Cloud-Init, Kernel, 389-DS-Base, and more updates for Oracle Linux

Oracle Linux 6329 Published 2025-05-15 07:46 by Philipp Esselbach

News

ELBA-2025-4486 Oracle Linux 9 cloud-init bug fix update

Oracle Linux Bug Fix Advisory ELBA-2025-4486

http://linux.oracle.com/errata/ELBA-2025-4486.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
cloud-init-23.4-19.0.2.el9_5.6.noarch.rpm

aarch64:
cloud-init-23.4-19.0.2.el9_5.6.noarch.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//cloud-init-23.4-19.0.2.el9_5.6.src.rpm

Description of changes:

[23.4-19.0.2.el9_5.6]
- Fixes regression in cloud-init-23.4-19.0.1 with module cc_write_files_deferred [Orabug: 36958039]
- NetworkManagerActivator brings up interface failed when using sysconfig renderer [RHEL-18981]
- Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168]
- Increase retry value and add timeout for OCI [Orabug: 35329883]
- Fix log file permission [Orabug: 35302969]
- Update detection logic for OL distros in config template [Orabug: 34845400]
- Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
- Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
- Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
- limit permissions [Orabug: 31352433]
- Changes to ignore all enslaved interfaces [Orabug: 30092148]
- Make Oracle datasource detect dracut based config files [Orabug: 29956753]
- add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
Resolves: Oracle-Bug:41660 (Bugzilla)
- added OL to list of known distros
Resolves: rhbz#1427280
Resolves: rhbz#1427280

ELSA-2025-20318 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2025-20318

http://linux.oracle.com/errata/ELSA-2025-20318.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-1.23.3.1.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-1.23.3.1.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-1.23.3.1.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-modules-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-1.23.3.1.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-1.23.3.1.el9uek.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-6.12.0-1.23.3.1.el9uek.src.rpm

Related CVEs:

CVE-2024-28956

Description of changes:

[6.12.0-1.23.3.1]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920680]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920680]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920680]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}

ELSA-2025-20320 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2025-20320

http://linux.oracle.com/errata/ELSA-2025-20320.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-308.179.6.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-308.179.6.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-308.179.6.el9uek.x86_64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-5.15.0-308.179.6.el9uek.src.rpm

Related CVEs:

CVE-2024-25742
CVE-2024-25743
CVE-2024-25744
CVE-2024-56583

Description of changes:

[5.15.0-308.179.6.el9uek]
- net: bridge: IP defragmentation failing for jumboframes (Venkat Venkatsubra) [Orabug: 37847171]
- uek-rpm: remove .el9 from shim version (Samasth Norway Ananda) [Orabug: 37834731]
- RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan) [Orabug: 37783021]
- net/mlx5e: Rely on reqid in IPsec tunnel mode (Leon Romanovsky) [Orabug: 37710815]
- net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Leon Romanovsky) [Orabug: 37710815]
- net/mlx5: Clear port select structure when fail to create (Mark Zhang) [Orabug: 37710815]
- net/mlx5: SF, Fix add port error handling (Chris Mi) [Orabug: 37710815]
- net/mlx5: Fix variable not being completed when function returns (Chenguang Zhao) [Orabug: 37710815]
- net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only (Jianbo Liu) [Orabug: 37710815]
- net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Jianbo Liu) [Orabug: 37710815]
- net/mlx5e: macsec: Maintain TX SA from encoding_sa (Dragos Tatulea) [Orabug: 37710815]
- net/mlx5e: Remove workaround to avoid syndrome for internal port (Jianbo Liu) [Orabug: 37710815]
- net/mlx5e: SD, Use correct mdev to build channel param (Tariq Toukan) [Orabug: 37710815]
- mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4 (Ido Schimmel) [Orabug: 37710815]
- net/mlx5e: clear xdp features on non-uplink representors (William Tu) [Orabug: 37710815]
- net/mlx5: Fix msix vectors to respect platform limit (Parav Pandit) [Orabug: 37710815]
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (Ido Schimmel) [Orabug: 37710815]
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header (Amit Cohen) [Orabug: 37710815]
- net/mlx5e: Don't call cleanup on profile rollback failure (Cosmin Ratiu) [Orabug: 37710815]
- net/mlx5: Fix command bitmask initialization (Shay Drory) [Orabug: 37710815]
- net/mlx5: Check for invalid vector index on EQ creation (Maher Sanalla) [Orabug: 37710815]
- mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst (Christophe JAILLET) [Orabug: 37710815]
- net: Fix netns for ip_tunnel_init_flow() (Xiao Liang) [Orabug: 37710815]
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit() (Ido Schimmel) [Orabug: 37710815]
- ip_tunnel: annotate data-races around t->parms.link (Eric Dumazet) [Orabug: 37710815]
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit() (Ido Schimmel) [Orabug: 37710815]
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev() (Ido Schimmel) [Orabug: 37710815]
- net/mlx5e: SHAMPO, Fix overflow of hd_per_wq (Dragos Tatulea) [Orabug: 37710815]
- net/mlx5e: SHAMPO, Increase timeout to improve latency (Dragos Tatulea) [Orabug: 37710815]
- net/mlx5: Verify support for scheduling element and TSAR type (Carolina Jubran) [Orabug: 37710815]
- net/mlx5e: Enable remove flow for hard packet limit (Jianbo Liu) [Orabug: 37710815]
- net/mlx5: Use set number of max EQs (Daniel Jurgens) [Orabug: 37710815]
- net/mlx5: IFC updates for SF max IO EQs (Daniel Jurgens) [Orabug: 37710815]
- net/mlx5e: Approximate IPsec per-SA payload data bytes count (Leon Romanovsky) [Orabug: 37710815]
- net/mlx5e: Present succeeded IPsec SA bytes and packet (Leon Romanovsky) [Orabug: 37710815]
- net/mlx5: Use max_num_eqs_24b capability if set (Daniel Jurgens) [Orabug: 37710815]
- net/mlx5: IFC updates for changing max EQs (Daniel Jurgens) [Orabug: 37710815]
- net/mlx5: Correct TASR typo into TSAR (Cosmin Ratiu) [Orabug: 37710815]
- net/mlx5e: SHAMPO, Re-enable HW-GRO (Yoray Zack) [Orabug: 37710815]
- net/mlx5e: SHAMPO, Use KSMs instead of KLMs (Yoray Zack) [Orabug: 37710815]
- net/mlx5e: Fix netif state handling (Shay Drory) [Orabug: 37710815]
- net/mlx5e: RSS, Block XOR hash with over 128 channels (Carolina Jubran) [Orabug: 37710815]
- net/mlx5: Support matching on l4_type for ttc_table (Jianbo Liu) [Orabug: 37710815]
- net/mlx5: Enable SD feature (Tariq Toukan) [Orabug: 37710815]
- net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan) [Orabug: 37710815]
- net/mlx5e: Support per-mdev queue counter (Tariq Toukan) [Orabug: 37710815]
- net/mlx5e: Support cross-vhca RSS (Tariq Toukan) [Orabug: 37710815]
- net/mlx5e: Let channels be SD-aware (Tariq Toukan) [Orabug: 37710815]
- net/mlx5e: Connect mlx5 IPsec statistics with XFRM core (Leon Romanovsky) [Orabug: 37710815]
- xfrm: get global statistics from the offloaded device (Leon Romanovsky) [Orabug: 37710815]
- RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju) [Orabug: 37260584] [Orabug: 37551309]
- uek-rpm/kernel-uek.spec: Set DEFAULTKERNEL correctly during %postun (Vijay Kumar) [Orabug: 37376706]

