bsc#1285888). - ibmveth: do not close twice after a failed reopen (bsc#1285888). - ibmveth: fix netpoll races with RX replenish (bsc#1285888). - ibmveth: fix TX LTB and filter unwind on open-fail (bsc#1285888). - ibmveth: h_free logical LAN on open-fail after register (bsc#1285888). - ibmveth: release the pool kobjects when probe fails (bsc#1285888). - ibmveth: return the error when set_channels cannot add TX queues (bsc#1285888). - ibmveth: step past bad RX correlators instead of spinning or oopsing (bsc#1285888). - ibmveth: wait for in-flight transmits in ibmveth_close() (bsc#1285888). - ibmveth: wait for the RX poll to return before freeing the RX queue (bsc#1285888). - ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). - ice: add E835 device IDs (jsc#PED-14404 jsc#PED-15079 jsc#PED-16956). - idpf: keep the netdev when a reset fails (bsc#1285391). - ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). - ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). - ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: adxl313: reject devices without match data (git-fixes). - iio: accel: adxl380: reject devices without match data (git-fixes). - iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE (git-fixes). - iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). - iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). - iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: accel: sca3000: fix frequency divider condition check (git-fixes). - iio: adc: ad4695: Fix call ordering in offload buffer postenable (git-fixes). - iio: adc: ad7192: reject devices without match data (git-fixes). - iio: adc: aspeed: propagate reset deassert errors (git-fixes). - iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: max11205: reject devices without match data (git-fixes). - iio: adc: max34408: add missing 'select REGMAP_I2C' to Kconfig (git-fixes). - iio: adc: mcp3911: reject devices without match data (git-fixes). - iio: adc: pac1921: fix wrong channel used in trigger handler read (git-fixes). - iio: adc: pac1934: check ACPI label duplication (git-fixes). - iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). - iio: adc: rtq6056: add i2c_device_id support (stable-fixes). - iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). - iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). - iio: admv1013: initialize callback mutex before registering notifier (git-fixes). - iio: bu27034: simplify using guard(mutex) (stable-fixes). - iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes). - iio: buffer: Fix potential use-after-free in anonymous buffer release (git-fixes). - iio: buffer: Make IIO DMA fence release RCU-safe (git-fixes). - iio: buffer: serialize buffer teardown with mode claims (git-fixes). - iio: buffer: Tie IIO dma fence lock lifetime to the fence (git-fixes). - iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable (git-fixes). - iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF (git-fixes). - iio: chemical: sgp30: Handle IAQ thread creation failure (git-fixes). - iio: dac: ad5755: validate SPI match data (git-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: dac: m62332: Fix regulator reference count imbalance (git-fixes). - iio: frequency: adf4377: reject devices without match data (git-fixes). - iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). - iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). - iio: gyro: mpu3050: fix sign of raw angular velocity readings (git-fixes). - iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). - iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). - iio: imu: inv_icm42600: fix odr change not caught in certain cases (git-fixes). - iio: imu: inv_icm42600: force accel odr change when switching power mode (git-fixes). - iio: light: apds9306: fix default sampling frequency definition (git-fixes). - iio: light: cm32181: return zero after writing calibscale (git-fixes). - iio: light: gp2ap002: Disable regulators on resume failure (git-fixes). - iio: light: gp2ap002: re-enable irq if runtime suspend fails (git-fixes). - iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). - iio: light: isl29028: return zero in write_raw() on success (git-fixes). - iio: light: ltrf216a: fix runtime PM reference leak in error path (git-fixes). - iio: light: opt4001: Fix incompatible pointer type passed to div_u64_rem() (git-fixes). - iio: light: opt4001: Fix power down clearing bits of the wrong register (git-fixes). - iio: light: opt4001: Fix reversed GENMASK() arguments in fault count mask (git-fixes). - iio: light: opt4001: Reject integration times with a non-zero seconds part (git-fixes). - iio: light: rohm-bu27034: Fix error return (git-fixes). - iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). - iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). - iio: light: tsl2583: return zero in write_raw() on success (git-fixes). - iio: light: tsl2772: fix ALS calibscale readback (git-fixes). - iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure (git-fixes). - iio: potentiometer: x9250: reject devices without match data (git-fixes). - iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). - iio: pressure: bmp280: validate SPI match data (git-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: pressure: dps310: fix NULL pointer dereference on ACPI probe (git-fixes). - iio: pressure: mpl115: Fix runtime PM cleanup (git-fixes). - iio: pressure: rohm-bm1390: Fix AVE_NUM initialization (git-fixes). - iio: proximity: aw96103: validate firmware data length (git-fixes). - iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes). - iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). - iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). - iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). - iio: srf04: fix pm_runtime handling on probe error path (git-fixes). - iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register() (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - iio: trigger: cancel reenable_work before freeing trigger (git-fixes). - inet: Avoid ehash lookup race in inet_ehash_insert() (bsc#1286554). - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (bsc#1286554). - Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes). - Input: aiptek - validate raw macro indices before updating state (stable-fixes). - Input: ati_remote2 - fix type confusion in device attribute handlers (git-fixes). - Input: atkbd - skip deactivate for HONOR ZQC-P (git-fixes). - Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes). - Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard (stable-fixes). - Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes). - Input: cs40l50-vibra - validate custom data from user space (git-fixes). - Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: eeti_ts - publish the OF module alias (git-fixes). - Input: evdev - fix information leak in evdev_pass_values() (stable-fixes). - Input: evdev - sanitize event type index when fetching event masks (stable-fixes). - Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). - Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (git-fixes). - Input: focaltech - use signed coordinates to prevent underflow (git-fixes). - Input: hynitron_cstxxx - validate touch count and finger IDs (git-fixes). - Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). - Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). - Input: iforce - validate input packet lengths (stable-fixes). - Input: iqs5xx - validate firmware record destination span (git-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: matrix_keypad - propagate error code from matrix_keypad_build_keymap() (git-fixes). - Input: mms114 - fix Y-resolution configuration (git-fixes). - Input: psxpad-spi - set driver data before use (git-fixes). - Input: reject inhibit and uninhibit requests on unregistering devices (git-fixes). - Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes). - Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). - Input: soc_button_array - check btns_desc->package.count (git-fixes). - Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). - Input: sur40 - fix input device registration ordering (stable-fixes). - Input: sur40 - fix V4L error path cleanup (stable-fixes). - Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). - Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). - Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). - Input: synaptics-rmi4 - block s_input when F54 queue is busy (git-fixes). - Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer (git-fixes). - Input: synaptics-rmi4 - fix F55 transmitter electrode count typo (git-fixes). - Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes). - Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue (git-fixes). - Input: synaptics-rmi4 - zero report size on F54 work error (git-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes). - Input: xpad - add support for Azeron devices (stable-fixes). - Input: xpad - add support for Corsair Novablade Pro (stable-fixes). - Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). - Input: xpad - add support for ZENAIM LEVERLESS (stable-fixes). - Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). - Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes). - interconnect: Fix use after free in icc_get() and of_icc_get_by_index() (git-fixes). - interconnect: qcom: icc-rpm: Handle icc_link_create() failures (git-fixes). - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (git-fixes). - io_uring/net: Avoid msghdr on op_connect/op_bind async data (git-fixes). - iommu/arm-smmu-v3-sva: Enable Hardware Access and Hardware Dirty bits (bsc#1288217). - iommu/arm-smmu-v3: Manage teardown with devm (stable-fixes). - iommu/dma: skip swiotlb bounce for DMA_ATTR_MMIO in iommu_dma_map_phys (git-fixes). - iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes). - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git-fixes). - ip_tunnel: Use ip_tunnel_info() helper instead of 'info + 1' (bsc#1274727). - ipmi: ipmb: validate write message length (git-fixes). - ipmi: si: Fix NULL pointer dereference after failed registration (git-fixes). - kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. - kernel-binary.spec.in: Fix syntax error. - KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). - keys: fix lost wakeup when reaping a dead key type (git-fixes). - keys: translate request_key_auth pid for the reading procfs instance (git-fixes). - KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes). - KVM: arm64: Ensure FFA ranges are page aligned (git-fixes). - KVM: arm64: Fix bounds checking in do_ffa_mem_reclaim() (git-fixes). - KVM: arm64: Fix sign-extension of MMIO loads (git-fixes). - KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes). - KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). - KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). - KVM: arm64: vgic: Reset in_kernel on private IRQ allocation failure (git-fixes). - KVM: arm64: Zero out the stack initialized data in the FFA handler (git-fixes). - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN (git-fixes). - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (git-fixes). - KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes). - KVM: nVMX: Always flush vpid02 on first use (git-fixes). - KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes). - KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes). - KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (git-fixes). - KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). - KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). - KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). - KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). - KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). - KVM: PPC: Book3S HV: Add support for compat CPU capabilities for KVM on PowerNV (bsc#1263864 ltc#217835). - KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). - KVM: PPC: Book3S HV: Implement compat CPU capability retrieval for KVM on PowerVM (bsc#1263864 ltc#217835). - KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode (bsc#1263864 ltc#217835). - KVM: PPC: Document KVM_PPC_GET_COMPAT_CAPS ioctl (bsc#1263864 ltc#217835). - KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git-fixes). - KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). - KVM: PPC: Introduce KVM_CAP_PPC_COMPAT_CAPS and wire up ioctl (bsc#1263864 ltc#217835). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - KVM: SEV: Use to_kvm_sev_info() for fetching kvm_sev_info struct (git-fixes). - KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (bsc#1279887). - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts (git-fixes). - KVM: SVM: Serialize accesses to the owner and mirror list with separate lock (git-fixes). - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (git-fixes). - KVM: TDX: Account all non-transient page allocations for per-TD structures (git-fixes). - KVM: TDX: Check if there is valid exit infos based on vp_enter_ret (git-fixes). - KVM: TDX: Enable Notify VM exit (git-fixes). - KVM: TDX: Fix x2APIC MSR handling in tdx_has_emulated_msr() (git-fixes). - KVM: VMX: Don't register posted interrupt wakeup handler if alloc_kvm_area() fails (git-fixes). - KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). - KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes). - KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). - KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). - KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes). - KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes). - KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes (git-fixes). - KVM: x86/mmu: Fix NX page unaccounting for TDP MMU pages (git-fixes). - KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (bsc#1271050). - KVM: x86/mmu: Reload MMU on *every* page pre-fault attempt/iteration (git-fixes). - KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (bsc#1271050). - KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (bsc#1271050). - KVM: x86/mmu: Use KVM's max TDP level to determine need for 32-bit TDP root (git-fixes). - KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (git-fixes). - KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes). - KVM: x86: Don't WARN if IRQ disappears because it was cleared from the PIC (git-fixes). - KVM: x86: Don't WARN if IRQ disappears when Xen emulation is enabled (git-fixes). - KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes). - KVM: x86: Fix array_index_nospec() protection in kvm_vcpu_ioctl_x86_set_mce() (git-fixes). - KVM: x86: Fix emulated CPUID features being applied to wrong sub-leaf (git-fixes). - KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). - KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes). - KVM: x86: Take SRCU in kvm_zap_gfn_range() (git-fixes). - KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: ktd2692: Pass context to regulator cleanup (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). - leds: pca9532: Fix inverted GPIO output polarity (git-fixes). - leds: pca9532: Fix phantom device registration on missing hardware (git-fixes). - leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). - leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). - lib/string: fix memchr_inv() for large ranges (git-fixes). - lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - mac802154: fix data race and NULL deref on local->assoc_dev (git-fixes). - mac802154: fix netdev use-after-free in beacon worker (git-fixes). - mac802154: fix use-after-free of sdata via queued RX frames (git-fixes). - mailbox: pcc: Fix command timeout due to missed interrupt (git-fixes). - mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler (git-fixes). - mailbox: qcom-cpucp: handle NULL data in send_data callback (git-fixes). - mailbox: qcom-ipcc: fix duplicate channel allocation across holes (git-fixes). - mailbox: rockchip: disable pclk on probe failure and unbind (git-fixes). - maple_tree: fix argument name in header (git-fixes). - md/raid1: create serial pool adding rdev to array with serialize_policy=1 (bsc#1272261). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: airspy: Return queued buffers on start_streaming() failure (git-fixes). - media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: amphion: Remove obsolete frame_count check in venc_start_session (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: bcm2835-unicam: Fix asc leaked in error/remove path (git-fixes). - media: cec-pin: Fix event FIFO ordering (git-fixes). - media: cec: disable delayed work before freeing an interrupted transmit (git-fixes). - media: cec: extron-da-hd-4k-plus: add sanity check (git-fixes). - media: cec: extron: clear response tail before dispatch (git-fixes). - media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash (git-fixes). - media: cec: Serialize exclusive follower delivery (git-fixes). - media: cec: stm32: prevent out-of-bounds write on RX overflow (git-fixes). - media: cedrus: clean up media device on probe failure (git-fixes). - media: cedrus: fix memory leak in cedrus_init_ctrls() (git-fixes). - media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes). - media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes). - media: chips-media: wave5: Guard bit depth check with initial_info_obtained (git-fixes). - media: chips-media: wave5: Move src_buf Removal to finish_encode (git-fixes). - media: cobalt: Avoid freeing ALSA private data twice (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx231xx: fix devres lifetime (git-fixes). - media: cx231xx: reject geometry changes while the VBI queue is busy (git-fixes). - media: cx23885: add ioremap return check and cleanup (git-fixes). - media: cx23885: cancel NetUP CI work before teardown (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes). - media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). - media: em28xx: defer audio-only extension registration (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: fix use-after-free of dev_next->devlist on disconnect (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: defer the ALSA v4l2 put until card release (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: hevc: add bounded tile-count helpers (git-fixes). - media: i2c: alvium-csi2: balance runtime PM usage count on remove (git-fixes). - media: i2c: alvium: fix critical pointer access in alvium_ctrl_init (git-fixes). - media: i2c: alvium: Fix: Correct name of register in alvium_set_ctrl_auto_exposure (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: imx219: Rename VTS to FRM_LENGTH (stable-fixes). - media: i2c: imx355: Replace client->dev usage (stable-fixes). - media: i2c: imx415: Return test pattern write errors (git-fixes). - media: i2c: ov02a10: fix endpoint parsing use-after-free (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov7740: fix use-after-destroy in remove (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: rdacm21: Fix missing media_entity_cleanup() (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imagination: Fix value clamping in calculate_qp_tables (git-fixes). - media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx219: Fix maximum frame length in lines (git-fixes). - media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: intel/ipu6: fix async notifier cleanup leak on parse error (git-fixes). - media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping ranges (git-fixes). - media: ipu6: Do not free aux device pdata after init (git-fixes). - media: ipu-bridge: check all DMI entries when overriding sensor rotation (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define (git-fixes). - media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers (git-fixes). - media: mc-entity: Add missing kerneldoc (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity (git-fixes). - media: mediatek: vcodec: destroy core workqueue on remove (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: Fix memory leak in error path of vdec_open (git-fixes). - media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: don't sleep in the clk .is_enabled callback (git-fixes). - media: microchip-isc: fix awb_mutex and lock lifecycle (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: fix WB offset and gain register field masking (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: microchip-isc: take a reference on the parsed endpoints (git-fixes). - media: msi2500: Return queued buffers on start_streaming() failure (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: nuvoton: npcm-video: fix error handling in npcm_video_init() (git-fixes). - media: nuvoton: npcm-video: fix memory leaks in probe and remove (git-fixes). - media: nuvoton: npcm-video: quiesce VCD IRQ before teardown (git-fixes). - media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe (git-fixes). - media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure (git-fixes). - media: nxp: imx8-isi: Correct color map between V4L2 and ISI (git-fixes). - media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path (git-fixes). - media: nxp: imx8-isi: Fix potential out-of-bounds issues (git-fixes). - media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding (git-fixes). - media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing (git-fixes). - media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks (git-fixes). - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup (git-fixes). - media: platform: mtk-mdp3: Fix SCP device refcounting (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: pwc: Drain fill_buf on start_streaming() failure (git-fixes). - media: pwc: Return queued buffers on start_streaming() failure (git-fixes). - media: qcom: camss: avoid format string warning (stable-fixes). - media: qcom: camss: Fix RDI streaming for CSID GEN2 (git-fixes). - media: qcom: camss: vfe-17x: Fix write master buffer done being dropped (git-fixes). - media: qcom: camss: vfe: Fix VFE reset while another line is streaming (git-fixes). - media: radio-si476x: Unregister v4l2_device on probe failure (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). - media: rc: sunxi-cir: Unregister rc device on probe failure (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: rtl2832: fix use-after-free in rtl2832_remove() (git-fixes). - media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure (git-fixes). - media: rtl2832_sdr: Return queued buffers on start_streaming() failure (git-fixes). - media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak (git-fixes). - media: s2255: bound JPEG frame size before copying into the buffer (git-fixes). - media: s2255: check firmware size before reading trailing marker (git-fixes). - media: saa7134: Fix a possible memory leak in saa7134_video_init1 (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: saa7164: fix cleanup on resource allocation failure (git-fixes). - media: sti: delta: use unaligned accessors for MJPEG SOF fields (git-fixes). - media: stm32: dcmi: unregister notifier on probe failure (git-fixes). - media: stm32: dcmipp: replace s_stream with enable/disable_streams (stable-fixes). - media: stm32: dcmipp: use v4l2_subdev_is_streaming (stable-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: sun4i-csi: Return queued buffers on start_streaming() failure (git-fixes). - media: tda18250: fix possible integer overflow (git-fixes). - media: tegra-video: vi: fix invalid u32 return value in format lookup (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: usbtv: keep device alive while ALSA card exists (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-async: avoid deleting unlinked ASC entry on link error (git-fixes). - media: v4l2-async: Unregister sub-device if asc_list is empty (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() (git-fixes). - media: v4l2-ctrls: Allow unknown HDR10 white point and luminance (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: v4l2-ctrls: validate AV1 tile counts (git-fixes). - media: v4l2-ctrls: validate HEVC tile counts (git-fixes). - media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link (git-fixes). - media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes). - media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicely (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: venus: fix payload size calculation in parse_raw_formats() (git-fixes). - media: venus: fix payload size returned by parse_caps() and parse_alloc_mode() (git-fixes). - media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git-fixes). - media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write in FWHT encoder (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: video-i2c: fix buffer queue ordering (stable-fixes). - media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure (git-fixes). - media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vimc: fix pixel format lookup in enum_framesizes (git-fixes). - media: vivid: add vivid_update_reduced_fps() (git-fixes). - media: vivid: cancel svid ctrl work on release (git-fixes). - media: vivid: check for vb2_is_busy() when toggling caps (git-fixes). - media: vivid: fix cleanup bugs in vivid_init() (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: zoran: Avoid freeing a registered video_device twice (git-fixes). - mei: pull kvfree out of spinlock (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT (git-fixes). - memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset (git-fixes). - memory: brcmstb_dpfe: validate firmware section sizes (git-fixes). - memory: emif: fix device_node reference leak on np_ddr (git-fixes). - memory: exynos5422-dmc: handle clock enable failures (git-fixes). - memstick: core: wait for request completion before freeing card (git-fixes). - memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). - memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da903x: Cancel IRQ work during teardown (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: iqs62x: Reject zero-length firmware records (git-fixes). - mfd: rave-sp: validate received frame payload lengths (git-fixes). - mfd: rk8xx: Register poweroff handler in atomic phase (git-fixes). - mfd: rsmu: Add 8a34002 support (stable-fixes). - mfd: sm501: Fix potential memory leaks during remove (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: tps65217: Use devres for IRQ domain and wake teardown (git-fixes). - mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence "DMA mask not set" (git-fixes). - misc: bcm-vk: Use acquire/release for msgq_inited (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - misc: fastrpc: fix channel ctx ref leak when session alloc fails (git-fixes). - misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free (git-fixes). - misc: fastrpc: Remove buffer from list prior to unmap operation (git-fixes). - misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke (git-fixes). - misc: nsm: bound the device-reported response length (git-fixes). - misc: nsm: fix CBOR short-length decoding (git-fixes). - misc: nsm: mark device ready before registering the hwrng and misc device (git-fixes). - misc: rp1: Send IACK on IRQ activate to fix kdump/kexec (git-fixes). - misc: rtsx: add missing write register handling (git-fixes). - misc: sgi-gru: remove interrupt-context page-table walks (git-fixes). - misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe() (git-fixes). - mkspec-dtb: Move DTS prefix into package list. - mkspec-dtb: Move provides-obsoletes to package list. - mkspec-dtb: Put per-architecture package lists into a hash. - mkspec-dtb: re-indent. - mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition (git-fixes). - mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). - mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). - mmc: core: Add validation for host-provided max_segs (stable-fixes). - mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). - mmc: core: Fix OF node reference leak on card add failure (git-fixes). - mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). - mmc: davinci: fix mmc_add_host order in probe (stable-fixes). - mmc: hsq: Fix use-after-free in retry work (git-fixes). - mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). - mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). - mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). - mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit (git-fixes). - mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). - mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). - mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes). - mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes). - mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). - mmc: sdhci: unmap the bounce buffer before device release (git-fixes). - mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). - mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). - mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). - mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). - mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). - mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes). - mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). - mmc: via-sdmmc: stop card-detect handling on probe failure (git-fixes). - mshv_vtl: Check per-CPU register page before mmap (git-fixes). - mtd: afs: validate v2 image info bounds (git-fixes). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: core: avoid double-free of OTP NVMEM device (git-fixes). - mtd: core: call _get_device() with the master MTD (git-fixes). - mtd: fix double free and WARN_ON in add_mtd_device() error paths (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: mtdoops: free page bitmap when the backing MTD is removed (git-fixes). - mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() (git-fixes). - mtd: mtdswap: Avoid freeing registered blktrans device twice (git-fixes). - mtd: mtdswap: remove debugfs stats file on teardown (git-fixes). - mtd: nand: mtk-ecc: stop on ECC idle timeouts (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes). - mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: pl353: Fix debug prints (git-fixes). - mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: rawnand: validate ONFI extended parameter page sections (git-fixes). - mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: spansion: Remove s25fs256s0 (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: fix direct mapping creation sizes (stable-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). - mtd: spinand: repeat reading in regular mode if continuous reading fails (stable-fixes). - mtd: spinand: try a regular dirmap if creating a dirmap for continuous reading fails (stable-fixes). - mtd: ubi: Release device reference on busy detach (git-fixes). - mtd: ubi: skip programming unused bits in ubi headers (stable-fixes). - net-sysfs: release queue trackers before allowing reuse (bsc#1278140). - net-sysfs: remove rtnl_trylock from device attributes (bsc#1278140). - net-sysfs: remove rtnl_trylock from queue attributes (bsc#1278140). - net-sysfs: restore behavior for not running devices (bsc#1278140). - net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). - net/mlx5: E-Switch, preserve max tx speed on vport state modification (git-fixes). - net/mlx5: E-Switch, use state lock for vport state changes (git-fixes). - net/mlx5: HWS, fix flow meter offset within its bulk (git-fixes). - net/mlx5: Move vport DOWN state check out of mlx5_query_vport_max_tx_speed() (git-fixes). - net/mlx5: Only set num_doorbells on a fully initialized SF (git-fixes). - net/mlx5e: fix BQL reset on SQ re-activation (git-fixes). - net/mlx5e: Fix missing FEC mode mapping for RS_544_514_INTERLEAVED_QUAD (git-fixes). - net/mlx5e: Fix NULL deref in PTP TX timestamp recovery warn (git-fixes). - net/mlx5e: fix swapped IPv6 IPsec policy masks (git-fixes). - net/mlx5e: use skb_share_check() in the loopback selftest hook (git-fixes). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: Add options as a flexible array to struct ip_tunnel_info (bsc#1274727). - net: enetc: fix support for PTP_EXTTS_REQUEST2 ioctl (git-fixes). - net: ethernet: mtk_wed: Fix dma_unmap_single() size (git-fixes). - net: ethernet: ti: am65-cpts: fix support for PTP_EXTTS_REQUEST2 ioctl (git-fixes). - net: ip_tunnel: initialize `options_len` before referencing options (git-fixes). - net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes). - net: mana: Add handler for sriov configure (bsc#1272756). - net: mana: Cap MSI-X vectors to the device MSI-X table size (git-fixes). - net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes). - net: mana: Extend RX CQE coalescing up to 8 packets (git-fixes). - net: mana: Fall back to scattered pages for GDMA queues (git-fixes). - net: mana: force full-page RX buffers via ethtool private flag (bsc#1269792). - net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792). - net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). - net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes). - net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes). - net: mana: Route ring-buffer access through offset-based helpers (git-fixes). - net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). - net: phy: marvell: keep WOL_EIE across interrupt reconfiguration (git-fixes). - net: phy: qca83xx: read resolved QCA8337 link status (git-fixes). - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550). - net: thunderbolt: Count delivered packets in rx_packets and rx_bytes (git-fixes). - net: thunderbolt: Mark the connection down when bringing it up fails (git-fixes). - net: thunderbolt: Release the Rx HopID that was handed out on mismatch (git-fixes). - net: thunderbolt: Tear down DMA paths before stopping the rings (git-fixes). - net: usb: ax88179_178a: fix rx frame length for non-last packets (git-fixes). - net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (git-fixes). - net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). - net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). - net: usb: ipheth: fix carrier_work UAF on disconnect (git-fixes). - net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). - net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). - net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). - net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: usb: sr9700: include receive overhead in the length check (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). - net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). - net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). - net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes). - nfc: digital: clamp SENSF_RES length to the destination buffer (git-fixes). - nfc: digital: Do not dump a NULL response in command completion (git-fixes). - nfc: fdp: bound the device-reported read length and fix an skb leak (git-fixes). - nfc: llcp: avoid userspace overflow on invalid optlen (git-fixes). - nfc: llcp: bound SNL TLV parsing to the skb and add length checks (git-fixes). - nfc: llcp: bound the connect_sn TLV walk to the skb (git-fixes). - nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). - nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). - nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes). - nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (git-fixes). - nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). - nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). - nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes). - nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). - nfc: llcp: read llcp_sock->local under the socket lock in getsockopt (git-fixes). - nfc: llcp: reject PDUs shorter than the LLCP header (git-fixes). - nfc: microread: validate target discovery payload lengths (git-fixes). - nfc: nci: fix double completion race in nci_data_exchange_complete (git-fixes). - nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (git-fixes). - nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (git-fixes). - nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing (git-fixes). - nfc: nci: free destination parameters when closing a connection (git-fixes). - nfc: nfcmrvl: validate helper command length before pull (git-fixes). - nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). - nfc: pn533: hold a reference to the request skb during send_frame (git-fixes). - nfc: pn533: purge fragmented skbs during cleanup (git-fixes). - nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). - nfc: st21nfca: validate ATR_REQ length against the received frame (git-fixes). - nfc: st21nfca: validate ISO15693 inventory length (git-fixes). - nfc: st21nfca: validate received frame size (git-fixes). - nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). - nouveau/gem: reserve the bo in the info ioctl around the vma lookup (git-fixes). - nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT (git-fixes). - nvme-tcp: fix usage of page_frag_cache (bsc#1267882). - nvme: bound FDP config log reads to the received buffer (git-fixes). - nvmet-rdma: fix queue leak when connect backlog is exceeded (git-fixes). - nvmet: require authentication before property set (git-fixes). - of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/ASPM: Use pcie_capability_clear_and_set_word() for ASPM disable/restore (git-fixes). - PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (git-fixes). - PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes). - PCI/proc: Use file_ns_capable() when checking config space read access (git-fixes). - PCI/proc: Warn on writes to kernel-exclusive config space regions (git-fixes). - PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes). - PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI/TPH: Validate the firmware Steering Tag response (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). - PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608] (git-fixes). - PCI: altera: Protect root bus removal with rescan lock (stable-fixes). - PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). - PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: hv: Probe vPCI buses asynchronously (git-fixes). - PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git-fixes). - PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). - PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). - PCI: j721e: Fix incorrect max_lanes for J7200 (git-fixes). - PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). - PCI: meson: Fix GPIO state while requesting PERST# (git-fixes). - PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). - PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() (git-fixes). - PCI: plda: Fix use-after-free of event IRQs during teardown (git-fixes). - PCI: plda: Protect root bus removal with rescan lock (stable-fixes). - PCI: qcom-ep: Deinitialize endpoint on remove (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rcar-gen4: Add Application/Local register reset control (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). - PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). - PCI: switchtec: Add Gen6 Device IDs (stable-fixes). - PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). - PCI: xgene: Drop unnecessary OF node reference (git-fixes). - PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - peci: npcm: Initialize state before requesting IRQ (git-fixes). - perf vendor events arm64: Add Tegra410 Olympus PMU events (bsc#1278231). - perf vendor events arm64: fix swapped MetricGroup for Tegra410 L1 prefetcher metrics (bsc#1278231). - perf vendor events arm64: Fix Tegra410 Olympus event 0x0197 (bsc#1278231). - perf/arm-cmn: Add CMN S3 ACPI binding (jsc#PED-15995). - perf/arm-cmn: Ensure port and device id bits are set properly (jsc#PED-15995). - perf/arm-cmn: Fix CMN S3 DTM offset (jsc#PED-15995). - perf/arm-cmn: Fix DVM node events (jsc#PED-15995). - perf/arm-cmn: Fix incorrect error check for devm_ioremap() (jsc#PED-15995). - perf/arm-cmn: Fix REQ2/SNP2 mixup (jsc#PED-15995). - perf/arm-cmn: Fix resource_size_t printk specifier in arm_cmn_init_dtc() (jsc#PED-15995). - perf/arm-cmn: Initialise cmn->cpu earlier (jsc#PED-15995). - perf/arm-cmn: Minor event type housekeeping (jsc#PED-15995). - perf/arm-cmn: Permit more exhaustive groups (jsc#PED-15995). - perf/arm-cmn: Reduce stack usage during discovery (jsc#PED-15995). - perf/arm-cmn: Remove CMN-600 DTC domain special case (jsc#PED-15995). - perf/arm-cmn: Stop claiming entire iomem region (jsc#PED-15995). - perf/arm: Add missing .suppress_bind_attrs (jsc#PED-15995). - perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains (bsc#1282663). - perf: arm_pmuv3: Zero initialize hw_id branch stack field (git-fixes). - perf: Fujitsu: Add the Uncore PMU driver (jsc#PED-15993). - perf: Reject exited events as group leaders (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes). - phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes). - phy: rockchip: usbdp: Do not lose USB3 PHY status (git-fixes). - phy: rockchip: usbdp: Drop seamless DP takeover (git-fixes). - phy: rockchip: usbdp: Fix devm_clk_bulk_get_all check (git-fixes). - phy: rockchip: usbdp: Handle missing clock-names DT property gracefully (git-fixes). - phy: rockchip: usbdp: Handle rk_udphy_reset_deassert errors (git-fixes). - phy: rockchip: usbdp: Hold mutex in DP PHY configure (git-fixes). - phy: rockchip: usbdp: Only enable USB3 when not in high-speed mode (git-fixes). - phy: rockchip: usbdp: Update mode_change after error handling (git-fixes). - pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). - pinctrl: bcm2835: Don't remove an unregistered GPIO chip (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: mediatek: paris: don't double-check the GPIO number (stable-fixes). - pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip (git-fixes). - pinctrl: meson: Fix typo in s4 group name (git-fixes). - pinctrl: nuvoton: Fix clock reference leak in ma35_get_bank_data() (git-fixes). - pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). - pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). - pinctrl: rockchip: Reset the pin count when recalculating SoC data (git-fixes). - pinctrl: single: free the IRQ on domain creation failure (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix clock reference leak in stm32_pctl_probe() (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes). - platform/chrome: cros_ec_debugfs: Clean up console log on probe failure (git-fixes). - platform/chrome: cros_ec_debugfs: Unregister panic notifier (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count (git-fixes). - platform/chrome: cros_ec_typec: Validate SVID and mode counts in discovery data (git-fixes). - platform/chrome: sensorhub: Bound the EC-reported sensor number (git-fixes). - platform/chrome: sensorhub: Fix dropped timestamp events and log spam (git-fixes). - platform/chrome: sensorhub: Fix memory overread in ring handler (git-fixes). - platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/surface: acpi-notify: Check ACPI companion before use (git-fixes). - platform/x86/amd/hsmp: Reject negative power cap writes in hwmon (git-fixes). - platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd/pmc: Propagate SMU errors and validate S2D address (git-fixes). - platform/x86/amd/pmc: Restore msg_port on amd_stb_s2d_init() error paths (git-fixes). - platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() (git-fixes). - platform/x86/amd/pmf: Validate the APTS state index (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86/intel/pmc: Fix stale NVL PCD-S S0ix_LPM telemetry constants (git-fixes). - platform/x86/intel/pmt: Block mmap when callback is present (git-fixes). - platform/x86/intel: power-domains: Handle failed init in tpmi_get_linux_die_id() (git-fixes). - platform/x86: acer-wmi: reject missing gaming WMI results (git-fixes). - platform/x86: asus-wmi: fix resource leaks on probe failure (git-fixes). - platform/x86: asus-wmi: fix screenpad power state detection (git-fixes). - platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming (git-fixes). - platform/x86: asus-wmi: fix unclear usage of bd->props.power (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). - platform/x86: dell-privacy: Fix race condition (git-fixes). - platform/x86: dell-wmi-base: Fix resource leak on module load failure (git-fixes). - platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer (git-fixes). - platform/x86: dell-wmi-sysman: Fix instance ID bounds (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-bioscfg: accept reduced ACPI packages from older HP BIOS (git-fixes). - platform/x86: hp-bioscfg: advance elem past consumed array elements (git-fixes). - platform/x86: hp-bioscfg: allow clearing current_password (git-fixes). - platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). - platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token (git-fixes). - platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() (git-fixes). - platform/x86: hp-bioscfg: fix heap OOB read on empty password write (git-fixes). - platform/x86: hp-bioscfg: fix new_password_store() overwriting current_password (git-fixes). - platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one in password length check (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix oops on short integer attribute buffer (git-fixes). - platform/x86: hp-bioscfg: fix ORD_LIST_ELEMENTS never being parsed (git-fixes). - platform/x86: hp-bioscfg: fix password encoding bounds check (git-fixes). - platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() (git-fixes). - platform/x86: hp-bioscfg: NUL-terminate the SPM auth token (git-fixes). - platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). - platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() (git-fixes). - platform/x86: hp-bioscfg: validate SPM state returned by firmware (git-fixes). - platform/x86: hp-bioscfg: warn on element type mismatch instead of failing (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (git-fixes). - platform/x86: ISST: Add a NULL check for sst_inst (git-fixes). - platform/x86: ISST: Check for admin capability for write commands (stable-fixes). - platform/x86: ISST: Just allow 2 bits for SST feature enable (git-fixes). - platform/x86: ISST: Return error during profile addition (git-fixes). - platform/x86: ISST: Use PP level enable mask (git-fixes). - platform/x86: ISST: Validate level in perf mask ioctls (git-fixes). - platform/x86: ISST: Validate logical CPU id and clos id (git-fixes). - platform/x86: ISST: Validate max level for set feature (git-fixes). - platform/x86: ISST: Validate parameter for core power state (git-fixes). - platform/x86: ISST: Validate parameter for frequency and priority (git-fixes). - platform/x86: ISST: Validate socket ID in clos_assoc ioctl (git-fixes). - platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes). - platform/x86: simatic-ipc: fix platform device leak on registration failure (git-fixes). - platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). - platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() (git-fixes). - PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() (git-fixes). - PM: hibernate: Fix memory leak in snapshot_write_next() error path (git-fixes). - PM: sleep: Fix off-by-one in wakelocks number limit check (git-fixes). - PM: sleep: Unblock runtime PM when device prepare fails (git-fixes). - power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). - power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). - power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). - power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bd99954: Drop bad register fields (git-fixes). - power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address (git-fixes). - power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address (git-fixes). - power: supply: bq27xxx: bq27520g4: fix REG_TTES address (git-fixes). - power: supply: bq27xxx: synchronize work cancellation on suspend (git-fixes). - power: supply: bq256xx: drain usb_work before freeing the charger (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: bq24257: fix use-after-free on remove (git-fixes). - power: supply: bq25890: Fix power_supply reference leak (git-fixes). - power: supply: charger-manager: register regulators before exposing sysfs (git-fixes). - power: supply: cros_usbpd-charger: bound the EC-reported port count (git-fixes). - power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS (git-fixes). - power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git-fixes). - power: supply: Fix maintenance charge table kernel-doc (git-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: isp1704_charger: cancel work on remove (git-fixes). - power: supply: lp8727: fix use-after-free in lp8727_release_irq() (git-fixes). - power: supply: lp8788-charger: fix use-after-free on remove (git-fixes). - power: supply: max17040: drop incorrect I2C functionality check (git-fixes). - power: supply: max17040: propagate register read errors (git-fixes). - power: supply: max17040: synchronize work cancellation on suspend (git-fixes). - power: supply: mm8013: Publish the OF module alias (git-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: qcom_battmgr: terminate the strings from firmware (git-fixes). - power: supply: rt9455: quiesce delayed work before teardown (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - power: supply: sbs-battery: Use a per-device serial number buffer (git-fixes). - power: supply: sc2731_charger: cancel work on remove (git-fixes). - power: supply: twl4030_charger: cancel workers via devm (git-fixes). - power: supply: ucs1002: fix use-after-free on remove (git-fixes). - powercap: intel_rapl_tpmi: Handle PMU registration failure during probe (git-fixes). - powerpc/970: fix nap return address corruption on async interrupt exit (jsc#PED-15113 git-fixes). - powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). - powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors (bsc#1263864 ltc#217835). - powerpc/entry: Fix double accounting of user time on interrupt entry (bsc#1277802 ltc#222379). - powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). - powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). - powerpc/kexec_file: Use inclusive range checks for excluded memory (jsc#PED-14518 git-fixes). - powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes). - powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). - powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). - powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). - powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752 ltc#221290). - powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). - powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak (bsc#1274751 ltc#221105 bsc#1274750 ltc#221106). - powerpc/pseries: pci - logic bug (bsc#1274749 ltc#221282 bsc#1274755 ltc#221284 bsc#1274756 ltc#221283). - powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes). - powerpc/syscall: Avoid atomic test_and_clear_thread_flag on fast path (bsc#1283148 ltc#223600). - powerpc/syscall: Return the preset value of skipped syscalls (jsc#PED-15113 git-fixes). - powerpc: Add Power12 architected mode (jsc#PED-16906). - powerpc: Add Power12 raw mode (jsc#PED-16906). - powerpc: fix NMI exit ordering: restore soft masks after irqentry_nmi_exit() (jsc#PED-15113 git-fixes). - powerpc: Move stack randomization after syscall_enter_from_user_mode() (jsc#PED-15113 git-fixes). - powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-uapi headers (bsc#1263864 ltc#217835). - powerpc: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers (bsc#1263864 ltc#217835). - powerpc: Restore all registers after a traced syscall again (jsc#PED-15113 git-fixes). - ppdev: prevent overflow when setting port timeout (git-fixes). - pps: bump PPS device count (bsc#1280882). - printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). - procfs: fix possible double mmput() in do_procmap_query() (git-fixes). - pseries/plpks: clear SED key data after use (bsc#1215199). - pseries/plpks: clear sensitive buffers in wrapping operations (jsc#PED-14548 git-fixes). - pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). - pseries/plpks: clear signed update authentication buffer (bsc#1215199). - pseries/plpks: fix error code for wrapping key reads (jsc#PED-14548 git-fixes). - pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). - pseries/plpks: fix self-reference in plpks_var initializer (jsc#PED-14548 git-fixes). - pseries/plpks: hide wrapping_features when unsupported (jsc#PED-14548 git-fixes). - pseries/plpks: make narrowing conversions explicit (bsc#1215199). - pseries/plpks: rename the default wrapping key macro (jsc#PED-14548 git-fixes). - pseries/plpks: update PKS documentation and MAINTAINERS entry (jsc#PED-14548 git-fixes). - pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). - pwm: lp3943: fix NULL pointer dereference for an unconfigured channel (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - pwm: renesas-tpu: Fix runtime PM reference leak (git-fixes). - pwm: tiehrpwm: Clear period on disable to allow reconfiguration (git-fixes). - random: fix vgetrandom_opaque_params kernel-doc (git-fixes). - rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() (git-fixes). - rapidio: clear mport->net when rio_add_net() fails (git-fixes). - rapidio: mport_cdev: fix use-after-free in dma_req_free() (git-fixes). - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (bsc#1286554). - RDMA/bnxt_re: Add a max slot check for SQ (git-fixes). - RDMA/bnxt_re: Avoid displaying the kernel pointer (git-fixes). - RDMA/bnxt_re: Avoid repeated requests to allocate WC pages (git-fixes). - RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (git-fixes). - RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the feature is disabled (git-fixes). - RDMA/bnxt_re: Free CQ toggle page after firmware teardown (git-fixes). - RDMA/bnxt_re: Free SRQ toggle page after firmware teardown (git-fixes). - RDMA/bnxt_re: Proper rollback if the ioremap fails (git-fixes). - RDMA/bnxt_re: Reject GET_TOGGLE_MEM when toggle page was not allocated (git-fixes). - RDMA/bnxt_re: zero shared page before exposing to userspace (git-fixes). - RDMA/cma: Fix WARNING in res_to_rt (git-fixes). - RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes). - RDMA/core: Fix potential use after free in counter_release() (git-fixes). - RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). - RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). - RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes). - RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). - RDMA/core: Fix potential use after free in uverbs_free_dmah() (git-fixes). - RDMA/core: Fix use after free in ib_query_qp() (git-fixes). - RDMA/core: Wait for RCU callbacks before unloading ib_core (git-fixes). - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). - RDMA/cxgb4: Cancel reg_work before freeing device on remove (git-fixes). - RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (git-fixes). - RDMA/cxgb4: Free debugfs on registration failure (git-fixes). - RDMA/cxgb4: free STAG index when TPT entry write fails (git-fixes). - RDMA/efa: Fix PBL chunk length computation (git-fixes). - RDMA/efa: Validate SQ ring size against max LLQ size (git-fixes). - RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). - RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). - RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). - RDMA/hfi1: Create workqueues before device initialization (git-fixes). - RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). - RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). - RDMA/hfi1: Free RX data on late probe failure (git-fixes). - RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). - RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). - RDMA/hfi1: Preserve unit 0 on (git-fixes). - RDMA/hfi1: Propagate sdma_txinit_ahg() errors (git-fixes). - RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). - RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). - RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). - RDMA/hns: Fix the use of uninitialized variable (git-fixes). - RDMA/ionic: Cap eq_count to the eth driver's interrupt vector budget (git-fixes). - RDMA/ionic: Embed counter driver data in rdma_counter allocation (git-fixes). - RDMA/ionic: Fix double removal of CMB mmap entries in create QP error path (git-fixes). - RDMA/ionic: Fix XArray initialization to use XArray flags (git-fixes). - RDMA/ipoib: Drain RCU callbacks during module teardown (git-fixes). - RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). - RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). - RDMA/irdma: Bound in-flight CQP ops across deferred completions (git-fixes). - RDMA/irdma: check vport device allocation (git-fixes). - RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). - RDMA/irdma: Free IRQ when CEQ vector mapping fails (git-fixes). - RDMA/irdma: Remove redundant legacy_mode checks (git-fixes). - RDMA/irdma: Replace waitqueue and flag with completion (git-fixes). - RDMA/mana_ib: drain QP references after partial table insertion (git-fixes). - RDMA/mana_ib: unify QP lookup table (git-fixes). - RDMA/mlx5: Drain RCU callbacks during module teardown (git-fixes). - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference (git-fixes). - RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes). - RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs (git-fixes). - RDMA/mlx5: Remove DCT restrack tracking (git-fixes). - RDMA/mlx5: Remove kernel-doc warning in umr.c (git-fixes). - RDMA/mlx5: Remove raw RSS QP restrack tracking (git-fixes). - RDMA/mlx5: Remove warn on missing representor in query_port_speed (git-fixes). - RDMA/mlx5: Send cong param changes to the resolved port mdev (git-fixes). - RDMA/mlx5: Use DEFINE_RAW_FLEX for leftovers flow attributes (git-fixes). - RDMA/nldev: Fix locking when accessing mr->pd (git-fixes). - RDMA/nldev: validate dynamic counter attribute length (git-fixes). - RDMA/rvt: Return NULL after port allocation failure (git-fixes). - RDMA/rxe: bound the ODP page index against the umem in rxe_check_pagefault() (git-fixes). - RDMA/rxe: Fix UAF in ODP init error-handling path (git-fixes). - RDMA/rxe: Reject IB_ACCESS_ON_DEMAND changes after MR creation (git-fixes). - RDMA/rxe: Reject prefetch of a non-ODP MR (git-fixes). - RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths (git-fixes). - RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (git-fixes). - RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (git-fixes). - RDMA/srpt: Pass the mapped task attribute to target_init_cmd() (git-fixes). - RDMA/ucma: Allow path records to exactly fit the output buffer (git-fixes). - RDMA/ucma: Lock the handler in ucma_set_ib_path() (git-fixes). - RDMA/ucma: Lock the handler in ucma_write_cm_event() (git-fixes). - RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR (git-fixes). - regmap: sdw-mbq: don't call an unset readable_reg callback (git-fixes). - regmap: sdw-mbq: Fix swap of timeout and retry times (git-fixes). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (git-fixes). - regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: core: use system_freezable_wq for init complete work (git-fixes). - regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). - regulator: fixed: reject incompatible platform devices (git-fixes). - regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git-fixes). - regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: qcom-refgen: correct the regulator type to CURRENT (git-fixes). - regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling (git-fixes). - regulator: qcom-rpmh: Fix the return value in rpmh_regulator_vrm_get_optimum_mode() kernel-doc (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git-fixes). - remoteproc: qcom: Fix glink->node reference leak in qcom_add_glink_subdev (git-fixes). - remoteproc: qcom_q6v5_adsp: Fix reference leak for device node (git-fixes). - remoteproc: scp: Fix device reference leak on failed lookup (git-fixes). - Revert "drm/amd/display: Remove unused cm3_helper_translate_curve_to_degamma_hw_format" (stable-fixes). - Revert "drm/amdgpu: fix aperture mapping leak" (git-fixes). - Revert "drm/virtio: Allow importing prime buffers when 3D is enabled" (git-fixes). - Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (bsc#1278685). - Revert "Input: matrix_keypad - force switch rows to input mode" (git-fixes). - Revert "media: v4l2-dev: fix error handling in __video_register_device()" (git-fixes). - Revert "mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337). - Revert "net: thunderbolt: Enable end-to-end flow control also in transmit" (git-fixes). - Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware" (git-fixes). - Revert "rpm/mkspec: Fix missing kernel-syms-rt creation" (bsc#1244337). - Revert "thermal/drivers/hwmon: Cleanup coding style a bit" (stable-fixes). - Revert "wifi: ath12k: add panic handler" (git-fixes). - Revert "wifi: mac80211: do not use old MBSSID elements" (git-fixes). - Revert "wifi: mt76: Disable napi when removing device" (git-fixes). - Revert "wifi: rtw89: fix unable to receive probe responses under MLO connection" (stable-fixes). - ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). - ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). - ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). - rpmsg: core: Fix incorrect return value documentation (git-fixes). - rpmsg: glink: smem: order FIFO read after availability check (git-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: ac100: Assign .num before accessing .hws (git-fixes). - rtc: aspeed: add AST2700 compatible (stable-fixes). - rtc: bq32000: add delay between RTC reads (stable-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: gamecube: check return value of devm_rtc_register_device() (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes). - rtc: mv: add suspend/resume support for wakeup (stable-fixes). - rtc: pcf8563: fix clock provider leak on unbind (git-fixes). - rtc: pcf85363: Add error checking to regmap calls in probe() (git-fixes). - rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers (git-fixes). - rtc: rzn1: Fix weekday underflow when alarm crosses month boundary (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). - rtc: zynqmp: Return optional clock lookup errors (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (bsc#1279778). - s390/pkey: Check length in pkey_pckmo handler implementation (bsc#1270266). - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (bsc#1270267). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL (bsc#1287642). - s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed (bsc#1287642). - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects (bsc#1287642). - s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (bsc#1287642). - s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object (bsc#1287642). - s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio_ccw: Calculate idal length based on idaw type (bsc#1284428). - sched/core: Skip rq->avg_idle update without a valid idle_stamp (git-fixes). - sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - sched/eevdf: Fix augmented max_slice (git-fixes). - sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - sched/psi: Create the psimon kthread outside of cgroup_mutex (bsc#1269134). - scripts: Document grep_branches grep_branches is intended to be usable as standalone script. - scripts: grep_branches.sh compatibility symlink. - scsi: fnic: Abort timed-out NVMe LS requests (bsc#1236344). - scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (bsc#1236344). - scsi: fnic: Add FDLS role handling for NVMe initiators (bsc#1236344). - scsi: fnic: Add the NVMe/FC transport path (bsc#1236344). - scsi: fnic: Advertise NVMe initiator service parameters (bsc#1236344). - scsi: fnic: Bump up version number (bsc#1236344). - scsi: fnic: Decode firmware role configuration (bsc#1236344). - scsi: fnic: Do not use GFP_ZERO for mempools (bsc#1236344). - scsi: fnic: Expose NVMe transport state in debugfs (bsc#1236344). - scsi: fnic: Handle NVMe LS frames in FDLS (bsc#1236344). - scsi: fnic: Make debug logging protocol independent (bsc#1236344). - scsi: fnic: Make fnic_queuecommand() easier to analyze (bsc#1236344). - scsi: fnic: Refactor in_remove flag and call to fnic_fcpio_reset() (bsc#1236344). - scsi: fnic: Remove a useless struct mempool forward declaration (bsc#1236344). - scsi: fnic: Rename fnic_scsi_fcpio_reset() (bsc#1236344). - scsi: fnic: Route completions and resets by initiator role (bsc#1236344). - scsi: fnic: Self-assignment of intr_time_type has no effect (bsc#1236344). - scsi: fnic: Send NVMe LS requests through FDLS (bsc#1236344). - scsi: fnic: Switch to use %ptSp (bsc#1236344). - scsi: fnic: Track NVMe transport statistics (bsc#1236344). - scsi: fnic: Use fnic_num for non-SCSI identifiers (bsc#1236344). - scsi: fnic: Use mempool for receive frames (bsc#1236344). - scsi: qla2xxx: Add 29xx extended logio IOCB support (bsc#1275737). - scsi: qla2xxx: Add 29xx series PCI device ID support (bsc#1275737). - scsi: qla2xxx: Add 29xx support in queue initialisation path (bsc#1275737). - scsi: qla2xxx: Add 64G/128G port speed setting support (bsc#1275737). - scsi: qla2xxx: Add 128-byte IOCB definitions for 29xx (bsc#1275737). - scsi: qla2xxx: Add abort command handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add BSG MPI firmware load/dump for 29xx (bsc#1275737). - scsi: qla2xxx: Add build-time size check for VP config IOCB layout (bsc#1275737). - scsi: qla2xxx: Add extended status continuation and marker IOCBs (bsc#1275737). - scsi: qla2xxx: Add FC operational firmware load for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash block read/write BSG support for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash read/write interface for 29xx (bsc#1275737). - scsi: qla2xxx: Add LS4 pass-through IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add NVRAM config support for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Add size check for ELS status entry layout on 29xx (bsc#1275737). - scsi: qla2xxx: Add size check for extended VP report ID entry (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in data rate functions (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in memory allocation (bsc#1275737). - scsi: qla2xxx: Add support to report MPI FW state (bsc#1275737). - scsi: qla2xxx: Adjust feature gating in BSG paths for 29xx support (bsc#1275737). - scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737). - scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737). - scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737). - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737). - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737). - scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() (bsc#1275737). - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity (bsc#1275737). - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (bsc#1275737). - scsi: qla2xxx: Clarify MPI optrom address/length units (bsc#1275737). - scsi: qla2xxx: Declare qla2xxx_mqueuecommand() static (bsc#1275737). - scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737). - scsi: qla2xxx: Drop vport reference under lock in report ID acquisition (bsc#1275737). - scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737). - scsi: qla2xxx: Enable get_adapter_id mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_firmware_state for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_fw_version mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable init_firmware mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable qla2x00_shutdown for 29xx (bsc#1275737). - scsi: qla2xxx: Enable serdes, resource count and FCE trace for 29xx (bsc#1275737). - scsi: qla2xxx: Enable set_els_cmds and echo_test for 29xx (bsc#1275737). - scsi: qla2xxx: Enhance ABTS processing for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance ct_entry_24xx_ext iocb handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance purex_entry handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance task management IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Extend execute_fw mailbox to include 29xx (bsc#1275737). - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate (bsc#1275737). - scsi: qla2xxx: Fix an error code in qla_get_tmf() (bsc#1275737). - scsi: qla2xxx: Fix an loop timeout test (bsc#1275737). - scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737). - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737). - scsi: qla2xxx: Fix endianness annotations in vp_rpt_id_entry structures (bsc#1275737). - scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737). - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737). - scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters (bsc#1275737). - scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort (bsc#1275737). - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737). - scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737). - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737). - scsi: qla2xxx: Fix the ql2xfc2target parameter description (bsc#1275737). - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (bsc#1275737). - scsi: qla2xxx: Handle INTx not connected while passing through (bsc#1275737). - scsi: qla2xxx: Handle sts_cont_entry_ext_t for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737). - scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737). - scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Improve firmware dump data capture (bsc#1275737). - scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737). - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (bsc#1275737). - scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737). - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737). - scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (bsc#1275737). - scsi: qla2xxx: Replace __le16 bitfields with scalar and accessors (bsc#1275737). - scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737). - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737). - scsi: qla2xxx: Skip image-set-valid attribute for 29xx (bsc#1275737). - scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737). - scsi: qla2xxx: Skip unsupported sysfs attributes for 29xx (bsc#1275737). - scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737). - scsi: qla2xxx: Update handling of ELS IOCBs for 29xx series (bsc#1275737). - scsi: qla2xxx: Update handling of status entries for 29xx series (bsc#1275737). - scsi: qla2xxx: Update IO path to use 128-byte IOCBs for 29xx (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b1 (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b2 (bsc#1275737). - scsi: qla2xxx: Update VP control IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Use 64-bit FPM word counters for 29xx host stats (bsc#1275737). - scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics (bsc#1275737). - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737). - scsi: qla2xxx: Use nr_cpu_ids instead of NR_CPUS for qp_cpu_map allocation (bsc#1275737). - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs (bsc#1275737). - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd (bsc#1275737). - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737). - scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737). - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737). - scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes). - sctp: avoid auth_enable sysctl UAF during netns teardown (git-fixes). - security: ima: introduce IMA_INIT_LATE_SYNC option (bsc#1278685). - security: ima: rename boot_aggregate when ima is initialised at late_sync (bsc#1278685). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests/alsa: Fix the step check for INTEGER controls (git-fixes). - selftests/powerpc/pmu/ebb: fix lost_exception_test hang with sched yield change (bsc#1271979). - selftests: ALSA: pcmtest: Check the frame count of each transfer (git-fixes). - selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture (git-fixes). - selftests: ALSA: pcmtest: Make room for the longest fill pattern (git-fixes). - selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). - serial: 8250: fix possible ISR soft lockup (stable-fixes). - serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). - serial: 8250_dma: Clear stale RX state on shutdown (git-fixes). - serial: 8250_exar: store the GPIO platform device in struct exar8250 (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: 8250_omap: set priv->line before enabling the IRQ (git-fixes). - serial: 8250_uniphier: Use devm_clk_get_enabled() (git-fixes). - serial: amba-pl011: keep console clock enabled for atomic writes (git-fixes). - serial: amba-pl011: unprepare console clock on unregister (git-fixes). - serial: core: clear freed pointers on uart_register_driver() failure (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: fix TIOCMIWAIT race (git-fixes). - serial: imx: serialize imx_uart_ports lifetime (git-fixes). - serial: ma35d1: Do not force-enable an unselected console (git-fixes). - serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes). - serial: ma35d1: Fix OF node reference leaks in console init (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: max310x: fix breaks not reaching the wire in RS485 mode (git-fixes). - serial: msm: select PM_OPP (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - serial: qcom-geni: do not advance stale DMA completions (git-fixes). - serial: qcom-geni: fix TX DMA buffer flush (git-fixes). - serial: sc16is7xx: enable THRI before filling TX FIFO (git-fixes). - serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). - serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes). - serial: sc16is7xx: rename EFR mutex with generic name (stable-fixes). - serial: sc16is7xx: use guards for simple mutex locks (stable-fixes). - serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). - serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes). - slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). - slab: Introduce kmalloc_flex() and family (bsc#1280139). - slab: Introduce kmalloc_obj() and family (bsc#1280139). - slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902). - smb: client: fix cifs_pick_channel when channel needs reconnect (git-fixes). - smb: client: harden DFS cache against invalid target hints (git-fixes). - smb: client: harden POSIX SID length parsing (bsc#1273557). - smb: client: reject overlapping data areas in SMB2 responses (git-fixes). - smb: client: require net admin for CIFS SWN netlink (bsc#1273966). - smb: client: resolve SWN tcon from live registrations (bsc#1273872). - smb: client: use kzalloc to zero-initialize security descriptor buffer (git-fixes). - smb: common: change the data type of num_aces to le16 (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc/tegra: pmc: Add kerneldoc for wake-up variables (git-fixes). - soc/tegra: pmc: Document tegra_pmc.syscore field (stable-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: fsl: qe: check platform_driver_register() in qe_ic_of_init() (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). - soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove (git-fixes). - soc: qcom: rpmh-rsc: manage PM notifiers with devres (git-fixes). - soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap() (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - software node: Fix software_node_get_reference_args() with index -1 (git-fixes). - soundwire: cadence_master: add BRA_NumBytes support (git-fixes). - soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). - soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). - soundwire: fix bug in sdw_add_element_group_count found by syzkaller (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes). - soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes). - soundwire: intel_auxdevice: Fix system suspend/resume handling (git-fixes). - soundwire: only handle alert events when the peripheral is attached (stable-fixes). - soundwire: qcom: Fix port exhaustion check in stream_alloc_ports (git-fixes). - soundwire: validate DT compatible before parsing it (stable-fixes). - speakup: keyhelp: guard letter_offsets possible out-of-range indexing (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: disable clocks on resume failure (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: bcm63xx: disable clock on resume failure (git-fixes). - spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() (git-fixes). - spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op (git-fixes). - spi: bcmbca-hsspi: disable clocks on resume failure (git-fixes). - spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path (git-fixes). - spi: ch341: fix devres lifetime (git-fixes). - spi: ch341: handle transfers without a TX or RX buffer (git-fixes). - spi: ch341: switch to use devm_spi_alloc_host() (stable-fixes). - spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260 (git-fixes). - spi: davinci: switch to managed controller allocation (git-fixes). - spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). - spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). - spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). - spi: Fix DMA mapping ownership on partial map failure (git-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: img-spfi: don't disable runtime PM on DMA deferred probe (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: ljca: validate the response length before copying the data (git-fixes). - spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() (stable-fixes). - spi: microchip-core-qspi: set min_speed_hz during probe (stable-fixes). - spi: mpc52xx: clean up interrupt handling (stable-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: oc-tiny: switch to managed controller allocation (git-fixes). - spi: omap2-mcspi: handle DMA setup failures (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: rspi: Fix DMA mode when the DMA controller is built as a module (git-fixes). - spi: spi-cadence: enable SPI_CONTROLLER_MUST_TX (git-fixes). - spi: spi-cadence: Move TX FIFO full busy-wait into FIFO (git-fixes). - spi: spi-cadence: supports transmission with bits_per_word of 16 and 32 (stable-fixes). - spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers (stable-fixes). - spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_handler(): fix race condition between transfer completion and RX FIFO interrupt (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: sprd-adi: Fix probe succeeding without registering the controller (git-fixes). - spi: tegra114: assert CS GPIO for every transfer in a message (git-fixes). - spi: tegra114: initialize native chip selects inactive (git-fixes). - spi: tegra210-quad: Cache TRANS_STATUS in ISR for timeout handler (bsc#1288594). - spi: tegra210-quad: Convert to hard IRQ with high-priority workqueue (bsc#1288594). - spi: tegra210-quad: Fix false positive WARN on interrupt timeout with transfer complete (bsc#1288594). - spi: tegra210-quad: Process small PIO transfers in hard IRQ context (bsc#1288594). - spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: fbtft: Use sysfs_emit_at() to print to sysfs file (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: av7110: fix sp8870 initialization failure state (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: media: tegra-video: fix of_node_put() on VIP parse errors (git-fixes). - staging: media: tegra-video: vi: fix probe failure on skipped last port (git-fixes). - staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (git-fixes). - staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() (git-fixes). - staging: rtl8723bs: fix missing shared-key auth challenge length check (git-fixes). - staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). - staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). - staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (git-fixes). - staging: rtl8723bs: fix OOB read in WMM_param_handler() (git-fixes). - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - staging: rtl8723bs: use kfree_sensitive() for key material (git-fixes). - staging: rtl8723bs: validate monitor transmit frame lengths (git-fixes). - staging: sm750fb: Add missing Kconfig dependency (git-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - staging: sm750fb: gate dualview dataflow using g_dualview (git-fixes). - thermal/drivers/imx: Disable clock on runtime resume failure (git-fixes). - thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). - thermal/drivers/qoriq: Disable clock on resume failure (git-fixes). - thermal/drivers/rcar: Fix error checking in probe() (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: gov_power_allocator: Fix NULL pointer dereference in update_tz() (git-fixes). - thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: int3400: clean up ODVP on probe failures (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: sysfs: switch to use scnprintf() to suppress truncation warning (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). - thunderbolt: Bound the DROM dual link port number before indexing sw->ports (git-fixes). - thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). - thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). - thunderbolt: Fix bandwidth group reservation indexing (git-fixes). - thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). - thunderbolt: icm: Preserve USB4 proxy data-valid bit (git-fixes). - thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes). - thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). - thunderbolt: Keep the domain reference while processing hotplug (stable-fixes). - thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). - thunderbolt: Reject oversized XDomain properties responses (git-fixes). - thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). - thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable-fixes). - thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). - tlclk: if sscanf() fails, fall back to 0, not random value (git-fixes). - tools/hv: fix typo "retrive" in comment (git-fixes). - tools/power turbostat: Fix add_counter issue if > 24 counters (git-fixes). - tools/power turbostat: Fix fd_perf leak on reset (git-fixes). - tools/power turbostat: Warn, but don't Err on out-dated perf systems (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tools: gpio: fix building from the top level with O= (git-fixes). - tpm: Disable TPM on null key name mismatch (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). - tpm: st33zp24: Return zero on status read failure (git-fixes). - tpm: st33zp24: Validate locality read result (git-fixes). - tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in (bsc#1278685). - tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - tty: clear cdev pointer after cdev_add() failure (git-fixes). - tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64 (git-fixes). - tty: serial: max3100: shut down timer before freeing port (git-fixes). - tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). - tty: skip cdev_del() when no cdev is registered (git-fixes). - tty: vt: fix memory leak in vc_allocate() (git-fixes). - uio: Fix stale info pointer in failed registration path (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes). - usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (git-fixes). - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect (git-fixes). - usb: atm: usbatm: fix invalid ci_range initialization (git-fixes). - USB: c67x00: fix use-after-free in c67x00_add_iso_urb() (git-fixes). - USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). - USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes). - usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). - usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). - usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). - usb: cdnsp: fix incorrect endian conversions for APB timeout register (git-fixes). - usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). - usb: core: Add lock to usb_wakeup_notification() (git-fixes). - usb: core: Add lock to usb_wakeup_notification() (stable-fixes). - usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes). - usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes). - usb: core: Strengthen error handling in hub_hub_status() (git-fixes). - usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). - usb: core: sysfs: add lock to bos_descriptors_read() (stable-fixes). - usb: dwc2: add missing @remotewakeup kernel-doc parameter (git-fixes). - usb: dwc2: gadget: Exit partial power down state when changing USB pull-up (git-fixes). - usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes). - usb: dwc3: clear forceRM when issuing EndTransfer (git-fixes). - usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (git-fixes). - usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). - usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). - usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). - usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes). - usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). - usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: configfs: fix out-of-bounds read of qw_sign (git-fixes). - USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths (git-fixes). - usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). - usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). - usb: gadget: f_fs: Prevent deadlock during ep0 read loop (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - usb: gadget: f_midi: initialize work in f_midi_alloc() (git-fixes). - usb: gadget: f_ncm: Use unsigned int for ndp_index (git-fixes). - usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (git-fixes). - usb: gadget: f_uac1_legacy: remove broken string configfs attributes (git-fixes). - usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). - USB: gadget: ffs: fix mm lifetime handling (stable-fixes). - USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes). - usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). - USB: gadget: fsl-udc: fix dev_printk() device (git-fixes). - usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). - usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs (git-fixes). - usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). - usb: gadget: midi2: remove default configfs groups on teardown (git-fixes). - usb: gadget: pch_udc: remove excess kernel-doc member for registered (git-fixes). - usb: gadget: r8a66597: avoid double free of ep0_req in probe error path (git-fixes). - usb: gadget: snps_udc_plat: clean up PHY on probe deferral (git-fixes). - usb: gadget: u_audio: Fix use-after-free on sound card disconnect (git-fixes). - usb: gadget: uac: validate rate list length before storing (git-fixes). - usb: gadget: udc: skip pullup() if already connected (stable-fixes). - USB: gadget: Use str_enable_disable-like helpers (stable-fixes). - usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() (git-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). - usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). - usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: ljca: bound bank_num in ljca_enumerate_gpio() (git-fixes). - usb: mtu3: allow system suspend during active gadget connection (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - usb: musb: omap2430: clean up probe error handling (stable-fixes). - usb: musb: omap2430: Do not put borrowed of_node in probe (git-fixes). - usb: musb: omap2430: Fix use-after-free in omap2430_probe() (git-fixes). - usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). - usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). - usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). - usb: ohci-st: disable controller wakeup on removal (git-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: phy: fsl-usb: fix missing static keywords (git-fixes). - usb: renesas_usbhs: Fix power-off ordering on unbind (git-fixes). - USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). - USB: serial: digi_acceleport: fix port registration order (git-fixes). - USB: serial: fix driver deregistration order (git-fixes). - USB: serial: fix dynamic id driver deregistration race (git-fixes). - USB: serial: fix ioctl hangup race (git-fixes). - USB: serial: fix port tear down use-after-free (git-fixes). - USB: serial: ftdi_sio: add support for E+H FXA291 (stable-fixes). - USB: serial: option: add Compal EXC-T1 support (stable-fixes). - USB: serial: option: add Compal EXM-G1x support (stable-fixes). - USB: serial: option: add Quectel EG060W (stable-fixes). - USB: serial: option: add Quectel RG660QB (stable-fixes). - USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). - USB: serial: option: add TDTECH MT5710-CN (stable-fixes). - USB: serial: option: fix slab OOB read in interrupt URB callback (git-fixes). - USB: serial: quatech2: fix baud rate overflow (git-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). - USB: serial: spcp8x5: drop broken carrier detect support (git-fixes). - USB: serial: ssu100: fix baud rate overflow (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - USB: storage: add NO_ATA_1X quirk for Longmai USB Key (stable-fixes). - usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). - usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes). - usb: typec: port-mapper: Only match USB4 port if host interface is available (git-fixes). - usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop (git-fixes). - usb: typec: qcom-pmic-typec: drain cc_debounce_dwork if port_start() fails (git-fixes). - usb: typec: qcom-pmic: cancel reset_work on stop (git-fixes). - usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive() (git-fixes). - usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). - usb: typec: thunderbolt: Disable work before freeing tbt on remove (git-fixes). - usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). - usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). - usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). - usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). - usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). - usb: typec: ucsi: unregister debugfs entries on teardown (git-fixes). - usb: typec: ucsi: use UCSI_TIMEOUT_MS for sync command completion (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usb: usbtest: disable dynamic ID support (stable-fixes). - usb: usbtmc: don't store usb_device_id (stable-fixes). - usb: xhci: Handle USB3 port events when there is one roothub (git-fixes). - usb: xhci: Improve Soft Retries after short transfers (stable-fixes). - usb: xhci: use cached HCSPARAMS1 value (stable-fixes). - usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). - usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). - vfs: Add a sysctl for automated deletion of dentry (bsc#1240890 bsc#1276586). - vt: add permission check for KDSKBMETA ioctl (stable-fixes). - vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes). - vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (stable-fixes). - w1: ds28e17: reject an oversize length on an I2C block read (git-fixes). - w1: ds2482: Fix signedness bug in ds2482_w1_triplet() (git-fixes). - watchdog: bd96801_wdt: Fix timeout for enabled WDG (git-fixes). - watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes). - watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes). - watchdog: digicolor: Avoid division by zero (git-fixes). - watchdog: fix hrtimer start when pretimeout is zero (git-fixes). - watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). - watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes). - watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - watchdog: msc313e: Avoid division by zero (git-fixes). - watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes). - watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes). - watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). - watchdog: msc313e: Fix premature reset during timeout update (git-fixes). - watchdog: msc313e: Fix spurious reset on suspend (git-fixes). - watchdog: msc313e: Fix undefined behavior (git-fixes). - watchdog: msc313e: Propagate error code in resume() (git-fixes). - watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes). - watchdog: rtd119x: Avoid division by zero (git-fixes). - watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes). - watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes). - watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). - wifi: ath6kl: avoid buffer overreads in WMI event handlers (git-fixes). - wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath9k: reject short WMI command responses (git-fixes). - wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). - wifi: ath9k_htc: don't store usb_device_id (stable-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump (git-fixes). - wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (git-fixes). - wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). - wifi: ath11k: Correctly copy the hint BSSID in WMI scan request (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: correct monitor destination ring size (git-fixes). - wifi: ath12k: Correctly copy the hint BSSID in WMI scan request (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: ath12k: validate TLV length in process_tpc_stats() (git-fixes). - wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmfmac: cyw: pass PMKID to firmware if present (git-fixes). - wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). - wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (git-fixes). - wifi: brcmfmac: fix P2P action frame handling without device vif (git-fixes). - wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). - wifi: brcmfmac: initialize SDIO data work before cleanup (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: bound element ID read when checking non-inheritance (git-fixes). - wifi: cfg80211: cancel sched scan results work on unregister (git-fixes). - wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes). - wifi: cfg80211: derive S1G beacon TSF from S1G fields (git-fixes). - wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes). - wifi: cfg80211: don't free driver-owned scan requests (git-fixes). - wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). - wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). - wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes). - wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). - wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). - wifi: cfg80211: reg: protect regdb pointer with RCU (git-fixes). - wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). - wifi: cfg80211: reject unsupported PMSR FTM location requests (git-fixes). - wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). - wifi: cfg80211: validate PMSR FTM preamble range (git-fixes). - wifi: cfg80211: validate PMSR measurement type data (git-fixes). - wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). - wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes). - wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() (git-fixes). - wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). - wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). - wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). - wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: fix 22000 series SMEM parsing (stable-fixes). - wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs (git-fixes). - wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments (git-fixes). - wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). - wifi: iwlwifi: mei: pass correct argument to function (git-fixes). - wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes). - wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). - wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). - wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser (git-fixes). - wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes). - wifi: iwlwifi: mvm: fix P2P-Device binding handling (stable-fixes). - wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). - wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). - wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes). - wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes). - wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). - wifi: iwlwifi: pcie: null RX pointers after free (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: libertas: fix memory leak in helper_firmware_cb() (git-fixes). - wifi: libertas: reject short monitor TX frames (stable-fixes). - wifi: libipw: fix key index receive bound checks (stable-fixes). - wifi: libipw: reject too-short association responses (git-fixes). - wifi: libipw: reject too-short beacon and probe responses (git-fixes). - wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). - wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). - wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes). - wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). - wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes). - wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). - wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). - wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: disconnect on CSA to channel 0 (git-fixes). - wifi: mac80211: don't access the TSF of a down interface (git-fixes). - wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes). - wifi: mac80211: don't allow link changes when iface is down (git-fixes). - wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). - wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). - wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: don't start a ROC while scanning (git-fixes). - wifi: mac80211: don't warn when an IBSS has no channel to scan (git-fixes). - wifi: mac80211: drain PS delivery work during station teardown (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix fils_discovery double free on alloc failure (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() (git-fixes). - wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix per-STA profile length in cross-link CSA parsing (git-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (git-fixes). - wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock (git-fixes). - wifi: mac80211: handle empty FILS association request payload (git-fixes). - wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). - wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: keep fallback association elements alive (git-fixes). - wifi: mac80211: keep paired old chanctx alive (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: release the channel if start fails (git-fixes). - wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). - wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). - wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: refuse to make a monitor active when it has no queue (git-fixes). - wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). - wifi: mac80211: release mesh path quota on failed additions (git-fixes). - wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: reset state when starting AP fails (git-fixes). - wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). - wifi: mac80211: send TWT teardown to peer after setup TX failure (git-fixes). - wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). - wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). - wifi: mac80211: skip default WMM setup for AP_VLAN links (git-fixes). - wifi: mac80211: skip unused probe response countdown offsets (git-fixes). - wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). - wifi: mac80211: track MU-MIMO configuration on disabled interfaces (stable-fixes). - wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mac80211: validate deauth frame length before reason access (stable-fixes). - wifi: mt76: add init_wiphy callback (stable-fixes). - wifi: mt76: assign link_id when sending probe request during scan (git-fixes). - wifi: mt76: cancel reset and rc work on device unregister (git-fixes). - wifi: mt76: check txfree done event on the WED hw path (git-fixes). - wifi: mt76: connac: add MT7991A (0x7991) to is_mt7996() (git-fixes). - wifi: mt76: decode the full VHT Rx STBC capability field (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll (git-fixes). - wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode (git-fixes). - wifi: mt76: fix HE DCM max-RU capability encoding (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: fix non-AQL packet accounting for MLO stations (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix queue assignment for disassoc packets (git-fixes). - wifi: mt76: fix RX data queuing of RRO 3.0 (git-fixes). - wifi: mt76: fix RXDMAD_C buffer recycling race (git-fixes). - wifi: mt76: fix stranded frames in mt76_txq_schedule_pending (git-fixes). - wifi: mt76: fix uninitialised RXDMAD_C descriptor info (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: compute the assoc RSSI from the chain signals (git-fixes). - wifi: mt76: mt792x: Fix memory leak in SDIO TX path (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete (git-fixes). - wifi: mt76: mt792x: pick the SAR table layout from the table itself (git-fixes). - wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7603: initialize global station WCID (git-fixes). - wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: restore DBDC state after ext PHY failure (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss (git-fixes). - wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear (git-fixes). - wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). - wifi: mt76: mt7915: fix double hif2 init on the non-WED path (git-fixes). - wifi: mt76: mt7915: fix ext PHY use-after-free on register error path (git-fixes). - wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986 (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie (git-fixes). - wifi: mt76: mt7915: publish wcid before MCU add commands (git-fixes). - wifi: mt76: mt7915: release hif2 reference on probe IRQ failure (git-fixes). - wifi: mt76: mt7915: set correct background radar capability (stable-fixes). - wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement (git-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7915: unwind state on add_interface failure (git-fixes). - wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields (git-fixes). - wifi: mt76: mt7915: write RX header translation bit to the correct register (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7921: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). - wifi: mt76: mt7921: validate CLC firmware records (git-fixes). - wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). - wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). - wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes). - wifi: mt76: mt7925: cancel mlo_pm_work on stop (git-fixes). - wifi: mt76: mt7925: cancel pending mlo_pm_work (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). - wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb (git-fixes). - wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix msg len mismatch between driver and firmware (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). - wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7925: update clc before setting sar power table (git-fixes). - wifi: mt76: mt7996: add missing rdd_idx check when enabling background radar (git-fixes). - wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config (git-fixes). - wifi: mt76: mt7996: clear stale link state on full reset (git-fixes). - wifi: mt76: mt7996: disable the RX NAPIs before the DMA cleanup (git-fixes). - wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed (git-fixes). - wifi: mt76: mt7996: don't leak MLD group index on remap alloc failure (git-fixes). - wifi: mt76: mt7996: don't report a zero TX bitrate (git-fixes). - wifi: mt76: mt7996: fix capability of EHT-MCS 15 in MRU (git-fixes). - wifi: mt76: mt7996: fix MIB TX aggregation counter registers for mt7990 (git-fixes). - wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx() (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: fix reg addr remap when addr is 0 (git-fixes). - wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). - wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames (git-fixes). - wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() (git-fixes). - wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset (git-fixes). - wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER (git-fixes). - wifi: mt76: mt7996: remove beacon_int_min_gcd from ADHOC interface combinations (git-fixes). - wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV (git-fixes). - wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset (git-fixes). - wifi: mt76: mt7996: skip key upload when adding an offchannel link (git-fixes). - wifi: mt76: mt7996: validate default EEPROM firmware size (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: mt7996: validate RX band_idx before dereferencing phys (git-fixes). - wifi: mt76: mt7996: wake MCU waiters before aborting scan in L1 SER (git-fixes). - wifi: mt76: only consume the WO drop bit on WED v2 devices (git-fixes). - wifi: mt76: reject out-of-range link ids in mt76_vif_link() (git-fixes). - wifi: mt76: report data NSS for STBC frames in RX rate decode (git-fixes). - wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes). - wifi: mwifiex: Detach sync cmd buffer on interrupted wait (git-fixes). - wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes). - wifi: mwifiex: prevent authentication frame length truncation (git-fixes). - wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). - wifi: mwifiex: validate action frame fixed fields (git-fixes). - wifi: mwifiex: validate scan response extents (git-fixes). - wifi: nl80211: check link is beaconing for color change (stable-fixes). - wifi: nl80211: free RNR data on MBSSID mismatch (git-fixes). - wifi: nl80211: reject beacons with bad HE operation (stable-fixes). - wifi: nl80211: validate nested MBSSID IE blobs (git-fixes). - wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). - wifi: p54: validate curve data length in the calibration curve converters (git-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: p54: validate RX frame length in p54_rx_eeprom_readback() (git-fixes). - wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). - wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). - wifi: rsi: fix heap OOB write on key removal (git-fixes). - wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). - wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (git-fixes). - wifi: rtl8xxxu: free RX skb when URB submission fails (git-fixes). - wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). - wifi: rtlwifi: pci: fix error path in rtl_pci_probe() (git-fixes). - wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids (git-fixes). - wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() (git-fixes). - wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (git-fixes). - wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable-fixes). - wifi: rtw88: pci: fix resource leak on failed NAPI setup (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). - wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). - wifi: rtw89: fix HE extended capability length check (git-fixes). - wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM (git-fixes). - wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). - wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). - wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). - wifi: virt_wifi: don't transfer operstate before register (git-fixes). - wifi: virt_wifi: free skb when disconnected (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - wifi: wfx: validate MIB read length before copying to caller (git-fixes). - wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes). - wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes). - wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). - wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes). - wifi: zd1211rw: reject secondary interfaces to prevent conflicts (git-fixes). - workqueue: Fix unbound pool lifetime for pending pwqs (bsc#1289119). - workqueue: release pwq pools by pool type (bsc#1289119). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). - x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (git-fixes). - x86/bugs: Remove dead code which might prevent from building (git-fixes). - x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). - x86/bugs: Simplify SSB cmdline parsing (git-fixes). - x86/bugs: Use early_param() for spectre_v2 (git-fixes). - x86/bugs: Use early_param() for spectre_v2_user (git-fixes). - x86/fpu/xstate: Adjust XSAVE buffer size calculation (bsc#1268374 jsc#PED-14216). - x86/fpu/xstate: Adjust xstate copying logic for user ABI (bsc#1268374 jsc#PED-14216). - x86/fpu/xstate: Introduce xfeature order table and accessor macro (bsc#1268374 jsc#PED-14216). - x86/fpu/xstate: Remove xstate offset check (bsc#1268374 jsc#PED-14216). - x86/fpu: Log XSAVE disablement consistently (git-fixes). - x86/fpu: Remove export of mxcsr_feature_mask (git-fixes). - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() (git-fixes). - x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git-fixes). - x86/hyperv: reserve more vectors (git-fixes). - x86/hyperv: Stop using 32-bit MSR interfaces (git-fixes). - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling (git-fixes). - x86/microcode/intel: Reject problematic loading on Granite Rapids systems (git-fixes). - x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - x86/virt/tdx: Print TDX module version during init (git-fixes). - x86/virt/tdx: Retrieve TDX module version (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). - xhci: dbgtty: Fix unregister on tty_alloc_driver() failure (git-fixes). - xhci: dbgtty: Fix unregister on tty_register_driver() failure (git-fixes). - xhci: fix lost bounce buffers on TDs spanning several ring segments (git-fixes). - xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). - xsk: avoid data corruption on cq descriptor number (git-fixes). - xsk: avoid skb leak in XDP_TX_METADATA case (git-fixes). - xsk: fix u64 descriptor address truncation on 32-bit architectures (git-fixes). - xsk: fix use-after-free of xs->skb in xsk_build_skb() free_err path (git-fixes). - xsk: fix xsk_addrs slab leak on multi-buffer error path (git-fixes). - xsk: prevent CQ desync when freeing half-built skbs in xsk_build_skb() (git-fixes). - xsk: reject sw-csum UMEM binding to IFF_TX_SKB_NO_LINEAR devices (git-fixes). kernel-default-base-6.12.0-160100.9.1.160100.3.17.aarch64.rpm True kernel-default-base-6.12.0-160100.9.1.160100.3.17.src.rpm True kernel-devel-6.12.0-160100.9.1.noarch.rpm True kernel-macros-6.12.0-160100.9.1.noarch.rpm True kernel-source-6.12.0-160100.9.1.noarch.rpm True kernel-source-6.12.0-160100.9.1.src.rpm True kernel-source-vanilla-6.12.0-160100.9.1.noarch.rpm True dtb-aarch64-6.12.0-160100.9.1.nosrc.rpm True dtb-allwinner-6.12.0-160100.9.1.aarch64.rpm True dtb-altera-6.12.0-160100.9.1.aarch64.rpm True dtb-amazon-6.12.0-160100.9.1.aarch64.rpm True dtb-amd-6.12.0-160100.9.1.aarch64.rpm True dtb-amlogic-6.12.0-160100.9.1.aarch64.rpm True dtb-apm-6.12.0-160100.9.1.aarch64.rpm True dtb-apple-6.12.0-160100.9.1.aarch64.rpm True dtb-arm-6.12.0-160100.9.1.aarch64.rpm True dtb-broadcom-6.12.0-160100.9.1.aarch64.rpm True dtb-cavium-6.12.0-160100.9.1.aarch64.rpm True dtb-exynos-6.12.0-160100.9.1.aarch64.rpm True dtb-freescale-6.12.0-160100.9.1.aarch64.rpm True dtb-hisilicon-6.12.0-160100.9.1.aarch64.rpm True dtb-lg-6.12.0-160100.9.1.aarch64.rpm True dtb-marvell-6.12.0-160100.9.1.aarch64.rpm True dtb-mediatek-6.12.0-160100.9.1.aarch64.rpm True dtb-nvidia-6.12.0-160100.9.1.aarch64.rpm True dtb-qcom-6.12.0-160100.9.1.aarch64.rpm True dtb-renesas-6.12.0-160100.9.1.aarch64.rpm True dtb-rockchip-6.12.0-160100.9.1.aarch64.rpm True dtb-socionext-6.12.0-160100.9.1.aarch64.rpm True dtb-sprd-6.12.0-160100.9.1.aarch64.rpm True dtb-xilinx-6.12.0-160100.9.1.aarch64.rpm True cluster-md-kmp-64kb-6.12.0-160100.9.1.aarch64.rpm True cluster-md-kmp-64kb-debuginfo-6.12.0-160100.9.1.aarch64.rpm True dlm-kmp-64kb-6.12.0-160100.9.1.aarch64.rpm True dlm-kmp-64kb-debuginfo-6.12.0-160100.9.1.aarch64.rpm True gfs2-kmp-64kb-6.12.0-160100.9.1.aarch64.rpm True gfs2-kmp-64kb-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-64kb-6.12.0-160100.9.1.aarch64.rpm True kernel-64kb-6.12.0-160100.9.1.nosrc.rpm True kernel-64kb-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-64kb-debugsource-6.12.0-160100.9.1.aarch64.rpm True kernel-64kb-devel-6.12.0-160100.9.1.aarch64.rpm True kernel-64kb-extra-6.12.0-160100.9.1.aarch64.rpm True kernel-64kb-extra-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-64kb-optional-6.12.0-160100.9.1.aarch64.rpm True kernel-64kb-optional-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kselftests-kmp-64kb-6.12.0-160100.9.1.aarch64.rpm True kselftests-kmp-64kb-debuginfo-6.12.0-160100.9.1.aarch64.rpm True ocfs2-kmp-64kb-6.12.0-160100.9.1.aarch64.rpm True ocfs2-kmp-64kb-debuginfo-6.12.0-160100.9.1.aarch64.rpm True cluster-md-kmp-azure-6.12.0-160100.9.1.aarch64.rpm True cluster-md-kmp-azure-debuginfo-6.12.0-160100.9.1.aarch64.rpm True dlm-kmp-azure-6.12.0-160100.9.1.aarch64.rpm True dlm-kmp-azure-debuginfo-6.12.0-160100.9.1.aarch64.rpm True gfs2-kmp-azure-6.12.0-160100.9.1.aarch64.rpm True gfs2-kmp-azure-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-azure-6.12.0-160100.9.1.aarch64.rpm True kernel-azure-6.12.0-160100.9.1.nosrc.rpm True kernel-azure-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-azure-debugsource-6.12.0-160100.9.1.aarch64.rpm True kernel-azure-devel-6.12.0-160100.9.1.aarch64.rpm True kernel-azure-extra-6.12.0-160100.9.1.aarch64.rpm True kernel-azure-extra-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-azure-optional-6.12.0-160100.9.1.aarch64.rpm True kernel-azure-optional-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kselftests-kmp-azure-6.12.0-160100.9.1.aarch64.rpm True kselftests-kmp-azure-debuginfo-6.12.0-160100.9.1.aarch64.rpm True ocfs2-kmp-azure-6.12.0-160100.9.1.aarch64.rpm True ocfs2-kmp-azure-debuginfo-6.12.0-160100.9.1.aarch64.rpm True cluster-md-kmp-default-6.12.0-160100.9.1.aarch64.rpm True cluster-md-kmp-default-debuginfo-6.12.0-160100.9.1.aarch64.rpm True dlm-kmp-default-6.12.0-160100.9.1.aarch64.rpm True dlm-kmp-default-debuginfo-6.12.0-160100.9.1.aarch64.rpm True gfs2-kmp-default-6.12.0-160100.9.1.aarch64.rpm True gfs2-kmp-default-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-default-6.12.0-160100.9.1.aarch64.rpm True kernel-default-6.12.0-160100.9.1.nosrc.rpm True kernel-default-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-default-debugsource-6.12.0-160100.9.1.aarch64.rpm True kernel-default-devel-6.12.0-160100.9.1.aarch64.rpm True kernel-default-extra-6.12.0-160100.9.1.aarch64.rpm True kernel-default-extra-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-default-optional-6.12.0-160100.9.1.aarch64.rpm True kernel-default-optional-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kselftests-kmp-default-6.12.0-160100.9.1.aarch64.rpm True kselftests-kmp-default-debuginfo-6.12.0-160100.9.1.aarch64.rpm True ocfs2-kmp-default-6.12.0-160100.9.1.aarch64.rpm True ocfs2-kmp-default-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-docs-6.12.0-160100.9.1.noarch.rpm True kernel-docs-6.12.0-160100.9.1.nosrc.rpm True kernel-docs-html-6.12.0-160100.9.1.noarch.rpm True kernel-kvmsmall-6.12.0-160100.9.1.aarch64.rpm True kernel-kvmsmall-6.12.0-160100.9.1.nosrc.rpm True kernel-kvmsmall-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-kvmsmall-debugsource-6.12.0-160100.9.1.aarch64.rpm True kernel-kvmsmall-devel-6.12.0-160100.9.1.aarch64.rpm True kernel-obs-build-6.12.0-160100.9.1.aarch64.rpm True kernel-obs-build-6.12.0-160100.9.1.src.rpm True kernel-obs-build-debugsource-6.12.0-160100.9.1.aarch64.rpm True kernel-obs-qa-6.12.0-160100.9.1.aarch64.rpm True kernel-obs-qa-6.12.0-160100.9.1.src.rpm True cluster-md-kmp-rt-6.12.0-160100.9.1.aarch64.rpm True cluster-md-kmp-rt-debuginfo-6.12.0-160100.9.1.aarch64.rpm True dlm-kmp-rt-6.12.0-160100.9.1.aarch64.rpm True dlm-kmp-rt-debuginfo-6.12.0-160100.9.1.aarch64.rpm True gfs2-kmp-rt-6.12.0-160100.9.1.aarch64.rpm True gfs2-kmp-rt-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-rt-6.12.0-160100.9.1.aarch64.rpm True kernel-rt-6.12.0-160100.9.1.nosrc.rpm True kernel-rt-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-rt-debugsource-6.12.0-160100.9.1.aarch64.rpm True kernel-rt-devel-6.12.0-160100.9.1.aarch64.rpm True kernel-rt-extra-6.12.0-160100.9.1.aarch64.rpm True kernel-rt-extra-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-rt-optional-6.12.0-160100.9.1.aarch64.rpm True kernel-rt-optional-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kselftests-kmp-rt-6.12.0-160100.9.1.aarch64.rpm True kselftests-kmp-rt-debuginfo-6.12.0-160100.9.1.aarch64.rpm True ocfs2-kmp-rt-6.12.0-160100.9.1.aarch64.rpm True ocfs2-kmp-rt-debuginfo-6.12.0-160100.9.1.aarch64.rpm True kernel-syms-6.12.0-160100.9.1.aarch64.rpm True kernel-syms-6.12.0-160100.9.1.src.rpm True kernel-default-base-6.12.0-160100.9.1.160100.3.15.ppc64le.rpm True kernel-default-base-6.12.0-160100.9.1.160100.3.15.src.rpm True cluster-md-kmp-default-6.12.0-160100.9.1.ppc64le.rpm True cluster-md-kmp-default-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True dlm-kmp-default-6.12.0-160100.9.1.ppc64le.rpm True dlm-kmp-default-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True gfs2-kmp-default-6.12.0-160100.9.1.ppc64le.rpm True gfs2-kmp-default-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True kernel-default-6.12.0-160100.9.1.ppc64le.rpm True kernel-default-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True kernel-default-debugsource-6.12.0-160100.9.1.ppc64le.rpm True kernel-default-devel-6.12.0-160100.9.1.ppc64le.rpm True kernel-default-extra-6.12.0-160100.9.1.ppc64le.rpm True kernel-default-extra-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True kernel-default-optional-6.12.0-160100.9.1.ppc64le.rpm True kernel-default-optional-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True kselftests-kmp-default-6.12.0-160100.9.1.ppc64le.rpm True kselftests-kmp-default-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True ocfs2-kmp-default-6.12.0-160100.9.1.ppc64le.rpm True ocfs2-kmp-default-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True kernel-kvmsmall-6.12.0-160100.9.1.ppc64le.rpm True kernel-kvmsmall-debuginfo-6.12.0-160100.9.1.ppc64le.rpm True kernel-kvmsmall-debugsource-6.12.0-160100.9.1.ppc64le.rpm True kernel-kvmsmall-devel-6.12.0-160100.9.1.ppc64le.rpm True kernel-obs-build-6.12.0-160100.9.1.ppc64le.rpm True kernel-obs-build-debugsource-6.12.0-160100.9.1.ppc64le.rpm True kernel-obs-qa-6.12.0-160100.9.1.ppc64le.rpm True kernel-syms-6.12.0-160100.9.1.ppc64le.rpm True cluster-md-kmp-default-6.12.0-160100.9.1.s390x.rpm True cluster-md-kmp-default-debuginfo-6.12.0-160100.9.1.s390x.rpm True dlm-kmp-default-6.12.0-160100.9.1.s390x.rpm True dlm-kmp-default-debuginfo-6.12.0-160100.9.1.s390x.rpm True gfs2-kmp-default-6.12.0-160100.9.1.s390x.rpm True gfs2-kmp-default-debuginfo-6.12.0-160100.9.1.s390x.rpm True kernel-default-6.12.0-160100.9.1.s390x.rpm True kernel-default-debuginfo-6.12.0-160100.9.1.s390x.rpm True kernel-default-debugsource-6.12.0-160100.9.1.s390x.rpm True kernel-default-devel-6.12.0-160100.9.1.s390x.rpm True kernel-default-extra-6.12.0-160100.9.1.s390x.rpm True kernel-default-extra-debuginfo-6.12.0-160100.9.1.s390x.rpm True kernel-default-optional-6.12.0-160100.9.1.s390x.rpm True kernel-default-optional-debuginfo-6.12.0-160100.9.1.s390x.rpm True kselftests-kmp-default-6.12.0-160100.9.1.s390x.rpm True kselftests-kmp-default-debuginfo-6.12.0-160100.9.1.s390x.rpm True ocfs2-kmp-default-6.12.0-160100.9.1.s390x.rpm True ocfs2-kmp-default-debuginfo-6.12.0-160100.9.1.s390x.rpm True kernel-obs-build-6.12.0-160100.9.1.s390x.rpm True kernel-obs-build-debugsource-6.12.0-160100.9.1.s390x.rpm True kernel-obs-qa-6.12.0-160100.9.1.s390x.rpm True kernel-syms-6.12.0-160100.9.1.s390x.rpm True kernel-zfcpdump-6.12.0-160100.9.1.nosrc.rpm True kernel-zfcpdump-6.12.0-160100.9.1.s390x.rpm True kernel-zfcpdump-debuginfo-6.12.0-160100.9.1.s390x.rpm True kernel-zfcpdump-debugsource-6.12.0-160100.9.1.s390x.rpm True kernel-default-base-6.12.0-160100.9.1.160100.3.14.src.rpm True kernel-default-base-6.12.0-160100.9.1.160100.3.14.x86_64.rpm True cluster-md-kmp-azure-6.12.0-160100.9.1.x86_64.rpm True cluster-md-kmp-azure-debuginfo-6.12.0-160100.9.1.x86_64.rpm True dlm-kmp-azure-6.12.0-160100.9.1.x86_64.rpm True dlm-kmp-azure-debuginfo-6.12.0-160100.9.1.x86_64.rpm True gfs2-kmp-azure-6.12.0-160100.9.1.x86_64.rpm True gfs2-kmp-azure-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-debugsource-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-devel-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-devel-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-extra-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-extra-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-optional-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-optional-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-vdso-6.12.0-160100.9.1.x86_64.rpm True kernel-azure-vdso-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kselftests-kmp-azure-6.12.0-160100.9.1.x86_64.rpm True kselftests-kmp-azure-debuginfo-6.12.0-160100.9.1.x86_64.rpm True ocfs2-kmp-azure-6.12.0-160100.9.1.x86_64.rpm True ocfs2-kmp-azure-debuginfo-6.12.0-160100.9.1.x86_64.rpm True cluster-md-kmp-default-6.12.0-160100.9.1.x86_64.rpm True cluster-md-kmp-default-debuginfo-6.12.0-160100.9.1.x86_64.rpm True dlm-kmp-default-6.12.0-160100.9.1.x86_64.rpm True dlm-kmp-default-debuginfo-6.12.0-160100.9.1.x86_64.rpm True gfs2-kmp-default-6.12.0-160100.9.1.x86_64.rpm True gfs2-kmp-default-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-default-6.12.0-160100.9.1.x86_64.rpm True kernel-default-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-default-debugsource-6.12.0-160100.9.1.x86_64.rpm True kernel-default-devel-6.12.0-160100.9.1.x86_64.rpm True kernel-default-devel-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-default-extra-6.12.0-160100.9.1.x86_64.rpm True kernel-default-extra-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-default-optional-6.12.0-160100.9.1.x86_64.rpm True kernel-default-optional-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-default-vdso-6.12.0-160100.9.1.x86_64.rpm True kernel-default-vdso-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kselftests-kmp-default-6.12.0-160100.9.1.x86_64.rpm True kselftests-kmp-default-debuginfo-6.12.0-160100.9.1.x86_64.rpm True ocfs2-kmp-default-6.12.0-160100.9.1.x86_64.rpm True ocfs2-kmp-default-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-kvmsmall-6.12.0-160100.9.1.x86_64.rpm True kernel-kvmsmall-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-kvmsmall-debugsource-6.12.0-160100.9.1.x86_64.rpm True kernel-kvmsmall-devel-6.12.0-160100.9.1.x86_64.rpm True kernel-kvmsmall-devel-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-kvmsmall-vdso-6.12.0-160100.9.1.x86_64.rpm True kernel-kvmsmall-vdso-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-obs-build-6.12.0-160100.9.1.x86_64.rpm True kernel-obs-build-debugsource-6.12.0-160100.9.1.x86_64.rpm True kernel-obs-qa-6.12.0-160100.9.1.x86_64.rpm True cluster-md-kmp-rt-6.12.0-160100.9.1.x86_64.rpm True cluster-md-kmp-rt-debuginfo-6.12.0-160100.9.1.x86_64.rpm True dlm-kmp-rt-6.12.0-160100.9.1.x86_64.rpm True dlm-kmp-rt-debuginfo-6.12.0-160100.9.1.x86_64.rpm True gfs2-kmp-rt-6.12.0-160100.9.1.x86_64.rpm True gfs2-kmp-rt-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-debugsource-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-devel-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-devel-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-extra-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-extra-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-optional-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-optional-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-vdso-6.12.0-160100.9.1.x86_64.rpm True kernel-rt-vdso-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kselftests-kmp-rt-6.12.0-160100.9.1.x86_64.rpm True kselftests-kmp-rt-debuginfo-6.12.0-160100.9.1.x86_64.rpm True ocfs2-kmp-rt-6.12.0-160100.9.1.x86_64.rpm True ocfs2-kmp-rt-debuginfo-6.12.0-160100.9.1.x86_64.rpm True kernel-syms-6.12.0-160100.9.1.x86_64.rpm True openSUSE-Leap-16.1-33 Recommended update for the initial kernel livepatch important SUSE SLFO 1.3 This update provides the initial livepatches for the SUSE Linux Enterprise 16.1 kernel update. This update does not contain any fixes and will be updated with livepatches later. kernel-livepatch-6_12_0-160100_9-default-1-160100.1.1.aarch64.rpm True kernel-livepatch-6_12_0-160100_9-default-debuginfo-1-160100.1.1.aarch64.rpm True kernel-livepatch-SLE16-SP1_Update_1-1-160100.1.1.src.rpm True kernel-livepatch-SLE16-SP1_Update_1-debugsource-1-160100.1.1.aarch64.rpm True kernel-livepatch-6_12_0-160100_9-default-1-160100.1.1.ppc64le.rpm True kernel-livepatch-6_12_0-160100_9-default-debuginfo-1-160100.1.1.ppc64le.rpm True kernel-livepatch-SLE16-SP1_Update_1-debugsource-1-160100.1.1.ppc64le.rpm True kernel-livepatch-6_12_0-160100_9-default-1-160100.1.1.s390x.rpm True kernel-livepatch-6_12_0-160100_9-default-debuginfo-1-160100.1.1.s390x.rpm True kernel-livepatch-SLE16-SP1_Update_1-debugsource-1-160100.1.1.s390x.rpm True kernel-livepatch-6_12_0-160100_9-rt-1-160100.1.1.x86_64.rpm True kernel-livepatch-6_12_0-160100_9-rt-debuginfo-1-160100.1.1.x86_64.rpm True kernel-livepatch-SLE16-SP1-RT_Update_1-1-160100.1.1.src.rpm True kernel-livepatch-SLE16-SP1-RT_Update_1-debugsource-1-160100.1.1.x86_64.rpm True kernel-livepatch-6_12_0-160100_9-default-1-160100.1.1.x86_64.rpm True kernel-livepatch-6_12_0-160100_9-default-debuginfo-1-160100.1.1.x86_64.rpm True kernel-livepatch-SLE16-SP1_Update_1-debugsource-1-160100.1.1.x86_64.rpm True openSUSE-Leap-16.1-4 Security update for apr-util critical SUSE SLFO 1.3 This update for apr-util fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850). - CVE-2026-34501: heap buffer overflow in redis client (bsc#1274852). - CVE-2026-34502: heap buffer overflow in APR memcached client (bsc#1274854). apr-util-1.6.3-160100.3.1.src.rpm apr-util-debuginfo-1.6.3-160100.3.1.aarch64.rpm apr-util-debugsource-1.6.3-160100.3.1.aarch64.rpm apr-util-devel-1.6.3-160100.3.1.aarch64.rpm libapr-util1-0-1.6.3-160100.3.1.aarch64.rpm libapr-util1-0-dbd-mysql-1.6.3-160100.3.1.aarch64.rpm libapr-util1-0-dbd-mysql-debuginfo-1.6.3-160100.3.1.aarch64.rpm libapr-util1-0-dbd-pgsql-1.6.3-160100.3.1.aarch64.rpm libapr-util1-0-dbd-pgsql-debuginfo-1.6.3-160100.3.1.aarch64.rpm libapr-util1-0-dbd-sqlite3-1.6.3-160100.3.1.aarch64.rpm libapr-util1-0-dbd-sqlite3-debuginfo-1.6.3-160100.3.1.aarch64.rpm libapr-util1-0-debuginfo-1.6.3-160100.3.1.aarch64.rpm apr-util-debuginfo-1.6.3-160100.3.1.ppc64le.rpm apr-util-debugsource-1.6.3-160100.3.1.ppc64le.rpm apr-util-devel-1.6.3-160100.3.1.ppc64le.rpm libapr-util1-0-1.6.3-160100.3.1.ppc64le.rpm libapr-util1-0-dbd-mysql-1.6.3-160100.3.1.ppc64le.rpm libapr-util1-0-dbd-mysql-debuginfo-1.6.3-160100.3.1.ppc64le.rpm libapr-util1-0-dbd-pgsql-1.6.3-160100.3.1.ppc64le.rpm libapr-util1-0-dbd-pgsql-debuginfo-1.6.3-160100.3.1.ppc64le.rpm libapr-util1-0-dbd-sqlite3-1.6.3-160100.3.1.ppc64le.rpm libapr-util1-0-dbd-sqlite3-debuginfo-1.6.3-160100.3.1.ppc64le.rpm libapr-util1-0-debuginfo-1.6.3-160100.3.1.ppc64le.rpm apr-util-debuginfo-1.6.3-160100.3.1.s390x.rpm apr-util-debugsource-1.6.3-160100.3.1.s390x.rpm apr-util-devel-1.6.3-160100.3.1.s390x.rpm libapr-util1-0-1.6.3-160100.3.1.s390x.rpm libapr-util1-0-dbd-mysql-1.6.3-160100.3.1.s390x.rpm libapr-util1-0-dbd-mysql-debuginfo-1.6.3-160100.3.1.s390x.rpm libapr-util1-0-dbd-pgsql-1.6.3-160100.3.1.s390x.rpm libapr-util1-0-dbd-pgsql-debuginfo-1.6.3-160100.3.1.s390x.rpm libapr-util1-0-dbd-sqlite3-1.6.3-160100.3.1.s390x.rpm libapr-util1-0-dbd-sqlite3-debuginfo-1.6.3-160100.3.1.s390x.rpm libapr-util1-0-debuginfo-1.6.3-160100.3.1.s390x.rpm apr-util-debuginfo-1.6.3-160100.3.1.x86_64.rpm apr-util-debugsource-1.6.3-160100.3.1.x86_64.rpm apr-util-devel-1.6.3-160100.3.1.x86_64.rpm libapr-util1-0-1.6.3-160100.3.1.x86_64.rpm libapr-util1-0-dbd-mysql-1.6.3-160100.3.1.x86_64.rpm libapr-util1-0-dbd-mysql-debuginfo-1.6.3-160100.3.1.x86_64.rpm libapr-util1-0-dbd-pgsql-1.6.3-160100.3.1.x86_64.rpm libapr-util1-0-dbd-pgsql-debuginfo-1.6.3-160100.3.1.x86_64.rpm libapr-util1-0-dbd-sqlite3-1.6.3-160100.3.1.x86_64.rpm libapr-util1-0-dbd-sqlite3-debuginfo-1.6.3-160100.3.1.x86_64.rpm libapr-util1-0-debuginfo-1.6.3-160100.3.1.x86_64.rpm openSUSE-Leap-16.1-5 Security update for trivy important SUSE SLFO 1.3 This update for trivy fixes the following issues: - CVE-2026-19585: github.com/hashicorp/go-getter: path traversal during S3 and GCS directory downloads may allow files to be written outside the requested destination (bsc#1284829). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285541). - CVE-2026-97032: golang.org/x/net/http2: HTTP/2 server crash due to HPACK encoder race (bsc#1287329). Changes for trivy: - Update to version 0.76.1: trivy-0.76.1-160100.1.1.aarch64.rpm trivy-0.76.1-160100.1.1.src.rpm trivy-0.76.1-160100.1.1.ppc64le.rpm trivy-0.76.1-160100.1.1.s390x.rpm trivy-0.76.1-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-6 Security update for jsoup important SUSE SLFO 1.3 This update for jsoup fixes the following issue: - CVE-2026-75140: denial of service due to uncontrolled resource consumption in XmlTreeBuilder (bsc#1275912). Changes for jsoup: - Updated to version 1.23.2. jsoup-1.23.2-160100.1.1.noarch.rpm jsoup-1.23.2-160100.1.1.src.rpm jsoup-javadoc-1.23.2-160100.1.1.noarch.rpm openSUSE-Leap-16.1-7 Security update for python-Brotli important SUSE SLFO 1.3 This update for python-Brotli fixes the following issue: Update to 1.2.1: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779). python-Brotli-1.2.1-160100.1.1.src.rpm python-Brotli-debugsource-1.2.1-160100.1.1.aarch64.rpm python313-Brotli-1.2.1-160100.1.1.aarch64.rpm python313-Brotli-debuginfo-1.2.1-160100.1.1.aarch64.rpm python-Brotli-debugsource-1.2.1-160100.1.1.ppc64le.rpm python313-Brotli-1.2.1-160100.1.1.ppc64le.rpm python313-Brotli-debuginfo-1.2.1-160100.1.1.ppc64le.rpm python-Brotli-debugsource-1.2.1-160100.1.1.s390x.rpm python313-Brotli-1.2.1-160100.1.1.s390x.rpm python313-Brotli-debuginfo-1.2.1-160100.1.1.s390x.rpm python-Brotli-debugsource-1.2.1-160100.1.1.x86_64.rpm python313-Brotli-1.2.1-160100.1.1.x86_64.rpm python313-Brotli-debuginfo-1.2.1-160100.1.1.x86_64.rpm openSUSE-Leap-16.1-8 Security update for the Linux Kernel important SUSE SLFO 1.3 The SUSE Linux Enterprise 16.1 NVIDIA kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). - CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). - CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). - CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). - CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). - CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). - CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036). - CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). - CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). - CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). - CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). - CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). - CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). - CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). - CVE-2026-53370: perf/x86/intel: Improve validation and configuration of ACR masks (bsc#1271836). - CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). - CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). - CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). - CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). - CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). - CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). - CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). - CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). - CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). - CVE-2026-64027: net: shaper: Reject reparenting of existing nodes (bsc#1273767). - CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). - CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). - CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). - CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). - CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). - CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). - CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). - CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). - CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). - CVE-2026-64123: net: hsr: defer node table free until after RCU readers (bsc#1273763). - CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). - CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). - CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). - CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). - CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). - CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). - CVE-2026-64265: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (bsc#1273947). - CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). - CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). - CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). - CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). - CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). - CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). - CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). - CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). - CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). - CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). - CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). - CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). - CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). - CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). - CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). - CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). - CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). - CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). - CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). - CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). - CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). - CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). - CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). - CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). - CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). - CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). - CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). - CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). - CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). - CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). - CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). - CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). - CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). - CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). - CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). - CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). - CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). - CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). - CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). - CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). - CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). - CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). - CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). - CVE-2026-72011: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() (bsc#1276781). - CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). - CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). - CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). - CVE-2026-72022: llc: fix SAP refcount leak in llc_ui_autobind() (bsc#1276785). - CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). - CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). - CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). - CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). - CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). - CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). - CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). - CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). - CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). - CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). - CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). - CVE-2026-72091: accel/amdxdna: reject user command submission without a command BO (bsc#1277238). - CVE-2026-72092: accel/amdxdna: reject command submission on devices without a submit op (bsc#1277269). - CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). - CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). - CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). - CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). - CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). - CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). - CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). - CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). - CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). - CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). - CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). - CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). - CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). - CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). - CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). - CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). - CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). - CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). - CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). - CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). - CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). - CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). - CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). - CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). - CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). - CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72331: accel/amdxdna: Fix VMA access race (bsc#1277767). - CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). - CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). - CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). - CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). - CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). - CVE-2026-72370: iomap: release pages on atomic dio size mismatch (bsc#1277799). - CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). - CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128). - CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). - CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). - CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). - CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). - CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). - CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). - CVE-2026-72430: net/sched: act_ct: fix nf_connlabels leak on two error paths (bsc#1277118). - CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). - CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). - CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). - CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). - CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). - CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). - CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). - CVE-2026-72485: coresight: platform: defer connection counter increment until alloc succeeds (bsc#1276771). - CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). - CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). - CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). - CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). - CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). - CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). - CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). - CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). - CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). - CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). - CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). - CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). - CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). - CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). - CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). - CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). - CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). - CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). - CVE-2026-74336: wifi: mac80211: bound S1G TIM PVB walk to the TIM element (bsc#1277102). - CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). - CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). - CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). - CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). - CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). - CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). - CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). - CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). - CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). - CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). - CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). - CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). - CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). - CVE-2026-74400: bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries (bsc#1277076). - CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). - CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). - CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). - CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). - CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). - CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). - CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). - CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). - CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). - CVE-2026-74477: uprobes: Fix NULL pointer dereference in hprobe_expire() (bsc#1276342). - CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). - CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). - CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). - CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). - CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). - CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). - CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). - CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). - CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). - CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). - CVE-2026-74526: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (bsc#1275807). - CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801). - CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). - CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894). - CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). - CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). - CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). - CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). - CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). - CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). - CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). - CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). - CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). - CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). - CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). - CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). - CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). - CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). - CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). - CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). - CVE-2026-74607: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock (bsc#1277911). - CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). - CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). - CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). - CVE-2026-74617: dibs: initialise dibs->lock in dibs_dev_alloc() (bsc#1277815). - CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). - CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). - CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). - CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). - CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). - CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). - CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). - CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). - CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). - CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). - CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). - CVE-2026-74662: inet: frags: publish queues before arming timer (bsc#1277277). - CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). - CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407). - CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). - CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). - CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). - CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). - CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). - CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). - CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). - CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). - CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). - CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). - CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). - CVE-2026-74707: xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h (bsc#1277920). - CVE-2026-74708: xsk: validate launch-time metadata size (bsc#1276915). - CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). - CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). - CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). - CVE-2026-74716: accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() (bsc#1276571). - CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). - CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). - CVE-2026-74721: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() (bsc#1276575). - CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). - CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). - CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). - CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). - CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). - CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). - CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). - CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). - CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). - CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). - CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). - CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). - CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). - CVE-2026-80657: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer (bsc#1277300). - CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). - CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). - CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). - CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245). - CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). - CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). - CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). - CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). - CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). - CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). - CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). - CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). - CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). - CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). - CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). - CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). - CVE-2026-80838: vxlan: keep the last remote linked during FDB flush (bsc#1279842). - CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). - CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). - CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). - CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). - CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). - CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). - CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). - CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). - CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). - CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). - CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). - CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). - CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). - CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). - CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). - CVE-2026-80896: add bug number to existing mshv change (bsc#1279462). - CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). - CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). - CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). - CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). - CVE-2026-80981: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (bsc#1280268). - CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). - CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). - CVE-2026-80985,CVE-2026-80986: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (bsc#1280262 bsc#1280317). - CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). - CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). - CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). - CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). - CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). - CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). - CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). - CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). - CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). - CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). - CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). - CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). - CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). - CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). - CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). - CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). - CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). - CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). - CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). - CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). - CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). - CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). - CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). - CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). - CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). - CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). - CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). - CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). - CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). - CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). - CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). - CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). - CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). - CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). - CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). - CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). - CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). - CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). - CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). - CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). - CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). - CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). - CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). - CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). - CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). - CVE-2026-89619: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer (bsc#1280473). - CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). - CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). - CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). - CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). - CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576). - CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). - CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). - CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). - CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). - CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). - CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). - CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). - CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). - CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). - CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). - CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). - CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). - CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). - CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). - CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). - CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). - CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). - CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). - CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). - CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). - CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). - CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). - CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). - CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). - CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). - CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). - CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). - CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). - CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). - CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). - CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). - CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). - CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). - CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). - CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). - CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). - CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). - CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). - CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). - CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). - CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). - CVE-2026-89814: drm/amdgpu: clamp the isolation index for rings outside a partition (bsc#1281075). - CVE-2026-89815: drm/ttm: Drop tt->restore after successful restore (bsc#1281076). - CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). - CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). - CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). - CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). - CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). - CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). - CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). - CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). - CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). - CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). - CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). - CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). - CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). - CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). - CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). - CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). - CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). - CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). - CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). - CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). - CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). - CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). - CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). - CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). - CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). - CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). - CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). - CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). - CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). - CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). - CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). - CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). - CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). - CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). - CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). - CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). - CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). - CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). - CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). - CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). - CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). - CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). - CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). - CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). - CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). - CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). - CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). - CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). - CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). - CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). - CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). - CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). - CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). - CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). - CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). - CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). - CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). - CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). - CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). - CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). - CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). - CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). - CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). - CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). - CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). - CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). - CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). - CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). - CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). - CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. - CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). - CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). - CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). - CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). - CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). - CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). - CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). - CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). - CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). - CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). - CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). - CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). - CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). - CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). - CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). - CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). - CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). - CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). - CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). - CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). - CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). - CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). - CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). - CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). - CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). - CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). - CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). - CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). - CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). - CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). - CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). - CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). - CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). - CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). - CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). - CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). - CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). - CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). - CVE-2026-97944: x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() (bsc#1283143). - CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). - CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). - CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). - CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). - CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). - CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). - CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). - CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). - CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). - CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). - CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). - CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). - CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). - CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). - CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). - CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). - CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). - CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). - CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). - CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). - CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). - CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). - CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). - CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). - CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). - CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). - CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). - CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). - CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). - CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). - CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). - CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). - CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). - CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). - CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). - CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). - CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). - CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). - CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: - accel/ivpu: Limit firmware log name prints to field size (git-fixes). - accel/ivpu: Validate firmware log buffer metadata (git-fixes). - accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes). - ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes). - ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). - ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). - ACPICA: add boundary checks in two places (stable-fixes). - ACPICA: Add package limit checks in parser functions (stable-fixes). - ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes). - ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes). - ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). - ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). - ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes). - ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes). - ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes). - ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes). - ACPICA: Prevent adding invalid references (stable-fixes). - ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes). - ACPICA: validate handler object type in two places (stable-fixes). - ALSA: 6fire: Clean ups with guard() (stable-fixes). - ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). - ALSA: aloop: Check card index validity at probe (stable-fixes). - ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). - ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). - ALSA: caiaq: unregister the input device when probe fails (git-fixes). - ALSA: core: Add scoped cleanup helper for card references (stable-fixes). - ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). - ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes). - ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). - ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers (git-fixes). - ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270) (git-fixes). - ALSA: es18xx: check control allocation before private data setup (stable-fixes). - ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). - ALSA: hda/common: Use guard() for mutex locks (stable-fixes). - ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). - ALSA: hda/core: Use guard() for mutex locks (stable-fixes). - ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes). - ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes). - ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes). - ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). - ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). - ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes). - ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). - ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). - ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). - ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). - ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). - ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). - ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR (git-fixes). - ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). - ALSA: hda/tas2781: Accept V1 calibration data without CRC (git-fixes). - ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). - ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). - ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). - ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). - ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). - ALSA: hda: Report a change when only the channel status bytes move (git-fixes). - ALSA: hda: trace PCM open only after assigning a stream (git-fixes). - ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes). - ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). - ALSA: line6: reject oversized playback packets (git-fixes). - ALSA: mpu401: Check card index validity at probe (stable-fixes). - ALSA: mts64: Check card index validity at probe (stable-fixes). - ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). - ALSA: pcm: set timer->private_data before registering the PCM timer (git-fixes). - ALSA: portman2x4: Check card index validity at probe (stable-fixes). - ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). - ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). - ALSA: seq: Serialize compat port-info ioctls (git-fixes). - ALSA: serial-u16550: Check card index validity at probe (stable-fixes). - ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). - ALSA: ump: Copy FB name string more safely (stable-fixes). - ALSA: ump: Copy safe string name to rawmidi (stable-fixes). - ALSA: ump: Update rawmidi name per EP name update (stable-fixes). - ALSA: us122l: Prevent write upgrades for read mappings (git-fixes). - ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes). - ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). - ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes). - ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). - ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). - ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git-fixes). - ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). - ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes). - ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). - ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). - ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). - ALSA: usbusx2y: validate URB actual_length in interrupt callback (git-fixes). - ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). - ALSA: virmidi: Check card index validity at probe (stable-fixes). - ALSA: virtio: reset device before deleting virtqueues (git-fixes). - Also reflect disabled BATMAN in supported.conf Fixes: d1d27330a5f7 ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). - arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 (jsc#NVIDIA-55 git-fixes). - arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). - arm64: bti: Disable in-kernel BTI with recent versions of Clang (git-fixes). - arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). - arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable this workaround by default for aarch64. - arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. - arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. - arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. - arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). - arm64: hibernate: clone only the linear map that exists at runtime (git-fixes). - arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). - arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). - arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). - arm64: mm: Fix the break-before-make flush range for erratum 2645198 (git-fixes). - arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). - arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). - arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). - arm64: percpu: Fix this_cpu_write() casting (git-fixes). - arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). - ASoC: ab8500: Correct digital interface format setup (git-fixes). - ASoC: ab8500: Repair the DAPM capture graph (git-fixes). - ASoC: ab8500: Reset the audio block before configuring it (git-fixes). - ASoC: ab8500: Skip missing DMIC GPIOs on AB8505 (git-fixes). - ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). - ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). - ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git-fixes). - ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers (git-fixes). - ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID (git-fixes). - ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes). - ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). - ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes). - ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). - ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). - ASoC: amd: yc: disable MSI on resume (git-fixes). - ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). - ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). - ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes). - ASoC: codecs: aw88261: reduce log spam (stable-fixes). - ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks (git-fixes). - ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). - ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). - ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). - ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). - ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). - ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git-fixes). - ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git-fixes). - ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). - ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git-fixes). - ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). - ASoC: fsl_micfil: balance mclk enable/disable (git-fixes). - ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). - ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes). - ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). - ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes). - ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes). - ASoC: Intel: avs: Refactor and fix init_config access (git-fixes). - ASoC: Intel: avs: Reset the stream unless it is already prepared (git-fixes). - ASoC: Intel: catpt: Complete coredump handling (stable-fixes). - ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). - ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). - ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). - ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). - ASoC: mt6351: Publish the OF module alias (git-fixes). - ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). - ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). - ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes). - ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes). - ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). - ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). - ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). - ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes). - ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). - ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git-fixes). - ASoC: SDCA: Add better pm_runtime error handling in func probe (git-fixes). - ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). - ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture (git-fixes). - ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). - ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes). - ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). - ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). - ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). - ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). - ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes). - ASoC: ux500: Allow repeated MSP prepare calls (git-fixes). - ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). - ASoC: ux500: Deassert the MSP reset during probe (git-fixes). - ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). - ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). - ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). - ASoC: ux500: Propagate MSP setup errors (git-fixes). - ASoC: ux500: Remove obsolete PRCMU QoS calls (stable-fixes). - ASoC: ux500: Request the MSP MMIO resource (git-fixes). - ASoC: ux500: Validate MSP DAI configuration (git-fixes). - ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes). - ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). - Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). - Bluetooth: btintel: validate DDC record lengths (git-fixes). - Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). - Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). - Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes). - Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). - Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). - Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes). - Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git-fixes). - Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). - Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). - Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git-fixes). - Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). - Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes). - Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). - Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes). - Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). - Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). - Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes). - Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). - Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). - Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). - Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). - Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). - Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). - Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). - Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). - Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). - Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). - Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). - Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). - Bluetooth: btusb: mediatek: Fix leaked runtime PM reference in reset (git-fixes). - Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). - Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). - Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). - Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes). - Bluetooth: btusb: refactor endpoint lookup (stable-fixes). - Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). - Bluetooth: eir: validate service data length before reading UUID (git-fixes). - Bluetooth: hci_codec: validate vendor codec count length (git-fixes). - Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes). - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes). - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). - Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). - Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git-fixes). - Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). - Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). - Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). - Bluetooth: hci_sock: validate event length before filtering (git-fixes). - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). - Bluetooth: hci_sync: Fix command skb lifetime during scan setup (git-fixes). - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). - Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). - Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() (git-fixes). - Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). - Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). - Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). - Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). - Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). - Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). - Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). - Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes). - Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes). - Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). - Bluetooth: MGMT: Fix status of pending commands flushed on power off (git-fixes). - Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). - Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes). - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). - Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git-fixes). - Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). - Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes). - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git-fixes). - Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). - bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). - bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). - bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). - bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). - bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). - btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). - btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). - btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). - compiler_types: Introduce __flex_counter() and family (bsc#1280139). - config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). - Config: Pressure Stall Information (PSI) disabled by default on -rt (bsc#1282290). - crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). - default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (bsc#1280139). - dibs: change dibs_class to a const struct (git-fixes). - dibs: Unregister dibs_class after error (git-fixes). - dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). - dmaengine: Add devm_dma_request_chan() (stable-fixes). - dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). - dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes). - dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). - dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). - dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes). - dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). - dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). - dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes). - dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). - dmaengine: wait for RCU readers before releasing dma_device (git-fixes). - dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). - dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes). - driver core: Export get_dev_from_fwnode() (stable-fixes). - Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). - Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes). - Drivers: hv: vmbus: Add vmbus_alloc_buffer()/vmbus_free_buffer() for CoCo VMs (bsc#1282646). - Drivers: hv: vmbus: add vmbus_establish_gpadl_caller_decrypted() (bsc#1282646). - Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). - Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). - Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (git-fixes). - drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes). - drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes). - drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). - drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). - drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes). - drm/amd/display: Fix CRC open failure during active rendering (stable-fixes). - drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes). - drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes). - drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes). - drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). - drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes). - drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). - drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). - drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). - drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). - drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). - drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git-fixes). - drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). - drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). - drm/amdgpu/userq: only accept doorbell BOs as queue doorbell (git-fixes). - drm/amdgpu/userq: return the memdup_user() error for the user MQD (git-fixes). - drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). - drm/amdgpu: add a helper to calculate ring distance (stable-fixes). - drm/amdgpu: check ras and obj before dereference (git-fixes). - drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). - drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git-fixes). - drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git-fixes). - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). - drm/amdgpu: Failed to check various return code (stable-fixes). - drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). - drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). - drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). - drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). - drm/amdgpu: fix rmmio iounmap skipped on device removal (git-fixes). - drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes). - drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). - drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). - drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). - drm/amdgpu: make Mac FB workaround generic (stable-fixes). - drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). - drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). - drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). - drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). - drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). - drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). - drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). - drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes). - drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). - drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). - drm/amdkfd: Don't acquire buffers during CRIU queue restore (git-fixes). - drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). - drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). - drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). - drm/amdkfd: Properly acquire queue buffers in CRIU restore (stable-fixes). - drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). - drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). - drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). - drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes). - drm/aspeed: Balance the display clock enable on teardown (git-fixes). - drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). - drm/bridge: tc358768: Enforce input bus flags via atomic_check (git-fixes). - drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes). - drm/cirrus: Use video aperture helpers (stable-fixes). - drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes). - drm/dp: don't mark the AUX backlight enabled when enabling failed (git-fixes). - drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). - drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). - drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). - drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). - drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). - drm/gud: don't keep a connector without a CRTC as connector_state (git-fixes). - drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). - drm/i915/cx0_phy: Fix ARL-S host bridge detection (git-fixes). - drm/i915/dmc: Add sanity check for DMC load address (git-fixes). - drm/i915/dmc: Harden DMC firmware payload parsing (git-fixes). - drm/i915/dp_mst: Fix configuring FEC for a disconnected stream (stable-fixes). - drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). - drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). - drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). - drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes). - drm/i915: fix incorrect RCU teardown order (git-fixes). - drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). - drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). - drm/imagination: clamp freelist reconstruction requests (git-fixes). - drm/imagination: Fix page count for page table for map() interface (git-fixes). - drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). - drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). - drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). - drm/imagination: Size page table preallocation by device address (git-fixes). - drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). - drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes). - drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). - drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). - drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). - drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). - drm/msm/dpu: clear pending peripheral flush state (git-fixes). - drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). - drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). - drm/msm: Recover HW before retire hung submit (git-fixes). - drm/nouveau/bios: skip the IFR header if present (stable-fixes). - drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes). - drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). - drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes). - drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP (git-fixes). - drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini() (git-fixes). - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). - drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). - drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). - drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). - drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). - drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). - drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). - drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). - drm/omap: dsi: Do not copy isr table (git-fixes). - drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes). - drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). - drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). - drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). - drm/rockchip: analogix_dp: fix unchecked bound endpoint name length (git-fixes). - drm/rockchip: rk3066_hdmi: Add missing Kconfig selects (git-fixes). - drm/sched: Create a fake device for KUnit tests (git-fixes). - drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). - drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Free the BO cache size list on teardown (git-fixes). - drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). - drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). - drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). - drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes). - drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes). - drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes). - drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). - drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). - drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes). - drm/vmwgfx: validate pitch coming from userspace (git-fixes). - drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums (git-fixes). - drm/xe/oa: Zero OA buffer at allocation (git-fixes). - drm/xe/shrinker: Return the freed page count through a parameter (git-fixes). - drm/xe: Keep walking on SVM eviction failure (git-fixes). - drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). - drm/xe: skip eviction of a BO with no resource (git-fixes). - drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). - drm: add drm_memory_stats_is_zero (stable-fixes). - drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes). - drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes). - fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). - fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). - fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). - fbdev: vfb: defer cleanup until the last reference (git-fixes). - firmware: arm_ffa: Register core as a platform driver (bsc#1278685). - firmware: arm_ffa: Tear down driver during shutdown (bsc#1278685). - firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (bsc#1278685). - firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). - firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). - firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). - firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). - firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). - firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). - firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes). - fuse: fix race between interrupt and resend (git-fixes). - gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes). - gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). - gpio: exar: initialize the ID before registering its cleanup (git-fixes). - gpio: pisosr: Read "ngpios" as u32 (stable-fixes). - gpio: tps65219: Fix GPIO input value reads (git-fixes). - gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). - gpio: xilinx: fix runtime PM leak on request error path (git-fixes). - gpio: zynq: fix runtime PM leak on request error path (git-fixes). - HID: alps: fix use-after-free on input2 registration failure (git-fixes). - HID: alps: unregister DualPoint Stick input device on remove (git-fixes). - HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). - HID: asus: fortify keyboard handshake (stable-fixes). - HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). - HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). - HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). - HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes). - HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). - HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). - HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). - HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). - HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). - HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes). - HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). - host1x: bus: Fix missing ops null check in error teardown (stable-fixes). - hv_netvsc: Allocate send/receive buffers using vmbus_alloc_buffer() (bsc#1282646). - hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). - hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes). - hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). - hwmon: (chipcap2) fix channels in humidity alarm notifications (git-fixes). - hwmon: (corsair-cpro) Create debugfs entries after hwmon registration (git-fixes). - hwmon: (corsair-cpro) Remove debugfs entries when probe fails (git-fixes). - hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). - hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes). - hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). - hwmon: (emc1403) Rely on subsystem locking (stable-fixes). - hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). - hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes). - hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). - hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). - hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). - hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes). - hwmon: (ltc4282) Make sure clk_init_data is fully initialized (git-fixes). - hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). - hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes). - hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). - hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). - hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). - hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). - hwmon: (w83793) release probe data through kref (git-fixes). - i2c: at91: release DMA channels on remove and probe error (git-fixes). - i2c: at91: release DMA channels when probe defers (git-fixes). - i2c: atr: fix dangling adapter pointer on add failure (git-fixes). - i2c: imx: disable autosuspend on remove (git-fixes). - i2c: imx: release DMA channels on probe error (git-fixes). - i2c: mxs: fix DMA channel leak on probe error (git-fixes). - i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). - i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). - i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). - i2c: xiic: don't clobber msg->len to signal block-read completion (git-fixes). - i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). - i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). - i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). - i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). - i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes). - IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). - ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). - ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). - ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). - ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). - ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). - iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). - iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). - iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). - iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). - iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes). - iio: accel: sca3000: fix frequency divider condition check (git-fixes). - iio: adc: aspeed: propagate reset deassert errors (git-fixes). - iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). - iio: adc: pac1934: check ACPI label duplication (git-fixes). - iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). - iio: adc: rtq6056: add i2c_device_id support (stable-fixes). - iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). - iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). - iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes). - iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). - iio: admv1013: initialize callback mutex before registering notifier (git-fixes). - iio: bu27034: simplify using guard(mutex) (stable-fixes). - iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes). - iio: buffer: serialize buffer teardown with mode claims (git-fixes). - iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). - iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). - iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes). - iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). - iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). - iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). - iio: light: rohm-bu27034: Fix error return (git-fixes). - iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). - iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). - iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). - iio: proximity: aw96103: validate firmware data length (git-fixes). - iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes). - iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). - iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). - iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). - iio: trigger: cancel reenable_work before freeing trigger (git-fixes). - Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes). - Input: aiptek - validate raw macro indices before updating state (stable-fixes). - Input: ati_remote2 - fix type confusion in device attribute handlers (git-fixes). - Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes). - Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes). - Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). - Input: eeti_ts - publish the OF module alias (git-fixes). - Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). - Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). - Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). - Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes). - Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). - Input: soc_button_array - check btns_desc->package.count (git-fixes). - Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). - Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). - Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). - Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). - Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes). - Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes). - Input: xpad - add support for Azeron devices (stable-fixes). - Input: xpad - add support for Corsair Novablade Pro (stable-fixes). - Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). - Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). - Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes). - iommu/dma: skip swiotlb bounce for DMA_ATTR_MMIO in iommu_dma_map_phys (git-fixes). - iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes). - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git-fixes). - kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. - kernel-binary.spec.in: Fix syntax error. - KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). - keys: fix lost wakeup when reaping a dead key type (git-fixes). - keys: translate request_key_auth pid for the reading procfs instance (git-fixes). - KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). - KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes). - KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes). - KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). - KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). - KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes). - KVM: nVMX: Always flush vpid02 on first use (git-fixes). - KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes). - KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). - KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). - KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). - KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). - KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). - KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). - KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git-fixes). - KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). - KVM: SEV: Use to_kvm_sev_info() for fetching kvm_sev_info struct (git-fixes). - KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). - KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes). - KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes). - KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes (git-fixes). - KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (bsc#1271050). - KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (bsc#1271050). - KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (bsc#1271050). - KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes). - KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes). - KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes). - leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). - leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). - leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). - mac802154: fix use-after-free of sdata via queued RX frames (git-fixes). - media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes). - media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes). - media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes). - media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). - media: hevc: add bounded tile-count helpers (git-fixes). - media: i2c: imx355: Replace client->dev usage (stable-fixes). - media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). - media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes). - media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity (git-fixes). - media: qcom: camss: avoid format string warning (stable-fixes). - media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). - media: v4l2-ctrls: validate AV1 tile counts (git-fixes). - media: v4l2-ctrls: validate HEVC tile counts (git-fixes). - media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes). - media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). - media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git-fixes). - media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes). - media: video-i2c: fix buffer queue ordering (stable-fixes). - media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes). - memstick: core: wait for request completion before freeing card (git-fixes). - memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). - memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). - mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). - mfd: rsmu: Add 8a34002 support (stable-fixes). - mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). - misc: rp1: Send IACK on IRQ activate to fix kdump/kexec (git-fixes). - mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). - mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). - mmc: core: Add validation for host-provided max_segs (stable-fixes). - mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). - mmc: core: Fix OF node reference leak on card add failure (git-fixes). - mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). - mmc: davinci: fix mmc_add_host order in probe (stable-fixes). - mmc: hsq: Fix use-after-free in retry work (git-fixes). - mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). - mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). - mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). - mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). - mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). - mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes). - mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes). - mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). - mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). - mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). - mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). - mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). - mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). - mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes). - mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). - mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). - mtd: core: avoid double-free of OTP NVMEM device (git-fixes). - mtd: core: call _get_device() with the master MTD (git-fixes). - mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes). - mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). - mtd: rawnand: pl353: Fix debug prints (git-fixes). - mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). - mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). - mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). - net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). - net/mlx5e: Fix missing FEC mode mapping for RS_544_514_INTERLEAVED_QUAD (git-fixes). - net/mlx5e: fix swapped IPv6 IPsec policy masks (git-fixes). - net: ip_tunnel: initialize `options_len` before referencing options (git-fixes). - net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes). - net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). - net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes). - net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes). - net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). - net: usb: ax88179_178a: fix rx frame length for non-last packets (git-fixes). - net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). - net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). - net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). - net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). - net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). - net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). - net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). - net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (git-fixes). - net: usb: sr9700: include receive overhead in the length check (git-fixes). - net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). - net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). - net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). - net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes). - nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). - nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). - nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes). - nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). - nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). - nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes). - nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). - nfc: nfcmrvl: validate helper command length before pull (git-fixes). - nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). - nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). - nfc: st21nfca: validate ISO15693 inventory length (git-fixes). - nfc: st21nfca: validate received frame size (git-fixes). - nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). - nvmet-rdma: fix queue leak when connect backlog is exceeded (git-fixes). - PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). - PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes). - PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes). - PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). - PCI: altera: Protect root bus removal with rescan lock (stable-fixes). - PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). - PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). - PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes). - PCI: hv: Probe vPCI buses asynchronously (git-fixes). - PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). - PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). - PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). - PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). - PCI: plda: Protect root bus removal with rescan lock (stable-fixes). - PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). - PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). - PCI: switchtec: Add Gen6 Device IDs (stable-fixes). - PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). - PCI: xgene: Drop unnecessary OF node reference (git-fixes). - PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). - perf/arm-cmn: Add CMN S3 ACPI binding (jsc#PED-15995). - perf/arm-cmn: Ensure port and device id bits are set properly (jsc#PED-15995). - perf/arm-cmn: Fix CMN S3 DTM offset (jsc#PED-15995). - perf/arm-cmn: Fix DVM node events (jsc#PED-15995). - perf/arm-cmn: Fix incorrect error check for devm_ioremap() (jsc#PED-15995). - perf/arm-cmn: Fix REQ2/SNP2 mixup (jsc#PED-15995). - perf/arm-cmn: Fix resource_size_t printk specifier in arm_cmn_init_dtc() (jsc#PED-15995). - perf/arm-cmn: Initialise cmn->cpu earlier (jsc#PED-15995). - perf/arm-cmn: Minor event type housekeeping (jsc#PED-15995). - perf/arm-cmn: Permit more exhaustive groups (jsc#PED-15995). - perf/arm-cmn: Reduce stack usage during discovery (jsc#PED-15995). - perf/arm-cmn: Remove CMN-600 DTC domain special case (jsc#PED-15995). - perf/arm-cmn: Stop claiming entire iomem region (jsc#PED-15995). - perf/arm: Add missing .suppress_bind_attrs (jsc#PED-15995). - perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains (bsc#1282663). - perf: Fujitsu: Add the Uncore PMU driver (jsc#PED-15993). - phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes). - phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes). - pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). - pinctrl: meson: Fix typo in s4 group name (git-fixes). - pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). - pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). - pinctrl: single: free the IRQ on domain creation failure (git-fixes). - pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes). - platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). - platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). - platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). - platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). - platform/x86: ISST: Check for admin capability for write commands (stable-fixes). - platform/x86: ISST: Validate max level for set feature (git-fixes). - platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes). - platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes). - platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). - PM: sleep: Unblock runtime PM when device prepare fails (git-fixes). - power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). - power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). - power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes). - power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). - power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). - power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git-fixes). - power: supply: Fix maintenance charge table kernel-doc (git-fixes). - power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). - powerpc/970: fix nap return address corruption on async interrupt exit (jsc#PED-15113 git-fixes). - powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). - powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). - powerpc/ftrace: Don't restore r13 during ftrace_regs_caller (bsc#1278165 ltc#222874). - powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). - powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). - powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). - powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). - powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). - powerpc/syscall: Avoid atomic test_and_clear_thread_flag on fast path (bsc#1283148 ltc#223600). - powerpc: Add Power12 architected mode (jsc#PED-16906). - powerpc: Add Power12 raw mode (jsc#PED-16906). - powerpc: fix NMI exit ordering: restore soft masks after irqentry_nmi_exit() (jsc#PED-15113 git-fixes). - powerpc: Move stack randomization after syscall_enter_from_user_mode() (jsc#PED-15113 git-fixes). - powerpc: Restore all registers after a traced syscall again (jsc#PED-15113 git-fixes). - pps: bump PPS device count (bsc#1280882). - printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). - procfs: fix possible double mmput() in do_procmap_query() (git-fixes). - pseries/plpks: clear SED key data after use (bsc#1215199). - pseries/plpks: clear sensitive buffers in wrapping operations (jsc#PED-14548 git-fixes). - pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). - pseries/plpks: clear signed update authentication buffer (bsc#1215199). - pseries/plpks: fix error code for wrapping key reads (jsc#PED-14548 git-fixes). - pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). - pseries/plpks: fix self-reference in plpks_var initializer (jsc#PED-14548 git-fixes). - pseries/plpks: hide wrapping_features when unsupported (jsc#PED-14548 git-fixes). - pseries/plpks: make narrowing conversions explicit (bsc#1215199). - pseries/plpks: rename the default wrapping key macro (jsc#PED-14548 git-fixes). - pseries/plpks: update PKS documentation and MAINTAINERS entry (jsc#PED-14548 git-fixes). - pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). - random: fix vgetrandom_opaque_params kernel-doc (git-fixes). - RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes). - RDMA/core: Fix potential use after free in counter_release() (git-fixes). - RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). - RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). - RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes). - RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). - RDMA/core: Fix use after free in ib_query_qp() (git-fixes). - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). - RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). - RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). - RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). - RDMA/hfi1: Create workqueues before device initialization (git-fixes). - RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). - RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). - RDMA/hfi1: Free RX data on late probe failure (git-fixes). - RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). - RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). - RDMA/hfi1: Preserve unit 0 on (git-fixes). - RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). - RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). - RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). - RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). - RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). - RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). - RDMA/mlx5: Remove warn on missing representor in query_port_speed (git-fixes). - RDMA/rvt: Return NULL after port allocation failure (git-fixes). - RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths (git-fixes). - regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes). - regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). - regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git-fixes). - regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git-fixes). - Revert "drm/virtio: Allow importing prime buffers when 3D is enabled" (git-fixes). - Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (bsc#1278685). - Revert "wifi: ath12k: add panic handler" (git-fixes). - ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). - ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). - ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). - rtc: ac100: Assign .num before accessing .hws (git-fixes). - rtc: aspeed: add AST2700 compatible (stable-fixes). - rtc: bq32000: add delay between RTC reads (stable-fixes). - rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). - rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes). - rtc: mv: add suspend/resume support for wakeup (stable-fixes). - rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). - sched/core: Skip rq->avg_idle update without a valid idle_stamp (git-fixes). - sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - sched/eevdf: Fix augmented max_slice (git-fixes). - sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - security: ima: introduce IMA_INIT_LATE_SYNC option (bsc#1278685). - security: ima: rename boot_aggregate when ima is initialised at late_sync (bsc#1278685). - selftests/powerpc/pmu/ebb: fix lost_exception_test hang with sched yield change (bsc#1271979). - selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). - serial: 8250: fix possible ISR soft lockup (stable-fixes). - serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). - serial: fix TIOCMIWAIT race (git-fixes). - serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes). - serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). - serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes). - serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). - serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes). - slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). - slab: Introduce kmalloc_flex() and family (bsc#1280139). - slab: Introduce kmalloc_obj() and family (bsc#1280139). - slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). - smb: client: harden DFS cache against invalid target hints (git-fixes). - smb: client: reject overlapping data areas in SMB2 responses (git-fixes). - smb: client: use kzalloc to zero-initialize security descriptor buffer (git-fixes). - smb: common: change the data type of num_aces to le16 (git-fixes). - soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). - soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). - soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). - soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes). - soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes). - soundwire: only handle alert events when the peripheral is attached (stable-fixes). - soundwire: validate DT compatible before parsing it (stable-fixes). - spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260 (git-fixes). - spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). - spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). - spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). - spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes). - spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). - thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). - thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). - thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). - thermal: sysfs: switch to use scnprintf() to suppress truncation warning (git-fixes). - thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). - thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). - thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). - thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). - thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). - thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes). - thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). - thunderbolt: Keep the domain reference while processing hotplug (stable-fixes). - thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). - thunderbolt: Reject oversized XDomain properties responses (git-fixes). - thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). - thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable-fixes). - thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). - tools/hv: fix typo "retrive" in comment (git-fixes). - tools/power turbostat: Warn, but don't Err on out-dated perf systems (git-fixes). - tools: gpio: fix building from the top level with O= (git-fixes). - tpm: Disable TPM on null key name mismatch (git-fixes). - tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). - tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in (bsc#1278685). - tty: serial: max3100: shut down timer before freeing port (git-fixes). - tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). - tty: vt: fix memory leak in vc_allocate() (git-fixes). - usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes). - USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). - USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). - USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes). - usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). - usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). - usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). - usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). - usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes). - usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes). - usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes). - usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). - usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). - usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes). - USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes). - usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). - usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). - usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). - USB: gadget: ffs: fix mm lifetime handling (stable-fixes). - USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes). - usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). - usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). - usb: gadget: udc: skip pullup() if already connected (stable-fixes). - usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). - usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). - usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). - usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). - usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). - usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). - usb: ohci-st: disable controller wakeup on removal (git-fixes). - USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). - USB: serial: fix driver deregistration order (git-fixes). - USB: serial: fix dynamic id driver deregistration race (git-fixes). - USB: serial: fix ioctl hangup race (git-fixes). - USB: serial: fix port tear down use-after-free (git-fixes). - USB: serial: option: add Compal EXC-T1 support (stable-fixes). - USB: serial: option: add Compal EXM-G1x support (stable-fixes). - USB: serial: option: add Quectel EG060W (stable-fixes). - USB: serial: option: add Quectel RG660QB (stable-fixes). - USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). - USB: serial: quatech2: fix baud rate overflow (git-fixes). - usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). - USB: serial: ssu100: fix baud rate overflow (git-fixes). - usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). - usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes). - usb: typec: port-mapper: Only match USB4 port if host interface is available (git-fixes). - usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). - usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). - usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). - usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). - usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). - usb: usbtmc: don't store usb_device_id (stable-fixes). - usb: xhci: Improve Soft Retries after short transfers (stable-fixes). - usb: xhci: use cached HCSPARAMS1 value (stable-fixes). - usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). - usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). - vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). - vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes). - watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes). - watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes). - watchdog: digicolor: Avoid division by zero (git-fixes). - watchdog: fix hrtimer start when pretimeout is zero (git-fixes). - watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). - watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes). - watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). - watchdog: msc313e: Avoid division by zero (git-fixes). - watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes). - watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes). - watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). - watchdog: msc313e: Fix premature reset during timeout update (git-fixes). - watchdog: msc313e: Fix spurious reset on suspend (git-fixes). - watchdog: msc313e: Fix undefined behavior (git-fixes). - watchdog: msc313e: Propagate error code in resume() (git-fixes). - watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes). - watchdog: rtd119x: Avoid division by zero (git-fixes). - watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes). - watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes). - watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). - wifi: ath9k: reject short WMI command responses (git-fixes). - wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). - wifi: ath9k_htc: don't store usb_device_id (stable-fixes). - wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). - wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). - wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). - wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). - wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). - wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). - wifi: brcmfmac: cyw: pass PMKID to firmware if present (git-fixes). - wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). - wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). - wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). - wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes). - wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes). - wifi: cfg80211: don't free driver-owned scan requests (git-fixes). - wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). - wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). - wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes). - wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). - wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). - wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). - wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). - wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). - wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). - wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes). - wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). - wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). - wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). - wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). - wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes). - wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). - wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). - wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes). - wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). - wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). - wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes). - wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes). - wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). - wifi: iwlwifi: pcie: null RX pointers after free (stable-fixes). - wifi: libertas: reject short monitor TX frames (stable-fixes). - wifi: libipw: fix key index receive bound checks (stable-fixes). - wifi: libipw: reject too-short association responses (git-fixes). - wifi: libipw: reject too-short beacon and probe responses (git-fixes). - wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). - wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). - wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes). - wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). - wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes). - wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). - wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). - wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). - wifi: mac80211: don't access the TSF of a down interface (git-fixes). - wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes). - wifi: mac80211: don't allow link changes when iface is down (git-fixes). - wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). - wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). - wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). - wifi: mac80211: don't start a ROC while scanning (git-fixes). - wifi: mac80211: don't warn when an IBSS has no channel to scan (git-fixes). - wifi: mac80211: drain PS delivery work during station teardown (git-fixes). - wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). - wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() (git-fixes). - wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). - wifi: mac80211: handle empty FILS association request payload (git-fixes). - wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). - wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic (git-fixes). - wifi: mac80211: keep fallback association elements alive (git-fixes). - wifi: mac80211: keep paired old chanctx alive (git-fixes). - wifi: mac80211: mesh: release the channel if start fails (git-fixes). - wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). - wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). - wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). - wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). - wifi: mac80211: refuse to make a monitor active when it has no queue (git-fixes). - wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). - wifi: mac80211: release mesh path quota on failed additions (git-fixes). - wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). - wifi: mac80211: reset state when starting AP fails (git-fixes). - wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). - wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). - wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). - wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). - wifi: mac80211: track MU-MIMO configuration on disabled interfaces (stable-fixes). - wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). - wifi: mac80211: validate deauth frame length before reason access (stable-fixes). - wifi: mt76: add init_wiphy callback (stable-fixes). - wifi: mt76: mt792x: pick the SAR table layout from the table itself (git-fixes). - wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). - wifi: mt76: mt7603: initialize global station WCID (git-fixes). - wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). - wifi: mt76: mt7915: set correct background radar capability (stable-fixes). - wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). - wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). - wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). - wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes). - wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). - wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). - wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). - wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). - wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). - wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). - wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() (git-fixes). - wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). - wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes). - wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes). - wifi: mwifiex: prevent authentication frame length truncation (git-fixes). - wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). - wifi: mwifiex: validate action frame fixed fields (git-fixes). - wifi: mwifiex: validate scan response extents (git-fixes). - wifi: nl80211: reject beacons with bad HE operation (stable-fixes). - wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). - wifi: p54: validate curve data length in the calibration curve converters (git-fixes). - wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). - wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). - wifi: rsi: fix heap OOB write on key removal (git-fixes). - wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). - wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). - wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable-fixes). - wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). - wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). - wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). - wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). - wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). - wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). - wifi: virt_wifi: don't transfer operstate before register (git-fixes). - wifi: virt_wifi: free skb when disconnected (git-fixes). - wifi: wfx: validate MIB read length before copying to caller (git-fixes). - wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes). - wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes). - wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). - wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes). - x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). - x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (git-fixes). - x86/bugs: Remove dead code which might prevent from building (git-fixes). - x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). - x86/bugs: Simplify SSB cmdline parsing (git-fixes). - x86/bugs: Use early_param() for spectre_v2 (git-fixes). - x86/bugs: Use early_param() for spectre_v2_user (git-fixes). - x86/fpu/xstate: Adjust XSAVE buffer size calculation (bsc#1268374 jsc#PED-14216). - x86/fpu/xstate: Adjust xstate copying logic for user ABI (bsc#1268374 jsc#PED-14216). - x86/fpu/xstate: Introduce xfeature order table and accessor macro (bsc#1268374 jsc#PED-14216). - x86/fpu/xstate: Remove xstate offset check (bsc#1268374 jsc#PED-14216). - x86/fpu: Log XSAVE disablement consistently (git-fixes). - x86/fpu: Remove export of mxcsr_feature_mask (git-fixes). - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() (git-fixes). - x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git-fixes). - x86/hyperv: reserve more vectors (git-fixes). - x86/hyperv: Stop using 32-bit MSR interfaces (git-fixes). - x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). - xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). kernel-devel-nvidia-6.12.0-160100.6.1.noarch.rpm True kernel-source-nvidia-6.12.0-160100.6.1.noarch.rpm True kernel-source-nvidia-6.12.0-160100.6.1.src.rpm True cluster-md-kmp-nvidia64kb-6.12.0-160100.6.1.aarch64.rpm True cluster-md-kmp-nvidia64kb-debuginfo-6.12.0-160100.6.1.aarch64.rpm True dlm-kmp-nvidia64kb-6.12.0-160100.6.1.aarch64.rpm True dlm-kmp-nvidia64kb-debuginfo-6.12.0-160100.6.1.aarch64.rpm True gfs2-kmp-nvidia64kb-6.12.0-160100.6.1.aarch64.rpm True gfs2-kmp-nvidia64kb-debuginfo-6.12.0-160100.6.1.aarch64.rpm True kernel-nvidia64kb-6.12.0-160100.6.1.aarch64.rpm True kernel-nvidia64kb-6.12.0-160100.6.1.nosrc.rpm True kernel-nvidia64kb-debuginfo-6.12.0-160100.6.1.aarch64.rpm True kernel-nvidia64kb-debugsource-6.12.0-160100.6.1.aarch64.rpm True kernel-nvidia64kb-devel-6.12.0-160100.6.1.aarch64.rpm True kernel-nvidia64kb-extra-6.12.0-160100.6.1.aarch64.rpm True kernel-nvidia64kb-extra-debuginfo-6.12.0-160100.6.1.aarch64.rpm True kernel-nvidia64kb-optional-6.12.0-160100.6.1.aarch64.rpm True kernel-nvidia64kb-optional-debuginfo-6.12.0-160100.6.1.aarch64.rpm True kselftests-kmp-nvidia64kb-6.12.0-160100.6.1.aarch64.rpm True kselftests-kmp-nvidia64kb-debuginfo-6.12.0-160100.6.1.aarch64.rpm True ocfs2-kmp-nvidia64kb-6.12.0-160100.6.1.aarch64.rpm True ocfs2-kmp-nvidia64kb-debuginfo-6.12.0-160100.6.1.aarch64.rpm True kernel-syms-nvidia-6.12.0-160100.6.1.aarch64.rpm True kernel-syms-nvidia-6.12.0-160100.6.1.src.rpm True openSUSE-Leap-16.1-9 Recommended update for rpmlint moderate SUSE SLFO 1.3 This update for rpmlint fixes the following issues: Changes in rpmlint: - dbus-services: adjust cups whitelisting (bsc#1285410) rpmlint-2.7.0+git20261028.c3cbcf13-160100.1.1.noarch.rpm rpmlint-2.7.0+git20261028.c3cbcf13-160100.1.1.src.rpm rpmlint-strict-2.7.0+git20261028.c3cbcf13-160100.1.1.noarch.rpm rpmlint-strict-2.7.0+git20261028.c3cbcf13-160100.1.1.src.rpm openSUSE-Leap-16.1-packagehub-10 Security update for warewulf4 critical openSUSE Backports SLE-16.1 This update for warewulf4 fixes the following issues: Changes in warewulf4: - Update google.golang.org/grpc to which fixes: * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278760) * CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279257) warewulf4-4.7.1-bp161.2.1.src.rpm warewulf4-4.7.1-bp161.2.1.x86_64.rpm warewulf4-debuginfo-4.7.1-bp161.2.1.x86_64.rpm warewulf4-dracut-4.7.1-bp161.2.1.noarch.rpm warewulf4-man-4.7.1-bp161.2.1.noarch.rpm warewulf4-overlay-4.7.1-bp161.2.1.x86_64.rpm warewulf4-overlay-rke2-4.7.1-bp161.2.1.noarch.rpm warewulf4-reference-doc-4.7.1-bp161.2.1.noarch.rpm warewulf4-4.7.1-bp161.2.1.aarch64.rpm warewulf4-debuginfo-4.7.1-bp161.2.1.aarch64.rpm warewulf4-overlay-4.7.1-bp161.2.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-11 Security update for libosmocore important openSUSE Backports SLE-16.1 This update for libosmocore fixes the following issues: Changes in libosmocore: - Update to release 1.14.2 * Fix buffer overflows/overreads in `bssgp_rx_paging`, `parse_process_uss_req`, `osmo_dec_gcr`, `osmo_pbit2ubit`, in the CBSP WRITE-REPLACE decoder, and in TLV tag logging. [boo#1289028, CVE-2026-104592] * iuup: Cure stack buffer-overflow rx IuUP with payload larger than 1024 bytes. [boo#1289027, CVE-2026-104591] [boo#1288875, CVE-2026-104597] * gsm: Reject BSSMAP Encryption Information IE with no selected algo or key length != 8. * Resolve [boo#1289029, CVE-2026-104594] libosmocodec-devel-1.14.2-bp161.1.1.x86_64.rpm libosmocodec4-1.14.2-bp161.1.1.x86_64.rpm libosmocodec4-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmocoding-devel-1.14.2-bp161.1.1.x86_64.rpm libosmocoding0-1.14.2-bp161.1.1.x86_64.rpm libosmocoding0-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmocore-1.14.2-bp161.1.1.src.rpm libosmocore-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmocore-debugsource-1.14.2-bp161.1.1.x86_64.rpm libosmocore-devel-1.14.2-bp161.1.1.x86_64.rpm libosmocore-tools-1.14.2-bp161.1.1.x86_64.rpm libosmocore-tools-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmocore22-1.14.2-bp161.1.1.x86_64.rpm libosmocore22-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmoctrl-devel-1.14.2-bp161.1.1.x86_64.rpm libosmoctrl0-1.14.2-bp161.1.1.x86_64.rpm libosmoctrl0-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmogb-devel-1.14.2-bp161.1.1.x86_64.rpm libosmogb14-1.14.2-bp161.1.1.x86_64.rpm libosmogb14-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmogsm-devel-1.14.2-bp161.1.1.x86_64.rpm libosmogsm20-1.14.2-bp161.1.1.x86_64.rpm libosmogsm20-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmoisdn-devel-1.14.2-bp161.1.1.x86_64.rpm libosmoisdn0-1.14.2-bp161.1.1.x86_64.rpm libosmoisdn0-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmosim-devel-1.14.2-bp161.1.1.x86_64.rpm libosmosim2-1.14.2-bp161.1.1.x86_64.rpm libosmosim2-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmousb-devel-1.14.2-bp161.1.1.x86_64.rpm libosmousb0-1.14.2-bp161.1.1.x86_64.rpm libosmousb0-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmovty-devel-1.14.2-bp161.1.1.x86_64.rpm libosmovty13-1.14.2-bp161.1.1.x86_64.rpm libosmovty13-debuginfo-1.14.2-bp161.1.1.x86_64.rpm libosmocodec-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmocodec4-1.14.2-bp161.1.1.ppc64le.rpm libosmocodec4-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmocoding-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmocoding0-1.14.2-bp161.1.1.ppc64le.rpm libosmocoding0-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmocore-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmocore-debugsource-1.14.2-bp161.1.1.ppc64le.rpm libosmocore-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmocore-tools-1.14.2-bp161.1.1.ppc64le.rpm libosmocore-tools-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmocore22-1.14.2-bp161.1.1.ppc64le.rpm libosmocore22-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmoctrl-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmoctrl0-1.14.2-bp161.1.1.ppc64le.rpm libosmoctrl0-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmogb-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmogb14-1.14.2-bp161.1.1.ppc64le.rpm libosmogb14-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmogsm-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmogsm20-1.14.2-bp161.1.1.ppc64le.rpm libosmogsm20-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmoisdn-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmoisdn0-1.14.2-bp161.1.1.ppc64le.rpm libosmoisdn0-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmosim-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmosim2-1.14.2-bp161.1.1.ppc64le.rpm libosmosim2-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmousb-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmousb0-1.14.2-bp161.1.1.ppc64le.rpm libosmousb0-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmovty-devel-1.14.2-bp161.1.1.ppc64le.rpm libosmovty13-1.14.2-bp161.1.1.ppc64le.rpm libosmovty13-debuginfo-1.14.2-bp161.1.1.ppc64le.rpm libosmocodec-devel-1.14.2-bp161.1.1.aarch64.rpm libosmocodec4-1.14.2-bp161.1.1.aarch64.rpm libosmocodec4-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmocoding-devel-1.14.2-bp161.1.1.aarch64.rpm libosmocoding0-1.14.2-bp161.1.1.aarch64.rpm libosmocoding0-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmocore-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmocore-debugsource-1.14.2-bp161.1.1.aarch64.rpm libosmocore-devel-1.14.2-bp161.1.1.aarch64.rpm libosmocore-tools-1.14.2-bp161.1.1.aarch64.rpm libosmocore-tools-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmocore22-1.14.2-bp161.1.1.aarch64.rpm libosmocore22-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmoctrl-devel-1.14.2-bp161.1.1.aarch64.rpm libosmoctrl0-1.14.2-bp161.1.1.aarch64.rpm libosmoctrl0-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmogb-devel-1.14.2-bp161.1.1.aarch64.rpm libosmogb14-1.14.2-bp161.1.1.aarch64.rpm libosmogb14-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmogsm-devel-1.14.2-bp161.1.1.aarch64.rpm libosmogsm20-1.14.2-bp161.1.1.aarch64.rpm libosmogsm20-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmoisdn-devel-1.14.2-bp161.1.1.aarch64.rpm libosmoisdn0-1.14.2-bp161.1.1.aarch64.rpm libosmoisdn0-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmosim-devel-1.14.2-bp161.1.1.aarch64.rpm libosmosim2-1.14.2-bp161.1.1.aarch64.rpm libosmosim2-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmousb-devel-1.14.2-bp161.1.1.aarch64.rpm libosmousb0-1.14.2-bp161.1.1.aarch64.rpm libosmousb0-debuginfo-1.14.2-bp161.1.1.aarch64.rpm libosmovty-devel-1.14.2-bp161.1.1.aarch64.rpm libosmovty13-1.14.2-bp161.1.1.aarch64.rpm libosmovty13-debuginfo-1.14.2-bp161.1.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-12 Security update for hauler important openSUSE Backports SLE-16.1 This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to address: * bsc#1288460, CVE-2026-116591, github.com/klauspost/compress/zstd: crafted ~27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic - update vendor: * CVE-2026-114437 (bsc#1287881): github.com/go-chi/chi/v5: client IP spoofing in `ClientIPFromXFF` via `X-Forwarded-For - update to 2.1.2 (bsc#1285270, CVE-2026-78669): * It fixes credential and presigned url leaks, local chart handling, haul formats from `--filename`, and `hauler store copy` with image-type files and cosign bundles. It adds `hauler`, `hauler-dev`, and `hauler@` homebrew casks, and it is the first release published through them. It also bumps go to `1.27.2`. hauler-2.1.2-bp161.1.1.src.rpm hauler-2.1.2-bp161.1.1.x86_64.rpm hauler-2.1.2-bp161.1.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-13 Recommended update for libreoffice moderate openSUSE Backports SLE-16.1 This update for libreoffice fixes the following issues: Changes in libreoffice: - Upgrade to 26.8.1.1. - Perfect spec file sync between Factory, SLE and Leap 16.X. - Update to LibreOffice 26.2.5.1 (was 25.2.5.2). libreoffice-26.8.1.1-bp161.1.1.src.rpm libreoffice-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-base-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-base-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-base-drivers-postgresql-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-base-drivers-postgresql-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-branding-upstream-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-calc-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-calc-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-calc-extensions-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-debugsource-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-draw-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-draw-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-filters-optional-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-gdb-pretty-printers-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-glade-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-gnome-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-gnome-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-gtk3-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-gtk3-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-icon-themes-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-impress-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-impress-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-kdeintegration-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ab-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-af-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-am-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ar-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-as-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ast-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-be-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-bg-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-bn-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-bn_IN-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-bo-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-br-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-brx-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-bs-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ca-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ca_valencia-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ckb-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-cs-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-cy-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-da-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-de-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-dgo-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-dsb-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-dz-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-el-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-en-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-en_GB-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-en_ZA-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-eo-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-es-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-et-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-eu-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-fa-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-fi-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-fr-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-fur-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-fy-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ga-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-gd-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-gl-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-gu-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-gug-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-he-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-hi-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-hr-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-hsb-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-hu-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-hy-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-id-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-is-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-it-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ja-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ka-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-kab-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-kk-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-km-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-kmr_Latn-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-kn-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ko-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-kok-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ks-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-lb-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-lo-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-lt-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-lv-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-mai-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-mk-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ml-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-mn-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-mni-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-mr-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-my-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-nb-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ne-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-nl-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-nn-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-nr-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-nso-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-oc-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-om-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-or-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-pa-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-pl-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-pt_BR-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-pt_PT-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ro-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ru-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-rw-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sa_IN-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sat-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sat_Olck-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sd-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-si-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sid-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sk-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sl-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sq-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sr-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ss-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-st-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sv-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-sw_TZ-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-szl-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ta-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-te-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-tg-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-th-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-tl-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-tn-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-tr-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ts-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-tt-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ug-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-uk-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-uz-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-ve-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-vec-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-vi-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-xh-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-zh_CN-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-zh_TW-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-l10n-zu-26.8.1.1-bp161.1.1.noarch.rpm libreoffice-librelogo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-mailmerge-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-math-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-math-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-officebean-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-officebean-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-pyuno-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-pyuno-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-qt6-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-qt6-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-sdk-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-sdk-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-sdk-doc-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-writer-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-writer-debuginfo-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-writer-extensions-26.8.1.1-bp161.1.1.x86_64.rpm libreofficekit-26.8.1.1-bp161.1.1.x86_64.rpm libreofficekit-devel-26.8.1.1-bp161.1.1.x86_64.rpm libreoffice-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-base-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-base-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-base-drivers-postgresql-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-base-drivers-postgresql-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-calc-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-calc-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-calc-extensions-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-debugsource-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-draw-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-draw-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-filters-optional-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-gnome-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-gnome-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-gtk3-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-gtk3-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-impress-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-impress-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-librelogo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-mailmerge-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-math-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-math-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-officebean-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-officebean-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-pyuno-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-pyuno-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-qt6-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-qt6-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-sdk-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-sdk-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-sdk-doc-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-writer-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-writer-debuginfo-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-writer-extensions-26.8.1.1-bp161.1.1.s390x.rpm libreofficekit-26.8.1.1-bp161.1.1.s390x.rpm libreofficekit-devel-26.8.1.1-bp161.1.1.s390x.rpm libreoffice-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-base-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-base-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-base-drivers-postgresql-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-base-drivers-postgresql-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-calc-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-calc-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-calc-extensions-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-debugsource-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-draw-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-draw-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-filters-optional-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-gnome-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-gnome-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-gtk3-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-gtk3-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-impress-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-impress-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-librelogo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-mailmerge-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-math-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-math-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-officebean-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-officebean-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-pyuno-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-pyuno-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-qt6-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-qt6-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-sdk-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-sdk-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-sdk-doc-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-writer-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-writer-debuginfo-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-writer-extensions-26.8.1.1-bp161.1.1.ppc64le.rpm libreofficekit-26.8.1.1-bp161.1.1.ppc64le.rpm libreofficekit-devel-26.8.1.1-bp161.1.1.ppc64le.rpm libreoffice-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-base-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-base-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-base-drivers-postgresql-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-base-drivers-postgresql-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-calc-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-calc-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-calc-extensions-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-debugsource-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-draw-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-draw-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-filters-optional-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-gnome-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-gnome-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-gtk3-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-gtk3-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-impress-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-impress-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-librelogo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-mailmerge-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-math-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-math-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-officebean-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-officebean-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-pyuno-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-pyuno-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-qt6-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-qt6-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-sdk-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-sdk-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-sdk-doc-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-writer-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-writer-debuginfo-26.8.1.1-bp161.1.1.aarch64.rpm libreoffice-writer-extensions-26.8.1.1-bp161.1.1.aarch64.rpm libreofficekit-26.8.1.1-bp161.1.1.aarch64.rpm libreofficekit-devel-26.8.1.1-bp161.1.