[5.15.0-308.179.5.el9uek]
- net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
- usbnet:fix NPE during rx_complete (Ying Lu)
- bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
- jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
- serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
- ksmbd: fix multichannel connection failure (Namjae Jeon)
- rds: Tear down the copy-from-user cache before destroying rds_wq (Håkon Bugge) [Orabug: 37716901]

[5.15.0-308.179.4.el9uek]
- Check concurrency before THP creation for file mappings in fault path (Prakash Sangappa) [Orabug: 37608058]
- rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge) [Orabug: 37747825]

[5.15.0-308.179.3.el9uek]
- uek-rpm: Build Bluefield 3 kernel for OL9 (Dave Kleikamp) [Orabug: 37763488]
- uek-rpm: Add emb3 config and core list for OL9 (Dave Kleikamp) [Orabug: 37763488]
- udf: Fix directory iteration for longer tail extents (Jan Kara) [Orabug: 37761829]
- uek-rpm: install the perf exec dir (Stephen Brennan) [Orabug: 37757734]
- perf probe: Improve log for long event name failure (Leo Yan) [Orabug: 37752593]
- perf probe: Check group string length (Leo Yan) [Orabug: 37752593]
- perf probe: Use the MAX_EVENT_NAME_LEN macro (Leo Yan) [Orabug: 37752593]
- perf probe-event: Better error message for a too-long probe name (Dima Kogan) [Orabug: 37752593]
- rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge) [Orabug: 37721762]
- x86/sev: Harden #VC instruction emulation somewhat (Borislav Petkov (AMD)) [Orabug: 37687865] {CVE-2024-25743} {CVE-2024-25742}
- x86/entry: Do not allow external 0x80 interrupts (Thomas Gleixner) [Orabug: 37687865] {CVE-2024-25743} {CVE-2024-25742}
- x86/entry: Convert INT 0x80 emulation to IDTENTRY (Thomas Gleixner) [Orabug: 37687865] {CVE-2024-25743} {CVE-2024-25742}
- x86/entry: Fixup objtool/ibt validation (Peter Zijlstra) [Orabug: 37687865] {CVE-2024-25743} {CVE-2024-25742}
- x86/sev: Mark the code returning to user space as syscall gap (Lai Jiangshan) [Orabug: 37687865] {CVE-2024-25743} {CVE-2024-25742}
- rds: ib: Fix racy send affinity work cancellation (Håkon Bugge) [Orabug: 37607469]
- sched/deadline: Fix warning in migrate_enable for boosted tasks (Wander Lairson Costa) [Orabug: 37433838] {CVE-2024-56583}
- x86/coco: Disable 32-bit emulation by default on TDX and SEV (Kirill A. Shutemov) [Orabug: 36298741] {CVE-2024-25744}
- x86/ia32: State that IA32 emulation is disabled (Borislav Petkov (AMD)) [Orabug: 36298741] {CVE-2024-25744}
- x86: Make IA32_EMULATION boot time configurable (Nikolay Borisov) [Orabug: 36298741] {CVE-2024-25744}
- x86: Remove toolchain check for X32 ABI capability (Masahiro Yamada) [Orabug: 36298741] {CVE-2024-25744}
- x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Nikolay Borisov) [Orabug: 36298741] {CVE-2024-25744}
- x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Nikolay Borisov) [Orabug: 36298741] {CVE-2024-25744}
- x86/entry: Compile entry_SYSCALL32_ignore() unconditionally (Nikolay Borisov) [Orabug: 36298741] {CVE-2024-25744}
- x86/entry: Rename ignore_sysret() (Nikolay Borisov) [Orabug: 36298741] {CVE-2024-25744}
- x86: Introduce ia32_enabled() (Nikolay Borisov) [Orabug: 36298741] {CVE-2024-25744}
- x86: Fix misspelled Kconfig symbols (Lukas Bulwahn) [Orabug: 36298741] {CVE-2024-25744}

[5.15.0-308.179.2.el9uek]
- LTS version: v5.15.179 (Vijayendra Suman)
- net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski)
- kbuild: userprogs: use correct lld when linking through clang (Thomas Weißschuh)
- vsock: Orphan socket after transport release (Michal Luczaj)
- vsock: Keep the binding until socket destruction (Michal Luczaj)
- bpf, vsock: Invoke proto::close on close() (Michal Luczaj)
- media: uvcvideo: Remove dangling pointers (Ricardo Ribalda)
- media: uvcvideo: Fix crash during unbind if gpio unit is in use (Ricardo Ribalda)
- nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi)
- nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi)
- nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi)
- spi-mxs: Fix chipselect glitch (Ralf Schlatterbeck)
- mtd: rawnand: cadence: fix unchecked dereference (Niravkumar L Rabara)
- md: select BLOCK_LEGACY_AUTOLOAD (NeilBrown)
- media: uvcvideo: Avoid returning invalid controls (Ricardo Ribalda)
- media: uvcvideo: Avoid invalid memory access (Ricardo Ribalda)
- drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl (Haoyu Li)
- eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
- bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock (Manivannan Sadhasivam)
- slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku)
- intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
- intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
- intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
- mei: me: add panther lake P DID (Alexander Usyskin)
- Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher)
- usb: xhci: Enable the TRB overfetch quirk on VIA VL805 (Michal Pecio)
- xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
- usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
- usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
- usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
- usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
- usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
- usb: dwc3: gadget: Prevent irq storm when TH re-executes (Badhri Jagan Sridharan)
- usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea)
- usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
- usb: hub: lack of clearing xHC resources (Pawel Laszczak)
- usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
- usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
- Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Christian Heusel)
- gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
- net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
- net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (Zecheng Li)
- net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
- exfat: fix soft lockup in exfat_clear_bitmap (Namjae Jeon)
- x86/sgx: Fix size overflows in sgx_encl_create() (Jarkko Sakkinen)
- vlan: enforce underlying device type (Oscar Maes)
- ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen)
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (Peiyang Wang)
- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
- drm/sched: Fix preprocessor guard (Philipp Stanner)
- hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
- llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet)
- ALSA: usx2y: validate nrpacks module parameter on probe (Murad Masimov)
- hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
- hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
- hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
- caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov)
- net: gso: fix ownership in __udp_gso_segment (Antoine Tenart)
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Meir Elisha)
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu)
- HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
- wifi: iwlwifi: limit printed string from FW file (Johannes Berg)
- mm: don't skip arch_sync_kernel_mappings() in error paths (Ryan Roberts)
- mm/page_alloc: fix uninitialized variable (Hao Zhang)
- block: fix conversion of GPT partition name to 7-bit (Olivier Gayot)
- s390/traps: Fix test_monitor_call() inline assembly (Heiko Carstens)
- rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li)
- rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li)
- wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov)
- wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich)
- x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
- x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
- x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
- platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
- drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
- ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
- ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
- gpio: aggregator: protect driver attr handlers against module unload (Koichiro Den)
- gpio: rcar: Use raw_spinlock to protect register access (Niklas Söderlund)
- HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov)
- Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Rob Herring (Arm))
- drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
- drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
- smb: client: Add check for next_buffer in receive_encrypted_standard() (Haoxiang Li)
- pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le)
- intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (Thomas Gleixner)
- sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner)
- vmlinux.lds: Ensure that const vars with relocations are mapped R/O (Ard Biesheuvel)
- mptcp: always handle address removal under msk socket lock (Paolo Abeni)
- phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
- phy: tegra: xusb: reset VBUS & ID OVERRIDE (BH Hsieh)
- net: enetc: correct the xdp_tx statistics (Wei Fang)
- net: enetc: update UDP checksum when updating originTimestamp field (Wei Fang)
- net: enetc: fix the off-by-one issue in enetc_map_tx_buffs() (Wei Fang)
- usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich)
- i2c: npcm: disable interrupt enable bit before devm_request_irq (Tyrone Ting)
- drm/amd/display: Fix HPD after gpu reset (Roman Li)
- perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
- ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (Dmitry Panchenko)
- ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov)
- x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
- net: ipv6: fix dst ref loop on input in rpl lwt (Justin Iurman)
- net: ipv6: rpl_iptunnel: mitigate 2-realloc issue (Justin Iurman)
- net: ipv6: fix dst ref loop on input in seg6 lwt (Justin Iurman)
- net: ipv6: seg6_iptunnel: mitigate 2-realloc issue (Justin Iurman)
- include: net: add static inline dst_dev_overhead() to dst.h (Justin Iurman)
- seg6: add support for SRv6 H.L2Encaps.Red behavior (Andrea Mayer)
- seg6: add support for SRv6 H.Encaps.Red behavior (Andrea Mayer)
- net/mlx5: IRQ, Fix null string in debug print (Shay Drory)
- net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
- tcp: Defer ts_recent changes until req is owned (Wang Hai)
- ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
- ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
- net: cadence: macb: Synchronize stats calculations (Sean Anderson)
- afs: Fix the server_list to unuse a displaced server rather than putting it (David Howells)
- afs: Make it possible to find the volumes that are using a server (David Howells)
- afs: remove variable nr_servers (Colin Ian King)
- Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response (Luiz Augusto von Dentz)
- ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Takashi Iwai)
- sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
- RDMA/mlx5: Fix bind QP error cleanup flow (Patrisious Haddad)
- scsi: core: Clear driver private data when retrying request (Ye Bin)
- scsi: core: Don't memset() the entire scsi_cmnd in scsi_init_command() (Christoph Hellwig)
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (Vasiliy Kovalev)
- ovl: pass ofs to creation operations (Christian Brauner)
- ovl: use wrappers to all vfs_*xattr() calls (Amir Goldstein)
- IB/mlx5: Set and get correct qp_num for a DCT QP (Mark Zhang)
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Patrick Bellasi)
- mtd: rawnand: cadence: fix incorrect device in dma_unmap_single (Niravkumar L Rabara)
- mtd: rawnand: cadence: use dma_map_resource for sdma address (Niravkumar L Rabara)
- mtd: rawnand: cadence: fix error code in cadence_nand_init() (Niravkumar L Rabara)
- acct: block access to kernel internal filesystems (Christian Brauner)
- acct: perform last write from workqueue (Christian Brauner)
- ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
- nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li)
- drop_monitor: fix incorrect initialization order (Gavrilov Ilia)
- tee: optee: Fix supplicant wait loop (Sumit Garg)
- bpf: skip non exist keys in generic_map_lookup_batch (Yan Zhai)
- nvme/ioctl: add missing space in err message (Caleb Sander Mateos)
- power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
- arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Breno Leitao)
- net: Add non-RCU dev_getbyhwaddr() helper (Breno Leitao)
- flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
- flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
- geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
- geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima)
- powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy)
- ALSA: hda/realtek: Fixup ALC225 depop procedure (Kailang Yang)
- powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
- powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (Michael Ellerman)
- USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue)
- usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
- usb: dwc3: Increase DWC3 controller halt timeout (Wesley Cheng)
- batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann)
- batman-adv: Drop initialization of flexible ethtool_link_ksettings (Sven Eckelmann)
- media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
- media: uvcvideo: Refactor iterators (Ricardo Ribalda)
- media: uvcvideo: Set error_idx during ctrl_commit errors (Ricardo Ribalda)
- soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove (Krzysztof Kozlowski)
- soc/mediatek: mtk-devapc: Convert to platform remove callback returning void (Uwe Kleine-König)
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (Krzysztof Kozlowski)
- soc: mediatek: mtk-devapc: Switch to devm_clk_get_enabled() (AngeloGioacchino Del Regno)
- kfence: skip __GFP_THISNODE allocations on NUMA systems (Marco Elver)
- kfence: enable check kfence canary on panic via boot param (huangshaobo)
- kfence: allow use of a deferrable timer (Marco Elver)
- tpm: Change to kvalloc() in eventlog/acpi.c (Jarkko Sakkinen)
- tpm: Use managed allocation for bios event log (Eddie James)
- arm64: dts: mediatek: mt8183: Disable DSI display output by default (Chen-Yu Tsai)
- ASoC: renesas: rz-ssi: Add a check for negative sample_space (Dan Carpenter)
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (Thomas Zimmermann)
- drm/probe-helper: Create a HPD IRQ event helper for a single connector (Maxime Ripard)
- ksmbd: fix integer overflows on 32 bit systems (Dan Carpenter)
- memcg: fix soft lockup in the OOM process (Chen Ridong)
- mm: update mark_victim tracepoints fields (Carlos Galo)
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (Dan Carpenter)
- crypto: testmgr - some more fixes to RSA test vectors (Ignat Korchagin)
- crypto: testmgr - populate RSA CRT parameters in RSA test vectors (Ignat Korchagin)
- crypto: testmgr - fix version number of RSA tests (lei he)
- crypto: testmgr - Fix wrong test case of RSA (Lei He)
- crypto: testmgr - fix wrong key length for pkcs1pad (Lei He)
- arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings (Catalin Marinas)
- pps: Fix a use-after-free (Calvin Owens)
- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
- x86/i8253: Disable PIT timer 0 when not in use (David Woodhouse)
- f2fs: fix to wait dio completion (Chao Yu)
- ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus (Romain Naour)
- parport_pc: add support for ASIX AX99100 (Jiaqing Zhao)
- serial: 8250_pci: add support for ASIX AX99100 (Jiaqing Zhao)
- can: ems_pci: move ASIX AX99100 ids to pci_ids.h (Jiaqing Zhao)
- nilfs2: protect access to buffers with no active references (Ryusuke Konishi)
- nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi)
- nilfs2: do not output warnings when clearing dirty buffers (Ryusuke Konishi)
- alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
- kdb: Do not assume write() callback available (John Ogness)
- drm/v3d: Stop active perfmon if it is being destroyed (Christian Gmeiner)
- drm/tidss: Clear the interrupt status for interrupts being disabled (Devarsh Thakkar)
- drm/tidss: Fix issue in irq handling causing irq-flood issue (Tomi Valkeinen)
- ipv6: mcast: add RCU protection to mld_newpack() (Eric Dumazet)
- ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet)
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet)
- arp: use RCU protection in arp_xmit() (Eric Dumazet)
- neighbour: use RCU protection in __neigh_notify() (Eric Dumazet)
- neighbour: delete redundant judgment statements (Li Zetao)
- ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet)
- ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet)
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Eric Dumazet)
- net: ipv4: Cache pmtu for all packet paths if multipath enabled (Vladimir Vdovin)
- selftest: net: Test IPv4 PMTU exceptions with DSCP and ECN (Guillaume Nault)
- Namespaceify mtu_expires sysctl (xu xin)
- Namespaceify min_pmtu sysctl (xu xin)
- ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
- ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
- net: add dev_net_rcu() helper (Eric Dumazet)
- ipv4: add RCU protection to ip4_dst_hoplimit() (Eric Dumazet)
- clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long)
- clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long)
- clocksource: Replace cpumask_weight() with cpumask_empty() (Yury Norov)
- btrfs: fix hole expansion when writing at an offset beyond EOF (Filipe Manana)
- mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() (Wentao Liang)
- arm64: Handle .ARM.attributes section in linker scripts (Nathan Chancellor)
- regmap-irq: Add missing kfree() (Jiasheng Jiang)
- partitions: mac: fix handling of bogus partition table (Jann Horn)
- gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Wentao Liang)
- alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
- serial: 8250: Fix fifo underflow on flush (John Keeping)
- cgroup: fix race between fork and cgroup.kill (Shakeel Butt)
- efi: Avoid cold plugged memory for placing the kernel (Ard Biesheuvel)
- alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
- can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Hölzl)
- can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
- USB: serial: option: drop MeiG Smart defines (Johan Hovold)
- USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
- USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
- usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
- usb: cdc-acm: Check control transfer buffer size before access (Jann Horn)
- USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
- USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern)
- usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping)
- USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
- USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Lei Huang)
- usb: core: fix pipe creation for get_bMaxPacketSize0 (Stefan Eichenberger)
- USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
- usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
- usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
- usb: roles: set switch registered flag early on (Elson Roy Serrao)
- perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Sean Christopherson)
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel (Sean Christopherson)
- batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
- batman-adv: fix panic during interface removal (Andy Strohman)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
- orangefs: fix a oob in orangefs_debug_write (Mike Marshall)
- Grab mm lock before grabbing pt lock (Maksym Planeta)
- vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
- PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P (Takashi Iwai)
- media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread (Edward Adam Davis)
- media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
- x86/xen: allow larger contiguous memory regions in PV guests (Juergen Gross)
- xen: remove a confusing comment on auto-translated guest I/O (Petr Tesarik)
- gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
- gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
- gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
- drm/i915/selftests: avoid using uninitialized context (Krzysztof Karas)
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec)
- team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet)
- vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet)
- ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
- HID: multitouch: Add NULL check in mt_input_configured (Charles Han)
- NFSD: fix hang in nfsd4_shutdown_callback (Dai Ngo)
- nfsd: clear acl_access/acl_default after releasing them (Li Lingfeng)
- tty: xilinx_uartps: split sysrq handling (Sean Anderson)
- mptcp: prevent excessive coalescing on receive (Paolo Abeni)
- ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
- memory: tegra20-emc: Correct memory device mask (Dmitry Osipenko)
- gpio: xilinx: remove excess kernel doc (Bartosz Golaszewski)
- net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling (Paul Fertser)
- MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (WangYuli)
- ptp: Ensure info->enable callback is always set (Thomas Weißschuh)
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (Milos Reljin)
- net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
- misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter)
- nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich)
- ocfs2: handle a symlink read error correctly (Matthew Wilcox (Oracle))
- pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer)
- vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
- nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
- nvmem: qcom-spmi-sdam: Set size in struct nvmem_config (Luca Weiss)
- crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
- crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
- media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
- media: ccs: Fix cleanup order in ccs_probe() (Mehdi Djait)
- media: ccs: Fix CCS static data parsing for large block sizes (Sakari Ailus)
- media: ov5640: fix get_light_freq on auto (Sam Bobrowicz)
- media: mc: fix endpoint iteration (Cosmin Tanislav)
- soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
- iio: light: as73211: fix channel handling in only-color triggered buffer (Javier Carrasco)
- media: ccs: Clean up parsed CCS static data on parse failure (Sakari Ailus)
- xfs: Add error handling for xfs_reflink_cancel_cow_range (Wentao Liang)
- crypto: qce - fix priority to be less than ARMv8 CE (Eric Biggers)