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-14 Security update for python-graphql-core important openSUSE Backports SLE-16.1 This update for python-graphql-core fixes the following issues: Changes in python-graphql-core: - CVE-2026-75507: Fix quadratic complexity in OverlappingFieldsCanBeMerged validation rule when comparing nested inline fragments. (bsc#1287830) - CVE-2026-75508: Count skipped comment tokens toward the parser max_tokens limit to prevent memory exhaustion. (bsc#1287829) python-graphql-core-3.2.6-bp161.2.1.src.rpm python313-graphql-core-3.2.6-bp161.2.1.noarch.rpm openSUSE-Leap-16.1-packagehub-15 Recommended update for testssl.sh moderate openSUSE Backports SLE-16.1 This update for testssl.sh fixes the following issues: Changes in testssl.sh: - Update to version 3.2.5 * Fix potential injection issues @ $NODE, $PROXY, $XMPP_HOST and $PORT and $dl by providing general validation functions. * Fix a potential format string issue (printf needed '%s'). * remove eMudhra certificates by updating Linux, Mozilla and Java CA store. * Improve handling of short-lived certificates. * Be more patient wrt TLS 1.3 session ticket to arrive. - Update to version 3.2.4 * Security bug fix for XSS in HTML file output. * OpenSSL 4 compatibility. * Add missing TLS signature schemes. * Add missing TLS 1.3 Brainpool groups. - Update to version 3.2.3 * label missing KEMs as low severity to indicate that people should start using it changing in CA stores. * changes in unit tests. * clientHello contains <= 118 ciphers as more could cause problem for picky servers. * fixed ROBOT check for STARTTLS which sometimes caused inconsistent test results. * fixed confused "ADDTL_CA_FILES" enviroment variable. * fixed word pattern matching in /etc/hosts where anystring matched alos 192.168.0.11 anystring-tomcat. * several minor fixes - Update to version 3.2.2 * Modify grading for incomplete chain. * Add sectigo CA E46 and R46 for Linux.pem. * Make code2network() faster by using bash instead of tr. * Fix not working --disable-rating switch. * feat: bump ssllabs rating guide to 2009r. * Fix displayed message when IPv6 needs to be tested too. * Fix garbled screen when HTTP Age is not a non-negative int. - Update to version 3.2.1 * Add Android15 handshake simulation. * Fix missing line feed in run_breach() failure output. * Fix CCS injection regression. * Fix parser for server header. * Fix missing issuer CN. * Fix OPENSSL_CONF problem for OPENSSL2. - Update to version 3.2.0 * https://github.com/testssl/testssl.sh/blob/3.2/CHANGELOG.md testssl.sh-3.2.5-bp161.1.1.noarch.rpm testssl.sh-3.2.5-bp161.1.1.src.rpm openSUSE-Leap-16.1-packagehub-16 Security update for rqlite critical openSUSE Backports SLE-16.1 This update for rqlite fixes the following issues: Changes in rqlite: - Update to version 10.6.6: * Keep the local auto-backup file if the metadata rename fails * Reject local auto-backup filenames reserved for internal use * POST /demote and POST /promote return a JSON error body, and 404 when the target node is not in the cluster. * DELETE /remove returns a JSON error body. - Includes changes from version 10.6.5: * Guard the inter-node backup stream handler directly against a missing backup request * POST /leader returns a JSON error body, and 404 when the target node is not in the cluster - Update to version 10.6.4: * BACKUP_STREAM authorization failures can disclose the database and crash rqlited (boo#1286934) * GET /leader returns a JSON error body when there is no leader * Close the connection after rejecting an unauthorized inter-node backup stream request, instead of streaming the database anyway * Decide inter-node command authorization once, before dispatch, and close the connection after rejecting any unauthorized command - Update to version 10.6.3: * Node probes honor request context and commit exactly one result * Make DB connections a first-class object * Prevent ATTACH on the query database connection - Update to version 10.6.2: * Check for trailing junk in request bodies * Console schema view handles table names that collide with JavaScript object properties * Set CommitTimestamps in CDC Events Group * Upgrade dependencies - Update to version 10.6.1: * Use constant-time comparison when comparing passwords * Conditionally rewrite SQL during queued writes and fix rewriting of CURRENT_TIMESTAMP and related tokens * More robust Leader stepdown node ID detection, reap checks, and SQL analyze start-time recording * CDC fixes: encode non-finite floats, always release flush waiters, and make the HTTP sink follow redirects * Converted _service from mode=disabled to mode=manual (legacy leftover; services are run by hand via osc service manualrun) * Package is not affected by CVE-2026-84445 (boo#1278793), CVE-2026-84304 (boo#1279102), CVE-2026-84303 (boo#1279253): vendored grpc is v1.84.0, above the v1.83.1/v1.83.2 fixes * Package is not affected by CVE-2026-89090 (boo#1280657): vendored eventstream is v1.7.20, above the v1.7.8 fix * Package is not affected by CVE-2026-63209 (boo#1283555): vendored klauspost/compress is v1.20.1, above the v1.18.7 fix * Package is not affected by CVE-2026-39821 (boo#1266544): vendored golang.org/x/net is v0.59.0, above the v0.55.0 fix - Update to version 10.6.0: * API addition: error_v2 may contain numeric SQLite error codes. * addresses a security issue related to Authentication files. A user with no explicit permissions could be grant elevated permissions. Correctly configured users do not suffer from this issue. * multiple implementation changes and bug fixes * Display interactive cluster topology on web console. * Support configurable queued-writes retries * release addresses a gap in the role-based access permissions related to change-data-capture (CDC) handling - Update to version 10.3.6: * Add query logging to database layer * Snapshot IDs now contain (optional) generation * Bump generation ID if snapshot IDs collide * Snapshots can be filtered by term and index * Add support for File Renaming and Removing with retries * Replace standard library with fsutil * Keep snapshot ordering correct regardless of clock * Remove snapshot name generation ID - Update to version 10.3.5: * Reject alternate form of unsupported PRAGMA commands * Handle negative trailing logs * Sync access to last backup time at http layer * Set the "Served by" header before first backup byte * Set DB load response time for all formats * Fix HTTP logic error for queued statements * Minor web console fixes - includes changes from 10.0.4: * Do not emit rolled-back events over CDC - includes changes from 10.0.3: * Refactor busy timeout methods * Fix edge-case bugs detected by GPT-6 Astra * Switch to quay.io/minio/minio:latest for testing purposes * Fix removing a node with different ID, but same Raft address * Use correct Foreign Key setting when recovering node * Only dump the indexes and triggers of the selected tables * Detect DB changes during Request(RETURNING) * Snapshot Open() first checks for failed reap * Sync snapshot plan directory * Propagate WAL stat errors * Clean up cancelled snapshots * Reject incomplete snapshot headers * Validate restore database header * Only reap a sole fullsnapshot if it has zero WALs * Keep database dumps consistent during writes to the database * Roll back DB Requests on statement-prepare errors - includes changes from 10.0.2: * Upgrade SQLite driver * Unit test reaping an installed Snapshot and streamed Snapshot combo * Use distinct Snapshot Namer type * Replace breaking-pragma regexes with ASCII prefix scanning * Consolidate pragma and txStatus reads onto a single connection per pool * Fix some magic strings in db package - Update to version 10.3.1: * Consolidate SQLite driver construction * Plumb Term and Index through during Snapshot Restore * Hard exit if FSM Restore fails post database-swap - Update to version 10.3.0: * Console app supports quickly querying for first 100 rows of a table * Rename read-only nodes to read replicas. Command-line flags unchanged * Bundles dependencies updated * Add infra for pushing OTLP metrics to an OpenTelemetry Collector * Add query logging at database level * Add CopyDir functionality to file utils. * Add ability to clone Snapshots, primarily for testing purposes * Store Index and Term in Fingerprint file and check during start-up - Update to version 10.2.7: * Remove explicit database-level read-only check from the pure Query path * Miscellaneous Store-level fixes related to resource management and shutdown sequence * Don't run CRC checks twice on Snapshot when fast-restart is explicitly disabled * Fixes to the http package including SQL rewriting control. * Address potential dropped CDC event on restart * Various minor fixes - includes changes from 10.2.6: * Handle a fully-executed Reap plan, but Plan file itself not removed * Close Snapshot streamer on error. - includes changes from 10.2.5: * Perform a Quick Integrity check after reaping snapshots, not Full - Update to version 10.2.4: * Fix some non-AWS S3-compatible stores - includes changes from 10.2.3 * Check snapshot store integrity before first actual use * Disable HTTP timeout for boot and restore operations via the shell * HTTP layer ignores ErrNoWALToSnapshot when snapshotting * Close Snapshot Streamer ASAP when restoring to local node rqlite-10.6.6-bp161.1.1.src.rpm rqlite-10.6.6-bp161.1.1.x86_64.rpm rqlite-debuginfo-10.6.6-bp161.1.1.x86_64.rpm rqlite-10.6.6-bp161.1.1.s390x.rpm rqlite-debuginfo-10.6.6-bp161.1.1.s390x.rpm rqlite-10.6.6-bp161.1.1.ppc64le.rpm rqlite-debuginfo-10.6.6-bp161.1.1.ppc64le.rpm rqlite-10.6.6-bp161.1.1.aarch64.rpm rqlite-debuginfo-10.6.6-bp161.1.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-17 Security update for evolution moderate openSUSE Backports SLE-16.1 This update for evolution fixes the following issues: Changes in evolution: - CVE-2026-88859: JavaScript handler incorrectly assigns an attacker-controlled JavaScript URL to an iframe's source when processing a crafted HTML email containing a spoofed vCard control, which can lead to arbitrary JavaScript execution (bsc#1280004) evolution-3.56.2-bp161.4.1.src.rpm evolution-3.56.2-bp161.4.1.x86_64.rpm evolution-debuginfo-3.56.2-bp161.4.1.x86_64.rpm evolution-debugsource-3.56.2-bp161.4.1.x86_64.rpm evolution-devel-3.56.2-bp161.4.1.x86_64.rpm evolution-lang-3.56.2-bp161.4.1.noarch.rpm evolution-plugin-bogofilter-3.56.2-bp161.4.1.x86_64.rpm evolution-plugin-bogofilter-debuginfo-3.56.2-bp161.4.1.x86_64.rpm evolution-plugin-pst-import-3.56.2-bp161.4.1.x86_64.rpm evolution-plugin-pst-import-debuginfo-3.56.2-bp161.4.1.x86_64.rpm evolution-plugin-spamassassin-3.56.2-bp161.4.1.x86_64.rpm evolution-plugin-spamassassin-debuginfo-3.56.2-bp161.4.1.x86_64.rpm evolution-plugin-text-highlight-3.56.2-bp161.4.1.x86_64.rpm evolution-plugin-text-highlight-debuginfo-3.56.2-bp161.4.1.x86_64.rpm evolution-3.56.2-bp161.4.1.s390x.rpm evolution-debuginfo-3.56.2-bp161.4.1.s390x.rpm evolution-debugsource-3.56.2-bp161.4.1.s390x.rpm evolution-devel-3.56.2-bp161.4.1.s390x.rpm evolution-plugin-bogofilter-3.56.2-bp161.4.1.s390x.rpm evolution-plugin-bogofilter-debuginfo-3.56.2-bp161.4.1.s390x.rpm evolution-plugin-pst-import-3.56.2-bp161.4.1.s390x.rpm evolution-plugin-pst-import-debuginfo-3.56.2-bp161.4.1.s390x.rpm evolution-plugin-spamassassin-3.56.2-bp161.4.1.s390x.rpm evolution-plugin-spamassassin-debuginfo-3.56.2-bp161.4.1.s390x.rpm evolution-plugin-text-highlight-3.56.2-bp161.4.1.s390x.rpm evolution-plugin-text-highlight-debuginfo-3.56.2-bp161.4.1.s390x.rpm evolution-3.56.2-bp161.4.1.ppc64le.rpm evolution-debuginfo-3.56.2-bp161.4.1.ppc64le.rpm evolution-debugsource-3.56.2-bp161.4.1.ppc64le.rpm evolution-devel-3.56.2-bp161.4.1.ppc64le.rpm evolution-plugin-bogofilter-3.56.2-bp161.4.1.ppc64le.rpm evolution-plugin-bogofilter-debuginfo-3.56.2-bp161.4.1.ppc64le.rpm evolution-plugin-pst-import-3.56.2-bp161.4.1.ppc64le.rpm evolution-plugin-pst-import-debuginfo-3.56.2-bp161.4.1.ppc64le.rpm evolution-plugin-spamassassin-3.56.2-bp161.4.1.ppc64le.rpm evolution-plugin-spamassassin-debuginfo-3.56.2-bp161.4.1.ppc64le.rpm evolution-plugin-text-highlight-3.56.2-bp161.4.1.ppc64le.rpm evolution-plugin-text-highlight-debuginfo-3.56.2-bp161.4.1.ppc64le.rpm evolution-3.56.2-bp161.4.1.aarch64.rpm evolution-debuginfo-3.56.2-bp161.4.1.aarch64.rpm evolution-debugsource-3.56.2-bp161.4.1.aarch64.rpm evolution-devel-3.56.2-bp161.4.1.aarch64.rpm evolution-plugin-bogofilter-3.56.2-bp161.4.1.aarch64.rpm evolution-plugin-bogofilter-debuginfo-3.56.2-bp161.4.1.aarch64.rpm evolution-plugin-pst-import-3.56.2-bp161.4.1.aarch64.rpm evolution-plugin-pst-import-debuginfo-3.56.2-bp161.4.1.aarch64.rpm evolution-plugin-spamassassin-3.56.2-bp161.4.1.aarch64.rpm evolution-plugin-spamassassin-debuginfo-3.56.2-bp161.4.1.aarch64.rpm evolution-plugin-text-highlight-3.56.2-bp161.4.1.aarch64.rpm evolution-plugin-text-highlight-debuginfo-3.56.2-bp161.4.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-3 Security update for chromium, gn critical openSUSE Backports SLE-16.1 This update for chromium, gn fixes the following issues: Changes in chromium: - Chromium 157 (157.0.8103.38) promoted to stable (boo#1289268): * CVE-2026-121156: Buffer overflow in Dawn * CVE-2026-121229: Memory corruption in ANGLE * CVE-2026-121246: Use after free in WebGL * CVE-2026-121035: Use after free in Prerender * CVE-2026-121247: Buffer overflow in Dawn * CVE-2026-121203: Use after free in Geometry * CVE-2026-121126: Use after free in Core * CVE-2026-121107: Incorrect authorization in BackgroundFetch * CVE-2026-121197: Out of bounds read in ANGLE * CVE-2026-121112: Out of bounds read in Permissions * CVE-2026-121174: Missing authorization in BackgroundFetch * CVE-2026-121098: Improper state validation in GPU * CVE-2026-121074: Memory corruption in GPU * CVE-2026-121173: Uninitialized resource in WebGL * CVE-2026-121233: Type confusion in CacheStorage * CVE-2026-121140: Out of bounds read in Internals * CVE-2026-121095: Uninitialized resource in WebGL * CVE-2026-121071: Incorrect authorization in FileSystem * CVE-2026-121207: Uninitialized resource in Dawn * CVE-2026-121185: Use after free in PictureInPicture * CVE-2026-121166: Type confusion in PDFium * CVE-2026-121047: Buffer overflow in Media * CVE-2026-121124: Improper adherence to coding standards in XML * CVE-2026-121118: Use after free in SVG * CVE-2026-121188: Use after free in PerformanceAPIs * CVE-2026-121113: Buffer overflow in PDFium * CVE-2026-121082: Type confusion in V8 * CVE-2026-121083: Use after free in Compositing * CVE-2026-121179: Use after free in PDFium * CVE-2026-121180: Buffer overflow in Media * CVE-2026-121181: Use after free in Editing * CVE-2026-121228: Type confusion in V8 * CVE-2026-121080: Use after free in Codecs * CVE-2026-121044: Use after free in Layout * CVE-2026-121051: UI misrepresentation in iOSWeb * CVE-2026-121038: Information leak in Compositing * CVE-2026-121090: Improper privilege management in Navigation * CVE-2026-121052: Use after free in GPU * CVE-2026-121037: Out of bounds write in ANGLE * CVE-2026-121086: Buffer overflow in Skia * CVE-2026-121131: Use after free in Mobile * CVE-2026-121087: Improper input validation in Mobile * CVE-2026-121178: Use after free in Aura * CVE-2026-121100: Use after free in DOM * CVE-2026-121148: Use after free in ANGLE * CVE-2026-121089: Use after free in WebGPU * CVE-2026-121250: Use after free in Extensions * CVE-2026-121032: Out of bounds read in Skia * CVE-2026-121114: Use after free in TabStrip * CVE-2026-121127: Use after free in WebAudio * CVE-2026-121210: Type confusion in V8 * CVE-2026-121057: Type confusion in V8 * CVE-2026-121201: Use after free in Animation * CVE-2026-121084: Out of bounds read in Skia * CVE-2026-121094: Type confusion in V8 * CVE-2026-121079: Race condition in V8 * CVE-2026-121143: Uninitialized resource in GPU * CVE-2026-121097: Use after free in Printing * CVE-2026-121214: Use after free in Passwords * CVE-2026-121133: Incorrect reference resolution in Images * CVE-2026-121249: Buffer overflow in ANGLE * CVE-2026-121213: Uninitialized resource in Images * CVE-2026-121241: Use after free in Navigation * CVE-2026-121224: Security issue in Desktop * CVE-2026-121117: Use after free in Paint * CVE-2026-121123: Use after free in Canvas * CVE-2026-121182: Use after free in DOM * CVE-2026-121061: Use after free in Modularization * CVE-2026-121227: Uninitialized resource in Skia * CVE-2026-121226: Type confusion in V8 * CVE-2026-121068: Type confusion in V8 * CVE-2026-121137: Type confusion in DevTools * CVE-2026-121160: Out of bounds read in Skia * CVE-2026-121036: Use after free in CSS * CVE-2026-121104: Incorrect authorization in FileSystem * CVE-2026-121034: Use after free in Views * CVE-2026-121208: Out of bounds read in Media * CVE-2026-121129: Use after free in WebRTC * CVE-2026-121211: Use after free in PowerBookmarks * CVE-2026-121078: Type confusion in V8 * CVE-2026-121060: Incorrect authorization in FileSystem * CVE-2026-121076: Use after free in WebXR * CVE-2026-121221: Type confusion in V8 * CVE-2026-121119: Use after free in Controls * CVE-2026-121244: UI misrepresentation in FileAPI * CVE-2026-121242: Improper input validation in WebPackaging * CVE-2026-121105: Information leak in Network * CVE-2026-121237: Improper state validation in FileSystem * CVE-2026-121102: Missing authorization in BackgroundFetch * CVE-2026-121120: Improper input validation in Prerender * CVE-2026-121161: Information leak in BackgroundFetch * CVE-2026-121062: Incorrect authorization in API * CVE-2026-121031: Missing authorization in PDF * CVE-2026-121063: Incorrect authorization in CacheStorage * CVE-2026-121108: Confused deputy in BackgroundFetch * CVE-2026-121199: Missing authorization in Chromoting * CVE-2026-121099: Information leak in PrivateTokens * CVE-2026-121196: Privilege elevation in Mobile * CVE-2026-121066: Incorrect authorization in Extensions * CVE-2026-121256: Use of released resource in GPU * CVE-2026-121115: Improper input validation in Shopping * CVE-2026-121234: Privilege elevation in Contacts * CVE-2026-121177: UI misrepresentation in PageInfo * CVE-2026-121193: Incorrect authorization in Extensions * CVE-2026-121248: Incorrect authorization in API * CVE-2026-121106: Information leak in Omnibox * CVE-2026-121200: Incorrect reference resolution in DevTools * CVE-2026-121039: Incorrect authorization in Proxy Auth * CVE-2026-121122: UI misrepresentation in Prompts * CVE-2026-121219: Integer overflow in GPU * CVE-2026-121255: Incorrect authorization in Autofill AI * CVE-2026-121231: Incorrect authorization in DevTools * CVE-2026-121183: Incorrect authorization in Extensions * CVE-2026-121072: Uninitialized resource in Skia * CVE-2026-121103: Incorrect authorization in Extensions * CVE-2026-121136: Missing authorization in DevTools * CVE-2026-121040: Incorrect authorization in Core * CVE-2026-121030: Incorrect authorization in DevTools * CVE-2026-121075: Missing authorization in DevTools * CVE-2026-121220: Incorrect authorization in Core * CVE-2026-121170: Improper resource control in WebCodecs * CVE-2026-121059: Information leak in Core * CVE-2026-121163: Improper input validation in Browser * CVE-2026-121088: Missing authorization in PerformanceAPIs * CVE-2026-121033: Uninitialized resource in GPU * CVE-2026-121254: Information leak in Select * CVE-2026-121065: Incorrect authorization in DevTools * CVE-2026-121171: Confused deputy in DevTools * CVE-2026-121116: Missing authorization in WebView * CVE-2026-121239: Information leak in Core * CVE-2026-121187: Observable discrepancy in Paint * CVE-2026-121132: Information leak in V8 * CVE-2026-121067: UI misrepresentation in PermissionElement * CVE-2026-121096: Incomplete cleanup in V8 * CVE-2026-121184: Out of bounds read in Media * CVE-2026-121215: UI misrepresentation in Bluetooth * CVE-2026-121212: Incorrect authorization in Core * CVE-2026-121194: Missing authorization in SiteIsolation * CVE-2026-121202: Use after free in Autofill * CVE-2026-121048: Race condition in V8 * CVE-2026-121070: Use after free in WTF * CVE-2026-121257: Use after free in TabStrip * CVE-2026-121218: Type confusion in V8 * CVE-2026-121164: Incorrect authorization in Views * CVE-2026-121223: Observable discrepancy in Media * CVE-2026-121186: UI misrepresentation in Passwords * CVE-2026-121176: Uninitialized resource in Media * CVE-2026-121128: Use after free in Scheduling * CVE-2026-121216: UI misrepresentation in UI * CVE-2026-121158: Information leak in Paint * CVE-2026-121110: UI misrepresentation in Shopping * CVE-2026-121042: Incorrect authorization in Permissions * CVE-2026-121238: Use after free in Source * CVE-2026-121077: Use after free in Mobile * CVE-2026-121245: Race condition in Autofill * CVE-2026-121049: Out of bounds read in V8 * CVE-2026-121091: Incorrect authorization in Permissions * CVE-2026-121167: Incorrect authorization in Permissions * CVE-2026-121135: Security issue in Platform * CVE-2026-121209: UI misrepresentation in Input * CVE-2026-121134: Information loss in BackgroundFetch * CVE-2026-121217: Use after free in Streaming * CVE-2026-121109: Inadequate encryption strength in SSL * CVE-2026-121243: Information leak in Frames * CVE-2026-121053: UI misrepresentation in Transactions Platform * CVE-2026-121190: UI misrepresentation in Extensions * CVE-2026-121125: Information leak in ServiceWorker * CVE-2026-121046: Incorrect authorization in WebAppInstalls * CVE-2026-121222: Incorrect authorization in Forms * CVE-2026-121157: Incorrect authorization in Chromoting * CVE-2026-121235: Information leak in Paint * CVE-2026-121252: Incorrect authorization in Core * CVE-2026-121168: Improper resource exposure in DevTools * CVE-2026-121043: UI misrepresentation in Payments * CVE-2026-121111: Incorrect authorization in HID * CVE-2026-121138: Observable discrepancy in CORS * CVE-2026-121055: Incomplete cleanup in DevTools * CVE-2026-121101: Missing authorization in DevTools * CVE-2026-121236: Improper input validation in Network * CVE-2026-121165: UI misrepresentation in Mobile * CVE-2026-121253: Missing authorization in DevTools * CVE-2026-121172: Incorrect authorization in Isolated * CVE-2026-121206: UI misrepresentation in Isolated * CVE-2026-121189: Use after free in Browser * CVE-2026-121121: UI misrepresentation in PageInfo * CVE-2026-121130: Observable discrepancy in Forms * CVE-2026-121251: Missing authorization in V8 * CVE-2026-121085: Incorrect authorization in WebUI * CVE-2026-121159: Incorrect authorization in History * CVE-2026-121204: Incomplete cleanup in DevTools * CVE-2026-121205: Incorrect authorization in CORS * CVE-2026-121050: Race condition in Mobile * CVE-2026-121081: UI misrepresentation in Passwords * CVE-2026-121240: Improper input validation in Variations * CVE-2026-121198: Confused deputy in WebUI * CVE-2026-121225: Incorrect authorization in Permissions * CVE-2026-121162: UI misrepresentation in Notifications * CVE-2026-121045: UI misrepresentation in Browser * CVE-2026-121029: Incorrect authorization in ORB * CVE-2026-121054: Improper state validation in XML * CVE-2026-121175: Improper resource exposure in ORB * CVE-2026-121092: Uncontrolled recursion in SVG * CVE-2026-121073: Use after free in Network * CVE-2026-121230: Race condition in ANGLE * CVE-2026-121093: Out of bounds read in Animation * CVE-2026-121041: Missing authorization in Input * CVE-2026-121232: Incorrect authorization in Core * CVE-2026-121142: Incorrect authorization in Network * CVE-2026-121069: Use after free in Track * CVE-2026-121169: Missing authorization in DevTools * CVE-2026-121064: Improper input validation in Performance * CVE-2026-121195: Incorrect authorization in TrustedTypes * CVE-2026-121141: Improper input validation in Editing - disable v8 metagen - Chromium 157.0.8103.15 (beta released 2026-10-22) - Chromium 156.0.8078.79 (boo#1288840): * CVE-2026-76024: Memory corruption in MediaStream * CVE-2026-76025: Use after free in FileSystem * CVE-2026-76026: Memory corruption in Autofill * CVE-2026-76027: Memory corruption in CacheStorage * CVE-2026-76028: Use after free in FileSystem * CVE-2026-76029: Memory corruption in Network * CVE-2026-76030: Memory corruption in FileSystem * CVE-2026-76031: Use after free in Input * CVE-2026-119260: Use after free in Frames * CVE-2026-119261: Improper input validation in Skia * CVE-2026-119262: Improper input validation in V8 * CVE-2026-119263: Memory corruption in GarbageCollection * CVE-2026-119264: Memory corruption in Dawn * CVE-2026-119265: Memory corruption in Quota * CVE-2026-119266: Use after free in Quota * CVE-2026-119267: Memory corruption in DOM * CVE-2026-119268: Integer overflow in Editing * CVE-2026-119269: Use after free in Blink * CVE-2026-119270: Improper input validation in CacheStorage * CVE-2026-119271: Use after free in Skia * CVE-2026-119272: Out of bounds read in FileSystem - Chromium 156.0.8078.73 (boo#1288218): * CVE-2026-118306: Memory corruption in FileSystem * CVE-2026-118331: Improper input validation in FileAPI * CVE-2026-118348: Improper input validation in Skia * CVE-2026-118344: Use after free in Layout * CVE-2026-118357: Use after free in FileSystem * CVE-2026-118318: Improper access control in V8 * CVE-2026-118350: Use after free in Turbolev * CVE-2026-118339: Use after free in Animation * CVE-2026-118305: Memory corruption in Turbolev * CVE-2026-118317: Memory corruption in HTML * CVE-2026-118320: Memory corruption in V8 * CVE-2026-118322: Memory corruption in ANGLE * CVE-2026-118329: Improper input validation in ANGLE * CVE-2026-118354: Improper input validation in Skia * CVE-2026-118340: Memory corruption in Skia * CVE-2026-118321: Improper input validation in Core * CVE-2026-118337: Improper access control in Forms * CVE-2026-118352: Memory corruption in Cache * CVE-2026-118355: Improper input validation in Command * CVE-2026-118307: Use after free in Paint * CVE-2026-118351: Memory corruption in Skia * CVE-2026-118328: Improper input validation in WebRTC * CVE-2026-118333: Missing authorization in Video * CVE-2026-118336: Improper input validation in Headless * CVE-2026-118358: Memory corruption in WebAudio * CVE-2026-118353: Use after free in Paint * CVE-2026-118349: Memory corruption in Payments * CVE-2026-118327: Memory corruption in Media * CVE-2026-118359: Memory corruption in V8 * CVE-2026-118343: Improper input validation in ReadingList * CVE-2026-118311: Memory corruption in Media * CVE-2026-118334: Use after free in ImageCapture * CVE-2026-118332: Improper input validation in Compositing * CVE-2026-118313: Use after free in Video * CVE-2026-118345: Use after free in PDFium * CVE-2026-118304: Improper input validation in SVG * CVE-2026-118316: Improper input validation in V8 * CVE-2026-118346: Use after free in Compositing * CVE-2026-118342: Out of bounds write in Editing * CVE-2026-118310: Improper input validation in Views * CVE-2026-118335: Improper input validation in Metrics * CVE-2026-118308: Use after free in SVG * CVE-2026-118314: Improper input validation in UI * CVE-2026-118347: Use after free in FileSystem * CVE-2026-118341: Use after free in Modularization * CVE-2026-118330: Use after free in Browser * CVE-2026-118315: Improper input validation in SVG * CVE-2026-118356: Use after free in WTF * CVE-2026-118309: Improper input validation in UI * CVE-2026-118319: Memory corruption in Skia * CVE-2026-118312: Memory corruption in Paint * CVE-2026-118338: Use after free in Animation - Chromium 156 (156.0.8078.47) promoted to stable (boo#1286350): * CVE-2026-113341: Memory corruption in Skia * CVE-2026-113279: Memory corruption in Accessibility * CVE-2026-113072: Memory corruption in CSS * CVE-2026-113280: Memory corruption in Paint * CVE-2026-113271: Use after free in Accessibility * CVE-2026-113303: Memory corruption in WebRTC * CVE-2026-113101: Use after free in SiteIsolation * CVE-2026-113097: Use after free in FileSystem * CVE-2026-113098: Memory corruption in CacheStorage * CVE-2026-113242: Memory corruption in ANGLE * CVE-2026-113058: Use after free in WebUI * CVE-2026-113082: Memory corruption in ANGLE * CVE-2026-113119: Use after free in Network * CVE-2026-113092: Use after free in Passwords * CVE-2026-113134: Memory corruption in ANGLE * CVE-2026-113339: Use after free in SVG * CVE-2026-113317: Memory corruption in Accessibility * CVE-2026-113193: Memory corruption in V8 * CVE-2026-113117: Improper input validation in ANGLE * CVE-2026-113188: Memory corruption in GPU * CVE-2026-113104: Memory corruption in Frames * CVE-2026-113322: Memory corruption in Dawn * CVE-2026-113163: Use after free in WebGL * CVE-2026-113253: Use after free in Canvas * CVE-2026-113298: Use after free in Transactions Platform * CVE-2026-113315: Memory corruption in ANGLE * CVE-2026-113236: Use after free in Navigation * CVE-2026-113284: Memory corruption in XML * CVE-2026-113141: Use after free in Transactions Platform * CVE-2026-113316: Improper input validation in Views * CVE-2026-113234: Memory corruption in ANGLE * CVE-2026-113252: Improper input validation in ANGLE * CVE-2026-113305: Use after free in Privacy * CVE-2026-113044: Use after free in V8 * CVE-2026-113135: Memory corruption in PictureInPicture * CVE-2026-113266: Memory corruption in ANGLE * CVE-2026-113273: Memory corruption in ANGLE * CVE-2026-113293: Use after free in ANGLE * CVE-2026-113225: Memory corruption in Browser * CVE-2026-113210: Use after free in ANGLE * CVE-2026-113285: Memory corruption in ANGLE * CVE-2026-113324: Use after free in GPU * CVE-2026-113334: Improper input validation in ANGLE * CVE-2026-113020: Improper input validation in Date * CVE-2026-113222: Use after free in V8 * CVE-2026-113318: Memory corruption in ServiceWorker * CVE-2026-113310: Out of bounds read in Bluetooth * CVE-2026-113338: Use after free in Turbolev * CVE-2026-113093: Memory corruption in DisplayLocking * CVE-2026-113012: Improper input validation in GPU * CVE-2026-113175: Improper input validation in FileSystem * CVE-2026-113192: Memory corruption in V8 * CVE-2026-113309: Out of bounds read in Media * CVE-2026-113295: Out of bounds read in ANGLE * CVE-2026-113217: Use after free in WebAppInstalls * CVE-2026-113040: Improper input validation in Proxy * CVE-2026-113161: Use after free in WebRTC * CVE-2026-113154: Memory corruption in Canvas * CVE-2026-113336: Memory corruption in Compositing * CVE-2026-113181: Use after free in Navigation * CVE-2026-113019: Use after free in Turbolev * CVE-2026-113095: Out of bounds read in Focus * CVE-2026-113160: Use after free in Turbolev * CVE-2026-113212: Memory corruption in PDF * CVE-2026-113000: Memory corruption in Paint * CVE-2026-113179: Use after free in Paint * CVE-2026-112993: Use after free in Input * CVE-2026-113055: Type confusion in FullScreen * CVE-2026-113068: Use after free in Input * CVE-2026-113320: Memory corruption in Navigation * CVE-2026-113231: Improper input validation in Extensions * CVE-2026-113174: Use after free in Extensions * CVE-2026-113022: Memory corruption in PDFium * CVE-2026-113079: Use after free in SiteIsolation * CVE-2026-113191: Use after free in Internals * CVE-2026-113250: Use after free in ANGLE * CVE-2026-113109: Memory corruption in API * CVE-2026-113113: Use after free in Extensions * CVE-2026-113069: Memory corruption in Compositing * CVE-2026-113006: Out of bounds read in Navigation * CVE-2026-113263: Use after free in Core * CVE-2026-113018: Memory corruption in IME * CVE-2026-113301: Memory corruption in WebAppInstalls * CVE-2026-113034: Memory corruption in FileSystem * CVE-2026-113094: Memory corruption in API * CVE-2026-113240: Use after free in Chromecast * CVE-2026-113102: Out of bounds read in FileSystem * CVE-2026-113142: Memory corruption in Extensions * CVE-2026-113281: Memory corruption in SiteIsolation * CVE-2026-113035: Out of bounds read in API * CVE-2026-113211: Memory corruption in ServiceWorker * CVE-2026-113011: Use after free in CredentialProvider * CVE-2026-113198: Use after free in Extensions * CVE-2026-113257: Memory corruption in Media * CVE-2026-113070: Out of bounds read in GetUserMedia * CVE-2026-113176: Memory corruption in Omnibox * CVE-2026-113150: Memory corruption in Bindings * CVE-2026-113311: Use after free in ServiceWorker * CVE-2026-113078: Improper input validation in Compositing * CVE-2026-113033: Use after free in Streaming * CVE-2026-113026: Memory corruption in PDF * CVE-2026-113302: Use after free in Extensions * CVE-2026-113164: Memory corruption in Voice * CVE-2026-113239: Range error in SiteIsolation * CVE-2026-113131: Memory corruption in Bluetooth * CVE-2026-113333: Memory corruption in Extensions * CVE-2026-113147: Improper input validation in WebShare * CVE-2026-113337: Memory corruption in Scroll * CVE-2026-113127: Memory corruption in Browser * CVE-2026-113129: Improper access control in Extensions * CVE-2026-113264: Improper input validation in Extensions * CVE-2026-113105: Use after free in Extensions * CVE-2026-113220: Memory corruption in Extensions * CVE-2026-113275: Use after free in API * CVE-2026-113283: Memory corruption in CredentialProvider * CVE-2026-113014: Use after free in PerformanceAPIs * CVE-2026-113108: Use after free in Script * CVE-2026-113343: Memory corruption in Sandbox * CVE-2026-113319: Use after free in Accessibility * CVE-2026-113057: Improper access control in ComputePressure * CVE-2026-113219: Memory corruption in Contacts * CVE-2026-113005: Memory corruption in Bluetooth * CVE-2026-113209: Memory corruption in Navigation * CVE-2026-113166: Memory corruption in History * CVE-2026-113051: Memory corruption in CSS * CVE-2026-113196: Improper access control in Mobile * CVE-2026-113003: Memory corruption in HID * CVE-2026-113155: Use after free in Glic * CVE-2026-113290: Use after free in Input * CVE-2026-113183: Memory corruption in FedCM * CVE-2026-113289: Improper input validation in PerformanceAPIs * CVE-2026-113146: Memory corruption in PerformanceAPIs * CVE-2026-113207: Use after free in SiteIsolation * CVE-2026-113205: Use after free in Variations * CVE-2026-113162: Improper input validation in Actor * CVE-2026-113118: Memory corruption in Extensions * CVE-2026-113232: Memory corruption in Search * CVE-2026-113327: Use after free in Chromecast * CVE-2026-112999: Use after free in API * CVE-2026-113249: Improper input validation in Mobile * CVE-2026-113272: Memory corruption in Extensions * CVE-2026-113112: Use after free in Extensions * CVE-2026-113321: Use after free in Extensions * CVE-2026-113059: Memory corruption in Sensor * CVE-2026-113137: Memory corruption in Extensions * CVE-2026-113208: Use after free in ContextualSearch * CVE-2026-113238: Memory corruption in CustomTabs * CVE-2026-113194: Memory corruption in Core * CVE-2026-113189: Use after free in Core * CVE-2026-113060: Improper input validation in Bluetooth * CVE-2026-113115: Use after free in Transactions Platform * CVE-2026-113045: Out of bounds read in Offline * CVE-2026-113307: Memory corruption in Extensions * CVE-2026-113009: Use after free in WindowControlsOverlay * CVE-2026-113071: Use after free in Notifications * CVE-2026-113278: Use after free in Extensions * CVE-2026-113190: Use after free in ServiceWorker * CVE-2026-112992: Memory corruption in Canvas * CVE-2026-112995: Use after free in Animation * CVE-2026-113261: Use after free in WebAppInstalls * CVE-2026-113172: Memory corruption in ServiceWorker * CVE-2026-113332: Memory corruption in GPU * CVE-2026-113262: Use after free in Extensions * CVE-2026-113149: Memory corruption in FullScreen * CVE-2026-113206: Memory corruption in Omnibox * CVE-2026-113185: Memory corruption in Extensions * CVE-2026-113171: Memory corruption in Prompts * CVE-2026-113042: Use after free in Extensions * CVE-2026-113276: Memory corruption in Passwords * CVE-2026-113218: Use after free in DataTransfer * CVE-2026-113195: Improper input validation in Downloads * CVE-2026-113328: Improper input validation in Privacy * CVE-2026-113335: Memory corruption in Extensions * CVE-2026-113255: Use after free in CustomTabs * CVE-2026-113076: Use after free in Toolbar * CVE-2026-113325: Memory corruption in SignIn * CVE-2026-113084: Improper input validation in Permissions * CVE-2026-113308: Use after free in Core * CVE-2026-113224: Memory corruption in WebAppInstalls * CVE-2026-113148: Memory corruption in WebUI * CVE-2026-113010: Out of bounds read in Extensions * CVE-2026-113073: Use after free in Browser * CVE-2026-113265: Memory corruption in BFCache * CVE-2026-113329: Out of bounds read in Installer * CVE-2026-113043: Use after free in iOSWeb * CVE-2026-113202: Use after free in BrowserTag * CVE-2026-113016: Improper input validation in Extensions * CVE-2026-113246: Memory corruption in iOSWebView * CVE-2026-113041: Use after free in Actor * CVE-2026-113126: Memory corruption in PolicyContainer * CVE-2026-113031: Memory corruption in Media * CVE-2026-113081: Use after free in Compositing * CVE-2026-113139: Memory corruption in Autofill * CVE-2026-113128: Missing authorization in Animation * CVE-2026-113049: Memory corruption in Core * CVE-2026-113032: Memory corruption in Omnibox * CVE-2026-113204: Use after free in TrustedWebActivities * CVE-2026-113144: Memory corruption in Speech * CVE-2026-113054: Out of bounds read in SiteIsolation * CVE-2026-113123: Use after free in GPU * CVE-2026-113277: Out of bounds read in CustomTabs * CVE-2026-113136: Memory corruption in DevTools * CVE-2026-113106: Memory corruption in Skia * CVE-2026-113001: Use after free in Workers * CVE-2026-113064: Memory corruption in OptimizationGuide * CVE-2026-113243: Memory corruption in DOM * CVE-2026-113326: Memory corruption in Core * CVE-2026-113124: Memory corruption in DataTransfer * CVE-2026-113230: Improper input validation in Browser * CVE-2026-113090: Memory corruption in Interstitials * CVE-2026-113158: Use after free in Streaming * CVE-2026-113077: Memory corruption in Core * CVE-2026-113282: Use after free in Views * CVE-2026-113165: Use after free in Core * CVE-2026-113178: Memory corruption in Views * CVE-2026-113110: Memory corruption in ShadowDOM * CVE-2026-113007: Memory corruption in Permissions * CVE-2026-113187: Use after free in DOM * CVE-2026-113075: Use after free in DevTools * CVE-2026-113259: Use after free in Frames * CVE-2026-113228: Use after free in Network * CVE-2026-113099: Improper input validation in Omnibox * CVE-2026-113216: Use after free in Navigation * CVE-2026-113270: Use after free in Internals * CVE-2026-113087: Use after free in Actor * CVE-2026-113267: Memory corruption in Video * CVE-2026-113304: Memory corruption in GPU * CVE-2026-113177: Use after free in FileSystem * CVE-2026-113151: Out of bounds read in Actor * CVE-2026-113028: Use after free in Media * CVE-2026-113120: Improper input validation in Media * CVE-2026-112997: Memory corruption in CSS * CVE-2026-113037: Use after free in WebSockets * CVE-2026-113153: Memory corruption in SiteIsolation * CVE-2026-113138: Memory corruption in WebAppInstalls * CVE-2026-113030: Improper access control in V8 * CVE-2026-113100: Memory corruption in Audio * CVE-2026-113221: Use after free in Google Lens * CVE-2026-113344: Use after free in Performance * CVE-2026-113342: Memory corruption in Network * CVE-2026-113159: Improper access control in DevTools * CVE-2026-113233: Out of bounds read in Core * CVE-2026-113065: Use after free in Media * CVE-2026-113002: Memory corruption in Transactions Platform * CVE-2026-113199: Out of bounds read in Payments * CVE-2026-113197: Use after free in Forms * CVE-2026-113203: Use after free in CSS * CVE-2026-113170: Use after free in Autofill * CVE-2026-113258: Memory corruption in Chromoting * CVE-2026-113297: Improper access control in Ozone * CVE-2026-113062: Improper input validation in API * CVE-2026-113096: Memory corruption in Text * CVE-2026-113050: Out of bounds read in HID * CVE-2026-113008: Memory corruption in Transactions Platform * CVE-2026-113111: Use after free in Compositing * CVE-2026-113200: Use after free in ANGLE * CVE-2026-113143: Memory corruption in ANGLE * CVE-2026-113157: Information leak in ANGLE * CVE-2026-113235: Improper input validation in Passwords * CVE-2026-113089: Improper input validation in PrintPreview * CVE-2026-113340: Memory corruption in ANGLE * CVE-2026-113052: Memory corruption in V8 * CVE-2026-113133: Memory corruption in PlatformIntegration * CVE-2026-113086: Improper input validation in Input * CVE-2026-113251: Use after free in PDF * CVE-2026-113215: Use after free in Extensions * CVE-2026-113053: Use after free in Cookies * CVE-2026-113312: Memory corruption in Autofill * CVE-2026-113323: Use after free in Chrome for iOS * CVE-2026-113114: Use after free in SignIn * CVE-2026-113015: Use after free in Workers * CVE-2026-113091: Use after free in PerformanceAPIs * CVE-2026-113168: Use after free in Permissions * CVE-2026-113229: Use after free in Loader * CVE-2026-113256: Use after free in Permissions * CVE-2026-113103: Use after free in WebProtect * CVE-2026-113056: Memory corruption in PerformanceAPIs * CVE-2026-113201: Memory corruption in Google Lens * CVE-2026-113027: Memory corruption in WebFonts * CVE-2026-113214: Improper input validation in FullScreen * CVE-2026-113004: Memory corruption in Sync * CVE-2026-113300: Out of bounds write in Forms * CVE-2026-113213: Memory corruption in DevTools * CVE-2026-113167: Memory corruption in Network * CVE-2026-113223: Memory corruption in DevTools * CVE-2026-113291: Memory corruption in FullScreen * CVE-2026-113241: Memory corruption in Toolbar * CVE-2026-113244: Improper input validation in UI * CVE-2026-113048: Memory corruption in DevTools * CVE-2026-113247: Memory corruption in DevTools * CVE-2026-113023: Improper input validation in Extensions * CVE-2026-113330: Memory corruption in CustomTabs * CVE-2026-113226: Memory corruption in Model * CVE-2026-113152: Memory corruption in SignIn * CVE-2026-113029: Improper access control in ANGLE * CVE-2026-113296: Memory corruption in Actor * CVE-2026-113306: Improper input validation in Network * CVE-2026-113245: Memory corruption in DevTools * CVE-2026-113299: Memory corruption in WebProtect * CVE-2026-113024: Use after free in WebAppInstalls * CVE-2026-113025: Use after free in Input * CVE-2026-113080: Use after free in WebAppInstalls * CVE-2026-113186: Memory corruption in DevTools * CVE-2026-113180: Memory corruption in ContentCapture * CVE-2026-113140: Use after free in ANGLE * CVE-2026-113184: Memory corruption in Scheduling * CVE-2026-113017: Use after free in Views * CVE-2026-112998: Memory corruption in Views * CVE-2026-113021: Use after free in WebAppInstalls * CVE-2026-113145: Memory corruption in Messages * CVE-2026-113292: Improper input validation in Omnibox * CVE-2026-113156: Use after free in Messages * CVE-2026-113116: Use after free in DevTools * CVE-2026-113047: Memory corruption in BrowserTag * CVE-2026-113173: Improper input validation in UI * CVE-2026-113260: Memory corruption in Core * CVE-2026-113269: Memory corruption in BrowserTag * CVE-2026-113036: Memory corruption in HTML * CVE-2026-113268: Memory corruption in Navigation * CVE-2026-113038: Memory corruption in DevTools * CVE-2026-113313: Memory corruption in DevTools * CVE-2026-113061: Memory corruption in Chromoting * CVE-2026-113248: Memory corruption in FileSystem * CVE-2026-113288: Memory corruption in Core * CVE-2026-113085: Use after free in Media * CVE-2026-113107: Use after free in Media * CVE-2026-113066: Memory corruption in Fonts * CVE-2026-113121: Memory corruption in ContextMenu * CVE-2026-113287: Use after free in Prompts * CVE-2026-113132: Memory corruption in DevTools * CVE-2026-113169: Memory corruption in WebAppInstalls * CVE-2026-113254: Memory corruption in DevTools * CVE-2026-113063: Improper input validation in Chromoting * CVE-2026-112994: Memory corruption in Browser * CVE-2026-113314: Use after free in Media * CVE-2026-113237: Memory corruption in Chromoting * CVE-2026-113331: Memory corruption in Controls * CVE-2026-113182: Memory corruption in Passwords * CVE-2026-113046: Improper input validation in Passwords * CVE-2026-113067: Use after free in Chromoting * CVE-2026-113074: Use after free in Media * CVE-2026-113130: Use after free in Actor * CVE-2026-113294: Improper input validation in Loader * CVE-2026-112996: Memory corruption in Loader * CVE-2026-113122: Memory corruption in Loader * CVE-2026-113227: Use after free in Editing * CVE-2026-113286: Memory corruption in Google Lens * CVE-2026-113083: Memory corruption in Actor * CVE-2026-113088: Memory corruption in Mobile * CVE-2026-113013: Memory corruption in DevTools * CVE-2026-113125: Memory corruption in DevTools * CVE-2026-113039: Use after free in Bookmarks * CVE-2026-113274: Use after free in ReadingMode - add back minimal printing of ccache stats, without config - Chromium 156.0.8078.12 (beta released 2026-10-07) - Remove ccache configuration and stat printing - Chromium 155.0.8059.84 (boo#1285733): * CVE-2026-110922: Use after free in Prerender * CVE-2026-110913: Memory corruption in DOM * CVE-2026-110919: Use after free in V8 * CVE-2026-110918: Memory corruption in Core * CVE-2026-110917: Memory corruption in SVG * CVE-2026-110921: Use after free in V8 * CVE-2026-110920: Memory corruption in V8 * CVE-2026-110916: Improper input validation in Desktop * CVE-2026-110915: Use after free in Compositing * CVE-2026-110914: Memory corruption in Workers - Chromium 155.0.8059.79 (boo#1285401): * CVE-2026-110152: Buffer overflow in ANGLE * CVE-2026-110149: Use after free in Browser * CVE-2026-110136: Use after free in PDF * CVE-2026-110161: Use after free in Network * CVE-2026-110165: Use after free in Core * CVE-2026-110148: Use after free in SVG * CVE-2026-110151: Use after free in Media * CVE-2026-110162: Use after free in Desktop * CVE-2026-110170: Use after free in Bindings * CVE-2026-110160: Missing authorization in ReadingMode * CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk * CVE-2026-110146: Information leak in Passwords * CVE-2026-110150: Privilege elevation in Installer * CVE-2026-110156: Incorrect reference resolution in Extensions * CVE-2026-110137: Use after free in WebRTC * CVE-2026-110140: Type confusion in V8 * CVE-2026-110158: Use after free in Passwords * CVE-2026-110145: Use after free in Passwords * CVE-2026-110159: Incorrect authorization in Updater * CVE-2026-110144: Incorrect authorization in Mojo * CVE-2026-110153: Use after free in Media * CVE-2026-110166: Buffer overflow in Animation * CVE-2026-110169: Use after free in V8 * CVE-2026-110168: Use after free in V8 * CVE-2026-110139: Use after free in Media * CVE-2026-110172: Use after free in Media * CVE-2026-110164: Use after free in DOM * CVE-2026-110163: Use after free in DOM * CVE-2026-110141: Observable discrepancy in Media * CVE-2026-110138: Use after free in ShapeDetection * CVE-2026-110157: Use after free in SVG * CVE-2026-110147: Use after free in PDF * CVE-2026-110154: Use after free in Canvas * CVE-2026-110155: Buffer overflow in PDFium * CVE-2026-110167: Use after free in Media * CVE-2026-110171: Use after free in Media * CVE-2026-110142: Use after free in FileSystem - Chromium 155 promoted to stable - 155.0.8059.39 (boo#1284354): * CVE-2026-106382: Use after free in Chromecast * CVE-2026-106197: Use after free in Browser * CVE-2026-106358: Use after free in Navigation * CVE-2026-106347: Use after free in Track * CVE-2026-106245: Uninitialized resource in ANGLE * CVE-2026-106327: Incorrect authorization in Core * CVE-2026-106366: Incomplete cleanup in CustomTabs * CVE-2026-106258: Uninitialized resource in ANGLE * CVE-2026-106376: Uninitialized resource in ANGLE * CVE-2026-106308: Incorrect reference resolution in Autofill * CVE-2026-106215: Uninitialized resource in ANGLE * CVE-2026-106369: Missing authorization in Translate * CVE-2026-106293: Type confusion in ANGLE * CVE-2026-106377: Race condition in Fonts * CVE-2026-106412: Race condition in Core * CVE-2026-106243: Incomplete cleanup in Proxy Auth * CVE-2026-106214: Information leak in Proxy * CVE-2026-106364: Incorrect authorization in Omnibox * CVE-2026-106239: Integer overflow in WebGL * CVE-2026-106426: Race condition in Fonts * CVE-2026-106419: Use after free in ANGLE * CVE-2026-106396: Improper input validation in Omnibox * CVE-2026-106323: Missing authorization in Chrome for iOS * CVE-2026-106231: Uninitialized resource in Dawn * CVE-2026-106202: Uninitialized resource in ANGLE * CVE-2026-106273: Uninitialized resource in Video * CVE-2026-106203: Incomplete cleanup in Autofill * CVE-2026-106332: Integer overflow in Compositing * CVE-2026-106281: Use after free in Tint * CVE-2026-106298: Use after free in Chrome Tabs * CVE-2026-106193: Use after free in Parser * CVE-2026-106255: Race condition in V8 * CVE-2026-106393: Use after free in Storage * CVE-2026-106227: Use after free in Core * CVE-2026-106379: Uninitialized resource in Skia * CVE-2026-106211: Use after free in TabStrip * CVE-2026-106329: Incorrect authorization in FileSystem * CVE-2026-106248: Use after free in Bindings * CVE-2026-106235: Use after free in WebAudio * CVE-2026-106257: Use after free in HTML * CVE-2026-106268: Use after free in WebRTC * CVE-2026-106278: Use after free in Select * CVE-2026-106233: Use after free in Metrics * CVE-2026-106318: Use after free in Media * CVE-2026-106411: Use after free in Parser * CVE-2026-106423: Use after free in Media * CVE-2026-106346: Improper state validation in DevTools * CVE-2026-106190: Use after free in Media * CVE-2026-106357: Use after free in WebRTC * CVE-2026-106240: Type confusion in V8 * CVE-2026-106184: Uninitialized resource in Media * CVE-2026-106383: Use after free in Media * CVE-2026-106349: Use after free in V8 * CVE-2026-106421: Use after free in PDF * CVE-2026-106204: Use after free in PDF * CVE-2026-106200: Use after free in Track * CVE-2026-106265: UI misrepresentation in File * CVE-2026-106238: Race condition in Fonts * CVE-2026-106324: Incorrect authorization in WebAppInstalls * CVE-2026-106420: Incorrect calculation in API * CVE-2026-106222: Incorrect authorization in Sync * CVE-2026-106208: Missing authorization in API * CVE-2026-106286: Confused deputy in Omnibox * CVE-2026-106181: Incorrect reference resolution in DevTools * CVE-2026-106315: Use after free in Modularization * CVE-2026-106274: Incorrect reference resolution in Browser * CVE-2026-106365: Missing authorization in Animation * CVE-2026-106267: Missing authorization in Network * CVE-2026-106194: Missing authorization in WebAppInstalls * CVE-2026-106313: Incorrect authorization in Browser * CVE-2026-106283: Use after free in Streaming * CVE-2026-106291: Use after free in GarbageCollection * CVE-2026-106300: Race condition in CacheStorage * CVE-2026-106314: Incorrect authorization in Bluetooth * CVE-2026-106223: Uninitialized resource in GPU * CVE-2026-106242: Information leak in Omnibox * CVE-2026-106241: Incorrect authorization in Search * CVE-2026-106381: Incorrect authorization in Passwords * CVE-2026-106217: Missing authorization in Google Lens * CVE-2026-106425: Missing authorization in BrowserTag * CVE-2026-106225: Missing authorization in Autofill * CVE-2026-106363: Missing authorization in FullScreen * CVE-2026-106266: Confused deputy in Contextual Tasks * CVE-2026-106189: Code injection in ReaderMode * CVE-2026-106335: Use after free in Media * CVE-2026-106415: Information leak in Enterprise * CVE-2026-106224: Missing authorization in Google Lens * CVE-2026-106185: Improper input validation in Viz * CVE-2026-106244: Incorrect authorization in Permissions * CVE-2026-106407: Incorrect authorization in GetUserMedia * CVE-2026-106389: Incorrect authorization in USB * CVE-2026-106397: Incorrect authorization in Mobile * CVE-2026-106196: Missing authorization in Navigation * CVE-2026-106414: Improper input validation in Mobile * CVE-2026-106408: Protection mechanism failure in Mobile * CVE-2026-106261: Uninitialized resource in Video * CVE-2026-106406: Missing authorization in Mobile * CVE-2026-106290: Uninitialized resource in GPU * CVE-2026-106378: Privilege elevation in Sandbox * CVE-2026-106198: Missing authorization in FileSystem * CVE-2026-106326: Confused deputy in UI * CVE-2026-106354: Improper resource exposure in Extensions * CVE-2026-106342: Information leak in Autofill * CVE-2026-106424: Information leak in Audio * CVE-2026-106253: Incorrect authorization in Extensions * CVE-2026-106279: Incorrect reference resolution in Passwords * CVE-2026-106361: Incorrect provision of specified functionality in Mobile * CVE-2026-106402: Incorrect authorization in Extensions * CVE-2026-106311: Clickjacking in PermissionElement * CVE-2026-106246: Incorrect authorization in Browser * CVE-2026-106302: UI misrepresentation in PermissionElement * CVE-2026-106416: Code injection in Extensions * CVE-2026-106182: UI misrepresentation in Paint * CVE-2026-106282: UI misrepresentation in WebOTP * CVE-2026-106392: Information leak in WebAudio * CVE-2026-106188: Confused deputy in SignIn * CVE-2026-106370: Uninitialized resource in GPU * CVE-2026-106356: Clickjacking in EVP * CVE-2026-106405: Race condition in CustomTabs * CVE-2026-106322: Open redirect in AppManifest * CVE-2026-106280: Incorrect authorization in PermissionElement * CVE-2026-106206: Improper input validation in Mobile * CVE-2026-106180: Observable discrepancy in Animation * CVE-2026-106303: Observable discrepancy in Autofill AI * CVE-2026-106201: Race condition in V8 * CVE-2026-106333: Incorrect authorization in Input * CVE-2026-106228: Confused deputy in Google Lens * CVE-2026-106289: Missing authorization in FedCM * CVE-2026-106277: Information leak in Animation * CVE-2026-106410: Missing authorization in Permissions * CVE-2026-106284: Out of bounds read in Printing * CVE-2026-106209: UI misrepresentation in Mobile * CVE-2026-106216: Cross-site request forgery in ReadingList * CVE-2026-106328: Incorrect authorization in PDF * CVE-2026-106387: Missing authorization in Mobile * CVE-2026-106400: Clickjacking in Messages * CVE-2026-106205: Missing authorization in Passwords * CVE-2026-106213: Race condition in WebAudio * CVE-2026-106230: Incorrect reference resolution in Offline * CVE-2026-106367: Missing authorization in Mobile * CVE-2026-106226: Improper input validation in Compositing * CVE-2026-106229: UI misrepresentation in FileSystem * CVE-2026-106232: UI misrepresentation in Browser * CVE-2026-106391: Incorrect authorization in WebShare * CVE-2026-106336: Observable discrepancy in Paint * CVE-2026-106403: Incorrect authorization in Accessibility * CVE-2026-106373: Use after free in Fonts * CVE-2026-106301: Confused deputy in Contextual Tasks * CVE-2026-106292: Buffer overflow in Fonts * CVE-2026-106262: Incomplete cleanup in GetUserMedia * CVE-2026-106360: Information leak in Payments * CVE-2026-106375: Incomplete cleanup in Dawn * CVE-2026-106348: Information leak in Animation * CVE-2026-106307: Incorrect authorization in Network * CVE-2026-106212: Incorrect authorization in Autofill * CVE-2026-106398: Incorrect authorization in Media * CVE-2026-106388: Missing authorization in DataTransfer * CVE-2026-106271: Missing authorization in Workers * CVE-2026-106395: Uninitialized resource in Dawn * CVE-2026-106304: Out of bounds read in ANGLE * CVE-2026-106401: Out of bounds write in Media * CVE-2026-106330: Information leak in Paint * CVE-2026-106295: Incorrect authorization in Unbounded Element * CVE-2026-106352: Incorrect authorization in WebProtect * CVE-2026-106337: UI misrepresentation in UI * CVE-2026-106263: Improper input validation in SignIn * CVE-2026-106404: Incorrect authorization in FontAccess * CVE-2026-106183: Missing authorization in Chromoting * CVE-2026-106386: Uninitialized resource in WebAudio * CVE-2026-106351: Observable discrepancy in Safebrowsing * CVE-2026-106384: Missing authorization in SiteIsolation * CVE-2026-106207: Race condition in V8 * CVE-2026-106321: Information leak in Editing * CVE-2026-106210: Observable discrepancy in Scroll * CVE-2026-106254: Information leak in Mobile * CVE-2026-106372: Incorrect authorization in UI * CVE-2026-106341: Type confusion in V8 * CVE-2026-106409: Incorrect reference resolution in WebAppInstalls * CVE-2026-106340: Missing authorization in CredentialProvider * CVE-2026-106276: UI misrepresentation in Payments * CVE-2026-106338: UI misrepresentation in PictureInPicture * CVE-2026-106317: UI misrepresentation in FullScreen * CVE-2026-106344: Missing authorization in Permissions * CVE-2026-106359: Confused deputy in DeviceBoundSessionCredentials * CVE-2026-106353: Improper input validation in Mobile * CVE-2026-106312: Missing authorization in SignIn * CVE-2026-106191: Missing authorization in Actor * CVE-2026-106250: Missing authorization in Actor * CVE-2026-106309: Incorrect authorization in Selection * CVE-2026-106187: Missing authorization in Permissions * CVE-2026-106394: Incomplete cleanup in Glic * CVE-2026-106306: Incorrect authorization in DevTools * CVE-2026-106427: Confused deputy in Mobile * CVE-2026-106252: Incorrect comparison in Fonts * CVE-2026-106287: Information loss in CORS * CVE-2026-106297: Incorrect authorization in Scheduling * CVE-2026-106260: Incorrect authorization in DevTools * CVE-2026-106362: Missing authorization in DevTools * CVE-2026-106275: Uninitialized resource in GPU * CVE-2026-106199: Incorrect authorization in Actor * CVE-2026-106299: Improper input validation in WebAudio * CVE-2026-106422: Incorrect authorization in API * CVE-2026-106186: Uncontrolled search path element in CredentialProvider * CVE-2026-106247: Buffer overflow in ANGLE * CVE-2026-106192: Information leak in Mobile * CVE-2026-106399: Out of bounds read in Skia * CVE-2026-106264: Missing authorization in Web Authentication (Passkeys & Security Keys) * CVE-2026-106285: UI misrepresentation in WebAppInstalls * CVE-2026-106220: Information leak in Passwords * CVE-2026-106417: Integer overflow in Media * CVE-2026-106221: Confused deputy in WebAPKs * CVE-2026-106259: Incorrect authorization in PermissionElement * CVE-2026-106296: Improper privilege management in UI * CVE-2026-106249: Incorrect authorization in Autofill * CVE-2026-106374: Type confusion in V8 * CVE-2026-106380: UI misrepresentation in UI * CVE-2026-106179: UI misrepresentation in WebAppInstalls * CVE-2026-106368: UI misrepresentation in UI * CVE-2026-106237: Information leak in Permissions * CVE-2026-106331: Improper input validation in Extensions * CVE-2026-106270: Incorrect authorization in WebAppInstalls * CVE-2026-106350: Incorrect authorization in Browser * CVE-2026-106288: Missing authorization in Browser * CVE-2026-106305: UI misrepresentation in Mobile * CVE-2026-106418: Missing authorization in Network * CVE-2026-106343: Improper state validation in Autofill AI * CVE-2026-106371: Incorrect authorization in Transactions Platform * CVE-2026-106256: Information leak in Passwords * CVE-2026-106413: Race condition in Browser * CVE-2026-106339: Use of released resource in Core * CVE-2026-106320: Use of released resource in UI * CVE-2026-106195: Incorrect authorization in Chromoting * CVE-2026-106316: UI misrepresentation in Chromoting * CVE-2026-106385: Race condition in Chromoting * CVE-2026-106325: Incorrect reference resolution in Core * CVE-2026-106390: Incorrect provision of specified functionality in SanitizerAPI * CVE-2026-106294: Incomplete cleanup in Chromoting * CVE-2026-106334: Information leak in Payments * CVE-2026-106236: UI misrepresentation in Chromoting * CVE-2026-106251: UI misrepresentation in Chromoting * CVE-2026-106310: Use of released resource in FontAccess * CVE-2026-106345: Use of released resource in Session * CVE-2026-106272: UI misrepresentation in Chromoting * CVE-2026-106355: Missing authorization in Media * CVE-2026-106234: Use after free in Network * CVE-2026-106269: Use after free in CSS - Chromium 155.0.8059.12 (beta release 2026-09-23) - Chromium 154.0.8037.97 (boo#1284015): * CVE-2026-103628: Out of bounds write in WebGL * CVE-2026-103626: Incorrect authorization in FileSystem * CVE-2026-103621: Integer overflow in Compositing * CVE-2026-103630: Use after free in FedCM * CVE-2026-103625: Type confusion in V8 * CVE-2026-103624: Use after free in Contextual Tasks * CVE-2026-103629: Integer overflow in Skia * CVE-2026-103622: Use after free in SVG * CVE-2026-103623: Use after free in MediaStream * CVE-2026-103631: Buffer overflow in WebRTC * CVE-2026-103627: Information leak in SVG - Chromium 154.0.8037.92 (boo#1283262): * CVE-2026-102331: Buffer overflow in ANGLE * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102299: Type confusion in V8 * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102323: Type confusion in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102326: Type confusion in V8 * CVE-2026-102316: Use after free in Views * CVE-2026-102304: Use after free in Passwords * CVE-2026-102328: Type confusion in V8 * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102308: Use after free in Views * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102321: Type confusion in V8 * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102305: UI misrepresentation in SignIn Changes in gn: - Update to version 0.20260928: * gn edit: keep build files alive for warnings * Add instructions for agent to build GN and run code / tests * Write phony rules for harddeps * Support conditional sources for gn check. * Don't write order-only deps reachable through direct deps * When suggestions have a known includer target, don't complain that they don't resolve to a single target. * rust_project_writer: Support aliased_deps in rust-project.json * Header check: validate includes before building diagnostics * Header check: defer unrestricted dependency walks * Header check: batch reachability and file checking tasks * Header check: select files from the existing file map * Add an allowlist for allow_circular_includes_from. * [gn] Use std::unordered_map for waiting_map_ * [gn] Shard StringAtomSet to avoid lock contention * [gn] Use DCHECK in Target::info() * [gn] Make ResolvedTargetData stateless * [recipe] Enable THP for jemalloc build in GN recipe * Header check: avoid interning paths during include lookup * Improve heuristic to disambiguate recommended dependency to add. * No longer automatically add files to public. * Deduplicate deps/public_deps and sources/public in gn edit * Preserve toolchain when generating suggestions in gn check chromedriver-157.0.8103.38-bp161.1.1.x86_64.rpm chromium-157.0.8103.38-bp161.1.1.nosrc.rpm chromium-157.0.8103.38-bp161.1.1.x86_64.rpm gn-0.20260928-bp161.1.1.src.rpm gn-0.20260928-bp161.1.1.x86_64.rpm gn-debuginfo-0.20260928-bp161.1.1.x86_64.rpm gn-debugsource-0.20260928-bp161.1.1.x86_64.rpm gn-0.20260928-bp161.1.1.s390x.rpm gn-debuginfo-0.20260928-bp161.1.1.s390x.rpm gn-debugsource-0.20260928-bp161.1.1.s390x.rpm chromedriver-157.0.8103.38-bp161.1.1.ppc64le.rpm chromium-157.0.8103.38-bp161.1.1.ppc64le.rpm gn-0.20260928-bp161.1.1.ppc64le.rpm gn-debuginfo-0.20260928-bp161.1.1.ppc64le.rpm gn-debugsource-0.20260928-bp161.1.1.ppc64le.rpm chromedriver-157.0.8103.38-bp161.1.1.aarch64.rpm chromium-157.0.8103.38-bp161.1.1.aarch64.rpm gn-0.20260928-bp161.1.1.aarch64.rpm gn-debuginfo-0.20260928-bp161.1.1.aarch64.rpm gn-debugsource-0.20260928-bp161.1.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-4 Security update for scribus important openSUSE Backports SLE-16.1 This update for scribus fixes the following issues: Changes in scribus: - Update to 1.6.7 * Fixes CVE-2026-104061 / boo#1289047 * Fixes CVE-2026-104062 / boo#1289046 * Fixes CVE-2026-104063 / boo#1289045 * Fixes CVE-2026-104064 / boo#1289044 * Fixes CVE-2026-104065 / boo#1289043 * Fixes CVE-2026-104066 / boo#1289042 * Fixes CVE-2026-104067 / boo#1289041 * [Text Frames / Story Editor] Superscript text: the text outline is offset * [Import / Export] Property changes do not affect the text imported from .odt * [Canvas] Rendering of drop shadows is slow (Fahad) * [General] The application freezes when attempting to import 'custom shapes' * [Undo/Redo] Deleting a non existent mark causes crash * [General] Preview mode does not hide guides/margins when editing a master page * [General] The bleed area still shows in Preview mode in Master Page editing mode * [Typography] Text formatting (e.g. italic, bold) is not inherited when resuming typing * [General] Failure to build with poppler 26.07.0 * [Graphics / Image Frames] Crash with graphicsmagick exception * [General] Failure to build with poppler 26.06.0 * [General] Failure to build with poppler 26.05.0 * [Fonts] Font "Helsinki" causes crash - Fix failure to build with poppler 26.05.0 (boo#1265939) - Change scribus-doc sub-package to noarch. scribus-1.6.7-bp161.1.1.src.rpm scribus-1.6.7-bp161.1.1.x86_64.rpm scribus-debuginfo-1.6.7-bp161.1.1.x86_64.rpm scribus-doc-1.6.7-bp161.1.1.noarch.rpm scribus-1.6.7-bp161.1.1.s390x.rpm scribus-debuginfo-1.6.7-bp161.1.1.s390x.rpm scribus-1.6.7-bp161.1.1.ppc64le.rpm scribus-debuginfo-1.6.7-bp161.1.1.ppc64le.rpm scribus-1.6.7-bp161.1.1.aarch64.rpm scribus-debuginfo-1.6.7-bp161.1.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-5 Security update for kdeconnect-kde moderate openSUSE Backports SLE-16.1 This update for kdeconnect-kde fixes the following issues: Changes in kdeconnect-kde: - CVE-2026-111426: Malformed packets can flood D-Bus and freeze the desktop (boo#1289334) kdeconnect-kde-26.04.1-bp161.2.1.src.rpm kdeconnect-kde-26.04.1-bp161.2.1.x86_64.rpm kdeconnect-kde-debuginfo-26.04.1-bp161.2.1.x86_64.rpm kdeconnect-kde-debugsource-26.04.1-bp161.2.1.x86_64.rpm kdeconnect-kde-lang-26.04.1-bp161.2.1.noarch.rpm kdeconnect-kde-26.04.1-bp161.2.1.s390x.rpm kdeconnect-kde-debuginfo-26.04.1-bp161.2.1.s390x.rpm kdeconnect-kde-debugsource-26.04.1-bp161.2.1.s390x.rpm kdeconnect-kde-26.04.1-bp161.2.1.ppc64le.rpm kdeconnect-kde-debuginfo-26.04.1-bp161.2.1.ppc64le.rpm kdeconnect-kde-debugsource-26.04.1-bp161.2.1.ppc64le.rpm kdeconnect-kde-26.04.1-bp161.2.1.aarch64.rpm kdeconnect-kde-debuginfo-26.04.1-bp161.2.1.aarch64.rpm kdeconnect-kde-debugsource-26.04.1-bp161.2.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-6 Recommended update for perl-HTTP-Headers-Fast moderate openSUSE Backports SLE-16.1 This update for perl-HTTP-Headers-Fast fixes the following issues: Changes in perl-HTTP-Headers-Fast: - Normalize CPAN version See https://github.com/openSUSE/cpanspec/issues/47 for details perl-HTTP-Headers-Fast-0.220.0-bp161.1.1.noarch.rpm perl-HTTP-Headers-Fast-0.220.0-bp161.1.1.src.rpm openSUSE-Leap-16.1-packagehub-7 Security update for gosec moderate openSUSE Backports SLE-16.1 This update for gosec fixes the following issues: Changes in gosec: - Update to version 2.30.0 (bsc#1287590, CVE-2026-97032): * fix(g602): recognize equality comparison in minimumLenForBranch (#1796) * fix(G112): honor read timeouts assigned through a struct field (#1798) * fix(G112): report read timeouts explicitly set to zero (#1797) * feat(G706): extend log/slog method coverage (#1795) * fix(autofix): read the first text block of a Claude response (#1794) * fix(autofix): give every AI request its own timeout (#1793) * fix(resolve): treat constants from other packages as resolved (#1792) * fix(autofix): return an error when a Gemini candidate has no content (#1791) * Update to go version 1.27.3 and 1.26.10 (#1790) * fix(autofix): default Gemini model to gemini-3.1-pro-preview (#1788) * fix(G102): resolve concatenated and constant listen addresses (#1787) * fix: default -concurrency to GOMAXPROCS so container CPU limits apply (#1786) * fix(g602): track statically known lengths for append results in slice bounds check (#1773) * feat(rules): add G125 to detect unescaped url.JoinPath elements (#1777) * fix: load absolute file paths so nested modules are analysed from the parent directory (#1779) * fix(G118): treat a cancel sent on a channel as handed off (#1782) * fix(G112): honor read timeouts assigned after the http.Server literal (#1781) * fix(G303): resolve constant temp file paths (#1784) * fix(deps): update all dependencies (#1783) * fix(G203): treat constant template arguments as safe (#1770) * fix(G402): check TLS settings assigned through a *tls.Config (#1769) * fix(deps): update all dependencies (#1775) * Update to go version 1.27.2 and 1.26.9 (#1772) * Keep SARIF driver rules sorted and resolve rule indexes at the end (#1767) * fix(G602): track append() results for slice bounds checking (#1754) * fix(deps): update all dependencies (#1768) * fix(G602): trust len(nilSlice) == N guards, matching make()-backed slices (#1752) * fix(G407): treat an array IV/nonce as a zeroed buffer (#1763) * fix(fileperms): resolve constant file and directory permissions (#1766) * fix(G102): detect binding to the IPv6 unspecified address (#1760) * fix(G407): stop the nonce source walk on cycles (#1761) * fix(G407): do not count AEAD.Seal as the read that fills its own nonce (#1762) * fix(deps): update all dependencies (#1764) * fix(G602): validate inequality len guards (#1757) * fix(G121): track request captured by closures (#1759) * fix(deps): update all dependencies (#1756) * fix: make nosec suppression independent of comment order (#1741) * fix(G403): resolve constant RSA key sizes (#1751) * fix(G602): validate subslice bounds under equality guards (#1749) * fix(G124): resolve negated constant cookie flags (#1748) * fix(G602): report constant index equal to the length asserted by an equality guard (#1746) * Skip taint call graphs when no sinks match (#1745) * Fix brittle test for html writer (#1744) * fix(G404): ignore non-cryptographic Shuffle calls (#1742) * fix(deps): update all dependencies (#1743) * fix(taint): remove Result.Source field that is never populated (#1739) * Update all dependencies (#1737) * Update go version 1.27.1 and 1.26.8 and phased out 1.25 (#1738) * fix(report): correct Babel SRI hash (#1736) * fix(taint): make wide caller traversal deterministic (#1733) * fix(G702): skip the context argument of exec.CommandContext (#1730) * feat(taint): name the sink in taint finding messages (#1731) * Update all dependencies (#1734) * Update action to gosec version 2.29.0 (#1728) - Update to version 2.29.0: * analyzers/G703: stop treating Clean/Abs/PathEscape as path-traversal sanitizers (#1723) * fix(junit): properly escape XML in failure text (#1718) * fix(csv): capture and report write errors on flush (#1716) * fix(report): root path matching in formatters (#1719) * fix(config): handle nosec tags with leading hash (#1717) * Update all dependencies (#1720) * Add support for go version 1.27.0 and update to version 1.25.14 and 1… (#1726) * Update all dependencies (#1713) * Update all dependencies (#1710) * fix(G202): don't flag strings.Builder built from constants (#1707) * ci: allow fork PR checkout in barry-ai-security-review job (#1708) * Update all dependencies (#1709) * Downgrade min Go version (#1706) * Udpate action to use gosec v2.28.0 (#1705) gosec-2.30.0-bp161.1.1.src.rpm gosec-2.30.0-bp161.1.1.x86_64.rpm gosec-2.30.0-bp161.1.1.s390x.rpm gosec-debuginfo-2.30.0-bp161.1.1.s390x.rpm gosec-2.30.0-bp161.1.1.ppc64le.rpm gosec-debuginfo-2.30.0-bp161.1.1.ppc64le.rpm gosec-2.30.0-bp161.1.1.aarch64.rpm gosec-debuginfo-2.30.0-bp161.1.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-8 Recommended update for helmfile moderate openSUSE Backports SLE-16.1 This update for helmfile fixes the following issues: Changes in helmfile: - Update to version 1.8.2: * fix: support escaped commas in --state-values-set by @ban11111 in #2813 * add trackLogsUntilReady flag by @pznamensky in #2814 * feat: dir= selector for path-based release filtering and traversal skip by @dschmidt in #2609 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0 by @dependabot[bot] in #2818 * build(deps): bump github.com/sashabaranov/go-openai from 1.42.1 to 1.43.0 by @dependabot[bot] in #2819 * build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.46.0 to 1.47.0 by @dependabot[bot] in #2815 * build(deps): bump gitpython from 3.1.59 to 3.1.62 in /docs by @dependabot[bot] in #2820 * build(deps): bump golang.org/x/sync from 0.23.0 to 0.24.0 by @dependabot[bot] in #2827 * add trackLogsInterval option by @pznamensky in #2825 * build(deps): bump github.com/hashicorp/go-getter/v2 from 2.2.4 to 2.2.5 by @dependabot[bot] in #2821 * build(deps): bump go.opentelemetry.io/proto/otlp from 1.11.0 to 1.11.1 by @dependabot[bot] in #2822 * build(deps): bump go.opentelemetry.io/contrib/exporters/autoexport from 0.71.0 to 0.72.0 by @dependabot[bot] in #2823 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.0 to 1.114.3 by @dependabot[bot] in #2828 * build(deps): bump github.com/mattn/go-runewidth from 0.0.30 to 0.0.31 by @dependabot[bot] in #2829 * build(deps): bump golang.org/x/term from 0.46.0 to 0.47.0 by @dependabot[bot] in #2830 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.33.6 to 1.33.9 by @dependabot[bot] in #2831 * build(deps): bump github.com/gookit/color from 1.6.1 to 1.6.2 by @dependabot[bot] in #2833 * fix: skip recreatePods on Helm 4, which removed --recreate-pods by @Cayan in #2832 * chore: bump Helm to v3.22.1 and v4.3.1 by @yxxhero in #2834 * fix: propagate --oci-plain-http to chartify for all chart-preparing commands by @yxxhero in #2826 - Update to version 1.8.1: * feat: add HELMFILE_DISABLE_VALS env var to skip vals processing by @jimmyR in #2471 * build(deps): bump github.com/mattn/go-runewidth from 0.0.29 to 0.0.30 by @dependabot[bot] in #2796 * build(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 by @dependabot[bot] in #2795 * build(deps): bump github.com/sashabaranov/go-openai from 1.42.0 to 1.42.1 by @dependabot[bot] in #2792 * fix: cancel kubedog-tracked helm subprocesses on SIGINT/SIGTERM by @vulragrag-star in #2791 * build(deps): bump github.com/hashicorp/go-getter/v2 from 2.2.3 to 2.2.4 by @dependabot[bot] in #2793 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.33.3 to 1.33.4 by @dependabot[bot] in #2794 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.111.0 to 1.113.1 by @dependabot[bot] in #2797 * build: update Go to 1.27.1 and modernize the codebase by @yxxhero in #2798 * build(deps): bump github.com/helmfile/chartify from 0.28.2 to 0.29.0 by @dependabot[bot] in #2803 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.33.4 to 1.33.5 by @dependabot[bot] in #2801 * build(deps): bump github.com/hashicorp/hcl/v2 from 2.24.0 to 2.25.0 by @dependabot[bot] in #2802 * feat: add per-release continue-on-error support by @Tsukoyachi in #2804 * fix: remove partially extracted chart when helm pull fails by @schmidtjohannes in #2805 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.1 to 1.113.2 by @dependabot[bot] in #2808 * build(deps): bump github.com/helmfile/vals from 0.46.1 to 0.47.0 by @dependabot[bot] in #2806 * ci: publish a signed packslip with each release by @jdx in #2809 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.2 to 1.113.4 by @dependabot[bot] in #2811 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.33.5 to 1.33.6 by @dependabot[bot] in #2810 * add --track-logs-interval flag by @pznamensky in #2807 * fix: drop leading dot from release condition error message by @Cayan in #2812 - Update to version 1.8.0: * build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in #2749 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.36 to 1.32.37 by @dependabot[bot] in #2750 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.1 to 1.107.2 by @dependabot[bot] in #2751 * build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #2752 * docs: fix broken star history chart by @Dessalines39394 in #2742 * build(deps): bump github.com/mattn/go-runewidth from 0.0.27 to 0.0.28 by @dependabot[bot] in #2753 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.32.38 by @dependabot[bot] in #2755 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.2 to 1.107.3 by @dependabot[bot] in #2756 * build(deps): bump helm-diff to v3.15.12 by @yxxhero in #2759 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.38 to 1.33.1 by @dependabot[bot] in #2762 * build(deps): bump github.com/gofrs/flock from 0.13.0 to 0.13.1 by @dependabot[bot] in #2761 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.3 to 1.109.1 by @dependabot[bot] in #2760 * build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @dependabot[bot] in #2763 * feat: allow helmfile to continue on failed releases by @ceriath in #2616 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.109.1 to 1.110.0 by @dependabot[bot] in #2764 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.33.1 to 1.33.2 by @dependabot[bot] in #2765 * fix: resolve OCI version constraints before deriving the shared chart cache path by @samifruit514 in #2768 * feat: opt-in OpenTelemetry tracing and metrics (experimental) by @yxxhero in #2769 * build(deps): bump go.opentelemetry.io/otel from 1.44.0 to 1.46.0 by @dependabot[bot] in #2778 * build(deps): bump github.com/mattn/go-runewidth from 0.0.28 to 0.0.29 by @dependabot[bot] in #2776 * build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.44.0 to 1.46.0 by @dependabot[bot] in #2777 * build(deps): bump go.opentelemetry.io/proto/otlp from 1.10.0 to 1.11.0 by @dependabot[bot] in #2774 * build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.46.0 by @dependabot[bot] in #2775 * build(deps): bump gitpython from 3.1.58 to 3.1.59 in /docs by @dependabot[bot] in #2785 * build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #2784 * build(deps): bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 by @dependabot[bot] in #2783 * build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 by @dependabot[bot] in #2782 * build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.33.2 to 1.33.3 by @dependabot[bot] in #2781 * build(deps): bump go.opentelemetry.io/contrib/exporters/autoexport from 0.67.0 to 0.71.0 by @dependabot[bot] in #2780 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.110.0 to 1.111.0 by @dependabot[bot] in #2779 * fix(list): avoid deadlock in helmfile list with more than 100 states by @max06 in #2773 * chore: bump Helm to v3.22.0 and v4.3.0 by @yxxhero in #2786 * build(deps): bump helm-diff to v3.15.13 by @yxxhero in #2788 * feat(remote): support wildcards in remote values/secrets file selectors by @hoppla20 in #2787 * build(deps): bump helmfile/vals from v0.46.0 to v0.46.1 by @yxxhero in #2789 helmfile-1.8.2-bp161.1.1.src.rpm helmfile-1.8.2-bp161.1.1.x86_64.rpm helmfile-bash-completion-1.8.2-bp161.1.1.noarch.rpm helmfile-debuginfo-1.8.2-bp161.1.1.x86_64.rpm helmfile-fish-completion-1.8.2-bp161.1.1.noarch.rpm helmfile-zsh-completion-1.8.2-bp161.1.1.noarch.rpm helmfile-1.8.2-bp161.1.1.s390x.rpm helmfile-debuginfo-1.8.2-bp161.1.1.s390x.rpm helmfile-1.8.2-bp161.1.1.ppc64le.rpm helmfile-debuginfo-1.8.2-bp161.1.1.ppc64le.rpm helmfile-1.8.2-bp161.1.1.aarch64.rpm helmfile-debuginfo-1.8.2-bp161.1.1.aarch64.rpm openSUSE-Leap-16.1-packagehub-9 Security update for perl-Mozilla-CA important openSUSE Backports SLE-16.1 This update for perl-Mozilla-CA fixes the following issues: Changes in perl-Mozilla-CA: - Update Mozilla-CA-20240730-Redirect-to-ca-certificates-bundle.patch - updated to 20261020.0.0 (20261020) * 20261020 - Update from Mozilla repository to 2026-10-20 - Denylisted certificates: CVE-2026-113812 bsc#1287179 - emSign ECC Root CA - G3 sha256: 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b * 20260813 - Update from Mozilla repository to 2026-08-13 - Added certificates: - OISTE Server Root ECC G1 sha256: eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49 - OISTE Server Root RSA G1 sha256: 9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6 - SECOM TLS ECC Root CA 2024 sha256: 6ab2ab75f51cb4f4f0156203fbf6f646232f514be059f62833308b82b4d72db1 - SECOM TLS RSA Root CA 2024 sha256: 1435f225c5d252d7a21948cc3ce62aecfa88001e3dd72d1cc3555100eb372f93 - SwissSign RSA TLS Root CA 2022 - 1 sha256: 193144f431e0fddb740717d4de926a571133884b4360d30e272913cbe660ce41 - Telia EC TLS Root CA v3 sha256: 098e08a91dbbf77478b96cceb89b1413a5da37b7c862606a955deb07179f4326 - Telia RSA TLS Root CA v3 sha256: d13db1294c45ebc6fc86c6bbf69fa29bdfe692dff7c713c243c7a956c6a2284c - TrustAsia TLS ECC Root CA sha256: c0076b9ef0531fb1a656d67c4ebe97cd5dbaa41ef44598acc2489878c92d8711 - TrustAsia TLS RSA Root CA sha256: 06c08d7dafd876971eb1124fe67f847ec0c7a158d3ea53cbe940e2ea9791f4c3 - e-Szigno TLS Root CA 2023 sha256: b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4 - Removed certificates: - AffirmTrust Commercial sha256: 0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7 - AffirmTrust Networking sha256: 0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b - AffirmTrust Premium sha256: 70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a - AffirmTrust Premium ECC sha256: bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423 - Atos TrustedRoot 2011 sha256: f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474 - COMODO Certification Authority sha256: 0c2cd63df7806fa399ede809116b575bf87989f06518f9808c860503178baf66 - Certigna sha256: e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d - CommScope Public Trust ECC Root-01 sha256: 11437cda7bb45e41365f45b39a38986b0de00def348e0c7bb0873633800bc38b - CommScope Public Trust ECC Root-02 sha256: 2ffb7f813bbbb3c89ab4e8162d0f16d71509a830cc9d73c262e5140875d1ad4a - CommScope Public Trust RSA Root-01 sha256: 02bdf96e2a45dd9bf18fc7e1dbdf21a0379ba3c9c2610344cfd8d606fec1ed81 - CommScope Public Trust RSA Root-02 sha256: ffe943d793424b4f7c440c1c3d648d5363f34b82dc87aa7a9f118fc5dee101f1 - DigiCert Assured ID Root CA sha256: 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c - DigiCert Global Root CA sha256: 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161 - DigiCert High Assurance EV Root CA sha256: 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf - Entrust Root Certification Authority sha256: 73c176434f1bc6d5adf45b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c - Entrust Root Certification Authority - EC1 sha256: 02ed0eb28c14da45165c566791700d6451d7fb56f0b2ab1d3b8eb070e56edff5 - Entrust Root Certification Authority - G2 sha256: 43df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339 - FIRMAPROFESIONAL CA ROOT-A WEB sha256: bef256daf26e9c69bdec1602359798f3caf71821a03e018257c53c65617f3d4a - GLOBALTRUST 2020 sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a - GTS Root R2 sha256: 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8 - QuoVadis Root CA 2 sha256: 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86 - QuoVadis Root CA 3 sha256: 18f1fc7f205df8adddeb7fe007dd57e3af375a9c4d8d73546bf4f1fed1e18d35 - Secure Global CA sha256: 4200f5043ac8590ebb527d209ed1503029fbcbd41ca1b506ec27f15ade7dac69 - SecureSign Root CA12 sha256: 3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e - SecureTrust CA sha256: f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73 - SwissSign Gold CA - G2 sha256: 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95 - TeliaSonera Root CA v1 sha256: dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389 - Trustwave Global Certification Authority sha256: 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8 - Trustwave Global ECC P256 Certification Authority sha256: 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4 - Trustwave Global ECC P384 Certification Authority sha256: 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097 - certSIGN ROOT CA sha256: eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb - ePKI Root Certification Authority sha256: c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5 - updated to 20250602.0.0 (20250602) * 20250602 - Update from Mozilla repository to 2025-06-02 - Added certificates: - D-TRUST BR Root CA 2 2023 sha256: 0552e6f83fdf65e8fa9670e666df28a4e21340b510cbe52566f97c4fb94b2bd1 - D-TRUST EV Root CA 2 2023 sha256: 8e8221b2e7d4007836a1672f0dcc299c33bc07d316f132fa1a206d587150f1ce - Removed certificates: - Baltimore CyberTrust Root sha256: 16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb - Comodo AAA Services root sha256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 - Entrust.net Premium 2048 Secure Server CA sha256: 6dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb177 - GlobalSign Root CA sha256: ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99 - Go Daddy Class 2 CA sha256: c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4 - Starfield Class 2 CA sha256: 1465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658 - SwissSign Silver CA - G2 sha256: be6c4da2bbb9ba59b6f3939768374246c3c005993fa98f020d1dedbed48a81d5 - XRamp Global CA Root sha256: cecddc905099d8dadfc5b1d209b737cbe2c18cfb2c10c0ff0bcf0d3286fc1aa2 - updated to 20250202.0.0 (20250202) * 20250202 - Update from Mozilla repository to 2025-02-02 - Added certificates: - GLOBALTRUST 2020 sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a - Removed certificates: - Entrust Root Certification Authority - G4 sha256: db3517d1f6732a2d5ab97c533ec70779ee3270a62fb4ac4238372460e6f01e88 - SecureSign RootCA11 sha256: bf0feefb9e3a581ad5f9e9db7589985743d261085c4d314f6f5d7259aa421612 - Security Communication RootCA3 sha256: 24a55c2ab051442d0617766541239a4ad032d7c55175aa34ffde2fbc4f5c5294 - updated to 20240924.0.0 (20240924) * 20240924 - Update from Mozilla repository to 2024-09-24 - Added certificates: - SecureSign Root CA12 sha256: 3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e - SecureSign Root CA14 sha256: 4b009c1034494f9ab56bba3ba1d62731fc4d20d8955adcec10a925607261e338 - SecureSign Root CA15 sha256: e778f0f095fe843729cd1a0082179e5314a9c291442805e1fb1d8fb6b8886c3a - TWCA CYBER Root CA sha256: 3f63bb2814be174ec8b6439cf08d6d56f0b7c405883a5648a334424d6b3ec558 perl-Mozilla-CA-20261020.0.0-bp161.1.1.noarch.rpm perl-Mozilla-CA-20261020.0.0-bp161.1.1.src.rpm