- arm64: dts: qcom: sm8350: Fix MPSS memory length (Krzysztof Kozlowski)
- x86/boot: Use '-std=gnu11' to fix build with GCC 15 (Nathan Chancellor)
- kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
- scsi: qla2xxx: Move FCE Trace buffer allocation to user control (Quinn Tran)
- nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk (Georg Gottleuber)
- nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk (Georg Gottleuber)
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (Zijun Hu)
- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (Edson Juliano Drosdeck)
- mips/math-emu: fix emulation of the prefx instruction (Mateusz Jończyk)
- dm-crypt: track tag_offset in convert_context (Hou Tao)
- dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Hou Tao)
- powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
- MIPS: Loongson64: remove ROM Size unit in boardinfo (Kexy Biscuit)
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
- serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
- soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold)
- usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
- usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
- usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
- wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer)
- wifi: rtlwifi: rtl8821ae: Fix media status report (Bitterblue Smith)
- HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
- of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
- of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
- of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
- perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
- efi: libstub: Use '-std=gnu11' to fix build with GCC 15 (Nathan Chancellor)
- blk-cgroup: Fix class @block_class's subsystem refcount leakage (Zijun Hu)
- clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
- clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg (Satya Priya Kakitapalli)
- clk: qcom: gcc-sm6350: Add missing parent_map for two clocks (Luca Weiss)
- clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
- clk: sunxi-ng: a100: enable MMC clock reparenting (Cody Eksal)
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (Fedor Pchelkin)
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin)
- drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes (Ville Syrjälä)
- drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
- drm/amd/pm: Mark MM activity as unsupported (Lijo Lazar)
- KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson)
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
- binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter)
- m68k: vga: Fix I/O defines (Thomas Zimmermann)
- s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
- drm/modeset: Handle tiled displays in pan_display_atomic. (Maarten Lankhorst)
- leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
- cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
- tun: revert fix group permission check (Willem de Bruijn)
- net: rose: lock the socket in rose_bind() (Eric Dumazet)
- net: atlantic: fix warning during hot unplug (Jacob Moroni)
- gpio: pca953x: Improve interrupt support (Mark Tomlinson)
- udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
- tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
- gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
- firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
- nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
- usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio)
- usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar)
- xfs: don't over-report free space or inodes in statvfs (Darrick J. Wong)
- xfs: report realtime block quota limits on realtime directories (Darrick J. Wong)
- gpio: xilinx: Convert gpio_lock to raw spinlock (Sean Anderson)
- net/ncsi: fix locking in Get MAC Address handling (Paul Fertser)
- net/ncsi: Add NC-SI 1.2 Get MC MAC Address command (Peter Delevoryas)
- usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() (Joe Hattori)
- usb: chipidea/ci_hdrc_imx: Convert to platform remove callback returning void (Uwe Kleine-König)
- usb: chipidea: ci_hdrc_imx: use dev_err_probe() (Alexander Stein)
- x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
- platform/x86: acer-wmi: Ignore AC events (Armin Wolf)
- Input: allocate keycode for phone linking (Illia Ostapyshyn)
- selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack() (Liu Ye)
- tipc: re-order conditions in tipc_crypto_key_rcv() (Dan Carpenter)
- mmc: sdhci-msm: Correctly set the load for the regulator (Yuanjie Yang)
- net: wwan: iosm: Fix hibernation by re-binding the driver around it (Maciej S. Szmigiero)
- APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
- i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz (Randolph Ha)
- wifi: iwlwifi: avoid memory leak (Miri Korenblit)
- net/mlx5: use do_aux_work for PHC overflow checks (Vadim Fedorenko)
- HID: Wacom: Add PCI Wacom device support (Even Xu)
- mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
- tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov)
- mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
- tun: fix group permission check (Stas Sergeev)
- safesetid: check size of policy writes (Leo Stone)
- printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu)
- x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
- lockdep: Fix upper limit for LOCKDEP_*_BITS configs (Carlos Llamas)
- sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
- btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
- btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents() (Hao-ran Zheng)
- btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana)
- btrfs: output the reason for open_ctree() failure (Qu Wenruo)
- usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen)
- media: uvcvideo: Fix double free in error path (Laurent Pinchart)
- mptcp: consolidate suboption status (Paolo Abeni)
- usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS (Kyle Tso)
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Jos Wang)
- usb: dwc3: core: Defer the probe until USB power supply ready (Kyle Tso)
- usb: gadget: f_tcm: Fix Get/SetInterface return value (Thinh Nguyen)
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (Sean Rhodes)
- net: usb: rtl8150: enable basic endpoint checking (Nikita Zhandarovich)
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (Lianqin Hu)
- ktest.pl: Check kernelrelease return in get_version (Ricardo B. Marliere)
- netfilter: nf_tables: reject mismatching sum of field_len with set key length (Pablo Neira Ayuso)
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Chuck Lever)
- hexagon: Fix unbalanced spinlock in die() (Lin Yujun)
- hexagon: fix using plain integer as NULL pointer warning in cmpxchg (Willem de Bruijn)
- kconfig: fix memory leak in sym_warn_unmet_dep() (Masahiro Yamada)
- kconfig: WERROR unmet symbol dependency (Sergey Senozhatsky)
- kconfig: deduplicate code in conf_read_simple() (Masahiro Yamada)
- kconfig: remove unused code for S_DEF_AUTO in conf_read_simple() (Masahiro Yamada)
- kconfig: require a space after '#' for valid input (Masahiro Yamada)
- kconfig: add warn-unknown-symbols sanity check (Sergey Senozhatsky)
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (Masahiro Yamada)
- genksyms: fix memory leak when the same symbol is read from *.symref file (Masahiro Yamada)
- genksyms: fix memory leak when the same symbol is added from source (Masahiro Yamada)
- net: sh_eth: Fix missing rtnl lock in suspend/resume path (Kory Maincent)
- bgmac: reduce max frame size to support just MTU 1500 (Rafał Miłecki)
- vsock: Allow retrying on connect() failure (Michal Luczaj)
- perf trace: Fix runtime error of index out of bounds (Howard Chu)
- ptp: Properly handle compat ioctls (Thomas Weißschuh)
- net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang)
- net: netdevsim: try to close UDP port harness races (Jakub Kicinski)
- net: rose: fix timer races against user threads (Eric Dumazet)
- PM: hibernate: Add error handling for syscore_suspend() (Wentao Liang)
- ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet)
- net: fec: implement TSO descriptor cleanup (Dheeraj Reddy Jonnalagadda)
- gpio: mxc: remove dead code after switch to DT-only (Ahmad Fatoum)
- net: hns3: fix oops when unload drivers paralleling (Jian Shen)
- ubifs: skip dumping tnc tree when zroot is null (pangliyuan)
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Oleksij Rempel)
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Joe Hattori)
- xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO (Jianbo Liu)
- tools/bootconfig: Fix the wrong format specifier (Luo Yifan)
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (Olga Kornievskaia)
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (Olga Kornievskaia)
- module: Extend the preempt disabled section in dereference_symbol_descriptor(). (Sebastian Andrzej Siewior)
- ocfs2: mark dquot as inactive if failed to start trans while releasing dquot (Su Yue)
- scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails (Guixin Liu)
- scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Paul Menzel)
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (King Dix)
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (Joe Hattori)
- mtd: hyperbus: hbmc-am654: fix an OF node reference leak (Joe Hattori)
- mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void (Uwe Kleine-König)
- mtd: hyperbus: Make hyperbus_unregister_device() return void (Uwe Kleine-König)
- media: uvcvideo: Propagate buf->error to userspace (Ricardo Ribalda)
- media: camif-core: Add check for clk_enable() (Jiasheng Jiang)
- media: mipi-csis: Add check for clk_enable() (Jiasheng Jiang)
- media: i2c: ov9282: Correct the exposure offset (Dave Stevenson)
- media: i2c: imx412: Add missing newline to prints (Luca Weiss)
- media: marvell: Add check for clk_enable() (Jiasheng Jiang)
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (Zijun Hu)
- media: lmedm04: Handle errors for lme2510_int_read (Chen Ni)
- media: rc: iguanair: handle timeouts (Oliver Neukum)
- efi: sysfb_efi: fix W=1 warnings when EFI is not set (Randy Dunlap)
- of: reserved-memory: Do not make kmemleak ignore freed address (Zijun Hu)
- memblock: drop memblock_free_early_nid() and memblock_free_early() (Mike Rapoport)
- xen/x86: free_p2m_page: use memblock_free_ptr() to free a virtual pointer (Mike Rapoport)
- RDMA/mlx5: Fix indirect mkey ODP page count (Michael Guralnik)
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (Michael Guralnik)
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Joe Hattori)
- ARM: dts: mediatek: mt7623: fix IR nodename (Rafał Miłecki)
- arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts (Vladimir Zapolskiy)
- arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties (Neil Armstrong)
- arm64: dts: qcom: sm8350: correct sleep clock frequency (Dmitry Baryshkov)
- arm64: dts: qcom: sm8250: correct sleep clock frequency (Dmitry Baryshkov)
- arm64: dts: qcom: sm6125: correct sleep clock frequency (Dmitry Baryshkov)
- arm64: dts: qcom: sc7280: correct sleep clock frequency (Dmitry Baryshkov)
- arm64: dts: qcom: msm8994: correct sleep clock frequency (Dmitry Baryshkov)
- arm64: dts: qcom: msm8916: correct sleep clock frequency (Dmitry Baryshkov)
- arm64: dts: qcom: msm8994: Describe USB interrupts (Konrad Dybcio)
- arm64: dts: qcom: msm8996: Fix up USB3 interrupts (Konrad Dybcio)
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings (Chen-Yu Tsai)
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (Joe Hattori)
- memory: tegra20-emc: Support matching timings by LPDDR2 configuration (Dmitry Osipenko)
- memory: Add LPDDR2-info helpers (Dmitry Osipenko)
- arm64: dts: mediatek: mt8183: willow: Support second source touchscreen (Hsin-Te Yuan)
- arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen (Hsin-Te Yuan)
- arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
- arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
- arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property (Chen-Yu Tsai)
- arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property (Chen-Yu Tsai)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (Dan Carpenter)
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (Leon Romanovsky)
- arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A (Val Packett)
- arm64: dts: mediatek: mt8516: add i2c clock-div property (Val Packett)
- arm64: dts: mediatek: mt8516: remove 2 invalid i2c clocks (Fabien Parent)
- arm64: dts: mediatek: mt8516: fix wdt irq type (Val Packett)
- arm64: dts: mediatek: mt8516: fix GICv2 range (Val Packett)
- arm64: dts: mt8183: set DMIC one-wire mode on Damu (Hsin-Yi Wang)
- ARM: at91: pm: change BU Power Switch to automatic mode (Nicolas Ferre)
- padata: avoid UAF for reorder_work (Chen Ridong)
- padata: add pd get/put refcnt helper (Chen Ridong)
- padata: fix UAF in padata_reorder (Chen Ridong)
- bpf: Send signals asynchronously if !preemptible (Puranjay Mohan)
- perf report: Fix misleading help message about --demangle (Jiachen Zhang)
- perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Arnaldo Carvalho de Melo)
- padata: fix sysfs store callback check (Thomas Weißschuh)
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (Joe Hattori)
- crypto: hisilicon/sec2 - fix for aead invalid authsize (Wenkai Lin)
- crypto: hisilicon/sec2 - fix for aead icv error (Wenkai Lin)
- crypto: hisilicon/sec2 - optimize the error return process (Chenghai Huang)
- crypto: hisilicon/sec - delete redundant blank lines (Kai Ye)
- crypto: hisilicon/sec - add some comments for soft fallback (Kai Ye)
- ktest.pl: Remove unused declarations in run_bisect_test function (Ba Jing)
- ASoC: renesas: rz-ssi: Use only the proper amount of dividers (Claudiu Beznea)
- perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() (Zhongqiu Han)
- perf header: Fix one memory leakage in process_bpf_prog_info() (Zhongqiu Han)
- perf header: Fix one memory leakage in process_bpf_btf() (Zhongqiu Han)
- ASoC: sun4i-spdif: Add clock multiplier settings (George Lander)
- libbpf: Fix segfault due to libelf functions not setting errno (Quentin Monnet)
- net/rose: prevent integer overflows in rose_setsockopt() (Nikita Zhandarovich)
- tcp_cubic: fix incorrect HyStart round start detection (Mahdi Arghavani)
- net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() (Roger Quadros)
- netfilter: nft_flow_offload: update tcp state flags under lock (Florian Westphal)
- net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim)
- net: avoid race between device unregistration and ethnl ops (Antoine Tenart)
- net/mlxfw: Drop hard coded max FW flash image size (Maher Sanalla)
- net: let net.core.dev_weight always be non-zero (Liu Jian)
- selftests/landlock: Fix error message (Mickaël Salaün)
- clk: analogbits: Fix incorrect calculation of vco rate delta (Bo Gan)
- wifi: cfg80211: adjust allocation of colocated AP data (Dmitry Antipov)
- wifi: cfg80211: Handle specific BSSID in 6GHz scanning (Ilan Peer)
- selftests: harness: fix printing of mismatch values in __EXPECT() (Dmitry V. Levin)
- cpufreq: ACPI: Fix max-frequency computation (Gautham R. Shenoy)
- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (WangYuli)
- landlock: Handle weird files (Mickaël Salaün)
- landlock: Move filesystem helpers and add a new one (Mickaël Salaün)
- net/smc: fix data error when recvmsg with MSG_PEEK flag (Guangguan Wang)
- wifi: wlcore: fix unbalanced pm_runtime calls (Andreas Kemnade)
- samples/landlock: Fix possible NULL dereference in parse_path() (Zichen Xie)
- regulator: of: Implement the unwind path of of_regulator_match() (Joe Hattori)
- team: prevent adding a device which is already a team device lower (Octavian Purdila)
- clk: imx8mp: Fix clkout1/2 support (Marek Vasut)
- cpufreq: schedutil: Fix superfluous updates caused by need_freq_update (Sultan Alsawaf (unemployed))
- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (Joe Hattori)
- dt-bindings: mfd: bd71815: Fix rsense and typos (Matti Vaittinen)
- cpupower: fix TSC MHz calculation (He Rongguang)
- ACPI: fan: cleanup resources in the error path of .probe() (Joe Hattori)
- regulator: dt-bindings: mt6315: Drop regulator-compatible property (Chen-Yu Tsai)
- HID: multitouch: fix support for Goodix PID 0x01e9 (Jiri Kosina)
- Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad" (Jiri Kosina)
- HID: multitouch: Add support for lenovo Y9000P Touchpad (He Lugang)
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: remove unused dualmac control leftovers (Dmitry Antipov)
- wifi: rtlwifi: remove unused timer and related code (Dmitry Antipov)
- rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel)
- dt-bindings: leds: class-multicolor: Fix path to color definitions (Geert Uytterhoeven)
- dt-bindings: leds: class-multicolor: reference class directly in multi-led node (Krzysztof Kozlowski)
- dt-bindings: leds: Add multicolor PWM LED bindings (Sven Schwermer)
- dt-bindings: leds: Optional multi-led unit address (Sven Schwermer)
- dt-bindings: leds: Add Qualcomm Light Pulse Generator binding (Bjorn Andersson)
- dt-bindings: Another pass removing cases of 'allOf' containing a '$ref' (Rob Herring)
- spi: dt-bindings: add schema listing peripheral-specific properties (Pratyush Yadav)
- dt-bindings: mmc: controller: clarify the address-cells description (Neil Armstrong)
- spi: zynq-qspi: Add check for clk_enable() (Mingwei Zheng)
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: fix init_sw_vars leak when probe fails (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: do not complete firmware loading needlessly (Thadeu Lima de Souza Cascardo)
- ipmi: ipmb: Add check devm_kasprintf() returned value (Charles Han)
- genirq: Make handle_enforce_irqctx() unconditionally available (Thomas Gleixner)
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko)
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Alan Stern)
- drm/etnaviv: Fix page property being used for non writecombine buffers (Sui Jingfeng)
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (Peter Zijlstra)
- sched/psi: Use task->psi_flags to clear in CPU migration (Chengming Zhou)
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (David Howells)
- select: Fix unbalanced user_access_end() (Christophe Leroy)
- partitions: ldm: remove the initial kernel-doc notation (Randy Dunlap)
- nvme: Add error check for xa_store in nvme_get_effects_log (Keisuke Nishimura)
- pstore/blk: trivial typo fixes (Eugen Hristev)
- nbd: don't allow reconnect after disconnect (Yu Kuai)
- block: retry call probe after request_module in blk_request_module (Yang Erkun)
- block: deprecate autoloading based on dev_t (Christoph Hellwig)
- fs: fix proc_handler for sysctl_nr_open (Jinliang Zheng)
- fs: move fs stat sysctls to file_table.c (Luis Chamberlain)
- fs: move inode sysctls to its own file (Luis Chamberlain)
- sysctl: share unsigned long const values (Luis Chamberlain)
- sysctl: use const for typically used max/min proc sysctls (Xiaoming Ni)
- hung_task: move hung_task sysctl interface to hung_task.c (Xiaoming Ni)
- afs: Fix directory format encoding struct (David Howells)
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (David Howells)
- uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda) [Orabug: 37764001]

[5.15.0-308.178.1.el9uek]
- perf dso: fix dso__is_kallsyms() check (Stephen Brennan) [Orabug: 37709864]
- scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li) [Orabug: 37681137]
- dyndbg: export ddebug_add_module/ddebug_remove_module (Julian Pidancet) [Orabug: 37629344]
- kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet) [Orabug: 37629344]
- kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet) [Orabug: 37629344]
- rds: ib: Make traffic_class visible to user-space (Håkon Bugge) [Orabug: 37350892]
- rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge) [Orabug: 37350892]
- selftest/vm: Add -O2 in CFLAGS to Makefile to avoid possible failure (Yifei Liu) [Orabug: 37197150]

[5.15.0-307.178.5.el9uek]
- net/mlx5: DR, prevent potential error pointer dereference (Dan Carpenter) [Orabug: 37434242] {CVE-2024-56660}
- uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol9/ol8 container kernels (Jonah Palmer) [Orabug: 37703179]
- net: hsr: fix fill_frame_info() regression vs VLAN packets (Eric Dumazet)
- f2fs: Introduce linear search for dentries (Daniel Lee)
- tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)
- net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Andrew Cooper)
- sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Høiland-Jørgensen)
- usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)
- x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Juergen Gross)
- x86/xen: add FRAME_END to xen_hypercall_hvm() (Juergen Gross)
- ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)
- usb: dwc3: Set SUSPENDENABLE soon after phy init (Thinh Nguyen)
- Revert "btrfs: avoid monopolizing a core when activating a swap file" (Koichiro Den)
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Thadeu Lima de Souza Cascardo)
- netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)

[5.15.0-307.178.4.el9uek]
- LTS version: v5.15.178 (Vijayendra Suman)
- Input: xpad - add support for wooting two he (arm) (Jack Greiner)
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto)
- Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson)
- ALSA: usb-audio: Add delay quirk for USB Audio Device (Lianqin Hu)
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz)
- wifi: iwlwifi: add a few rate index validity checks (Anjaneyulu)
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (Easwar Hariharan)
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel)
- platform/chrome: cros_ec_typec: Check for EC driver (Akihiko Odaki)
- fs/ntfs3: Additional check in ntfs_file_release (Konstantin Komarov)
- Bluetooth: RFCOMM: Fix not validating setsockopt user input (Luiz Augusto von Dentz)
- Bluetooth: SCO: Fix not validating setsockopt user input (Luiz Augusto von Dentz)
- vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
- net: sched: fix ets qdisc OOB Indexing (Jamal Hadi Salim)
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher)
- mptcp: don't always assume copied data in mptcp_cleanup_rbuf() (Paolo Abeni)
- regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
- ASoC: samsung: Add missing depends on I2C (Charles Keepax)
- irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons)
- scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang)
- seccomp: Stub for !CONFIG_SECCOMP (Linus Walleij)
- ASoC: samsung: Add missing selects for MFD_WM8994 (Charles Keepax)
- ASoC: wm8994: Add depends on MFD core (Charles Keepax)

[5.15.0-307.177.3.el9uek]
- jbd2: increase maximum transaction size (Jan Kara) [Orabug: 37688920]
- net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Carolina Jubran) [Orabug: 37534698]
- net/mlx5e: Always start IPsec sequence number from 1 (Leon Romanovsky) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (Shravan Kumar Ramani) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (Shravan Kumar Ramani) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (Pei Xiao) [Orabug: 37534698]
- net/mlx5e: Disable loopback self-test on multi-PF netdev (Carolina Jubran) [Orabug: 37534698]
- net/mlx5: Unregister notifier on eswitch init failure (Cosmin Ratiu) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling (Michal Wilczynski) [Orabug: 37534698]
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (Jianbo Liu) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: fix lockdep warning (Luiz Capitulino) [Orabug: 37534698]
- net/mlx5: Fix bridge mode operations when there are no VFs (Benjamin Poirier) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: Add hw_reset() support for BlueField-3 SoC (Liming Sun) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: add dwcmshc_pltfm_data (Chen Wang) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: factor out code into dwcmshc_rk35xx_init (Chen Wang) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: factor out code for th1520_init() (Chen Wang) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: move two rk35xx functions (Chen Wang) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: add common bulk optional clocks support (Chen Wang) [Orabug: 37534698]
- net/mlx5e: Take state lock during tx timeout reporter (Dragos Tatulea) [Orabug: 37534698]
- net/mlx5: SD, Do not query MPIR register if no sd_group (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: Always drain health in shutdown callback (Shay Drory) [Orabug: 37534698]
- mmc: dw_mmc-bluefield: Add support for eMMC HW reset (Liming Sun) [Orabug: 37534698]
- mmc: dw_mmc: Add support for platform specific eMMC HW reset (Liming Sun) [Orabug: 37534698]
- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea) [Orabug: 37534698]
- net/mlx5e: SHAMPO, Fix incorrect page release (Dragos Tatulea) [Orabug: 37534698]
- net/mlx5: Do not query MPIR on embedded CPU function (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: Reload only IB representors upon lag disable/enable (Maher Sanalla) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: Add tuning support for Sophgo CV1800B and SG200X (Jisheng Zhang) [Orabug: 37534698]
- macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst (Rahul Rameshbabu) [Orabug: 37534698]
- macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads (Rahul Rameshbabu) [Orabug: 37534698]
- net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran) [Orabug: 37534698]
- net/mlx5e: Use channel mdev reference instead of global mdev instance for coalescing (Rahul Rameshbabu) [Orabug: 37534698]
- net/mlx5: SD, Handle possible devcom ERR_PTR (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: Disallow SRIOV switchdev mode when in multi-PF netdev (Tariq Toukan) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: Implement SDHCI CQE support (Sergey Khimich) [Orabug: 37534698]
- mmc: cqhci: Add cqhci set_tran_desc() callback (Sergey Khimich) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: fix signedness bugs (Dan Carpenter) [Orabug: 37534698]
- net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan) [Orabug: 37534698]
- net/mlx5e: Create single netdev per SD group (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: SD, Add debugfs (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: SD, Introduce SD lib (Tariq Toukan) [Orabug: 37534698]
- net/mlx5: Add MPIR bit in mcam_access_reg (Tariq Toukan) [Orabug: 37534698]
- lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (David Gow) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: Ignore unsupported performance blocks (Luiz Capitulino) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: mlxbf_pmc_event_list(): make size ptr optional (Luiz Capitulino) [Orabug: 37534698]
- mmc: sdhci-of-dwcmshc: Add support for Sophgo CV1800B and SG2002 (Jisheng Zhang) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up (Shravan Kumar Ramani) [Orabug: 37534698]
- platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types (Shravan Kumar Ramani) [Orabug: 37534698]
- net: macsec: revert the MAC address if mdo_upd_secy fails (Radu Pirea (NXP OSS)) [Orabug: 37534698]
- net: macsec: documentation for macsec_context and macsec_ops (Radu Pirea (NXP OSS)) [Orabug: 37534698]
- fortify: Do not cast to "unsigned char" (Kees Cook) [Orabug: 37534698]
- fortify: Use SIZE_MAX instead of (size_t)-1 (Kees Cook) [Orabug: 37534698]
- fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL (Kees Cook) [Orabug: 37534698]
- mmc: dw_mmc: Add driver callbacks for data read timeout (Mårten Lindahl) [Orabug: 37534698]
- mmc: dw_mmc-exynos: Add support for ARTPEC-8 (Mårten Lindahl) [Orabug: 37534698]
- mmc: dw_mmc: clean up a debug message (Dan Carpenter) [Orabug: 37534698]
- mmc: dw_mmc: exynos: use common_caps (John Keeping) [Orabug: 37534698]
- mmc: dw_mmc: add common capabilities to replace caps (John Keeping) [Orabug: 37534698]
- mmc: dw_mmc: Allow lower TMOUT value than maximum (Mårten Lindahl) [Orabug: 37534698]
- rds: Make sure transmit path and connection tear-down does not run concurrently (Håkon Bugge) [Orabug: 36441944]
- ice: always add legacy 32byte RXDID in supported_rxdids (Michal Schmidt) [Orabug: 36252756]
- ice: virtchnl rss hena support (Md Fahad Iqbal Polash) [Orabug: 36252756]
- ice: Add support Flex RXD (Michal Jaron) [Orabug: 36252756]

[5.15.0-307.177.2.el9uek]
- uek-rpm: Enable CONFIG_MICROSOFT_MANA as module in aarch64 (Vijayendra Suman) [Orabug: 37647393]
- rtc: add new RTC_FEATURE_ALARM_WAKEUP_ONLY feature (Alexandre Belloni) [Orabug: 37631796]
- thermal: core: Drop excessive lockdep_assert_held() calls (Rafael J. Wysocki) [Orabug: 37631796]
- thermal: core: Introduce thermal_cooling_device_update() (Rafael J. Wysocki) [Orabug: 37631796]
- thermal: core: Introduce thermal_cooling_device_present() (Rafael J. Wysocki) [Orabug: 37631796]
- thermal: sysfs: Reuse cdev->max_state (Viresh Kumar) [Orabug: 37631796]
- rtc: efi: Enable SET/GET WAKEUP services as optional (Shanker Donthineni) [Orabug: 37631796]
- rtc: efi: Add wakeup support (Riwen Lu) [Orabug: 37631796]
- rtc: efi: switch to RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni) [Orabug: 37631796]
- rtc: add BSM parameter (Alexandre Belloni) [Orabug: 37631796]
- rtc: add correction parameter (Alexandre Belloni) [Orabug: 37631796]
- rtc: add parameter ioctl (Alexandre Belloni) [Orabug: 37631796]
- rtc: expose correction feature (Alexandre Belloni) [Orabug: 37631796]
- rtc: add alarm related features (Alexandre Belloni) [Orabug: 37631796]
- rtc: efi: switch to devm_rtc_allocate_device (Alexandre Belloni) [Orabug: 37631796]
- cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao) [Orabug: 37621589]
- rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Håkon Bugge) [Orabug: 37586089]
- bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michael Chan) [Orabug: 37434220] {CVE-2024-56656}
- bnxt_en: Fix receive ring space parameters when XDP is active (Shravya KN) [Orabug: 37433562] {CVE-2024-53209}
- bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (Aleksandr Mishin) [Orabug: 37070333] {CVE-2024-40919}
- bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (Vikas Gupta) [Orabug: 37070270] {CVE-2024-35972}
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Somnath Kotur) [Orabug: 37070266] {CVE-2024-44984}

[5.15.0-307.177.1.el9uek]
- nvmet: always initialize cqe.result (Daniel Wagner) [Orabug: 36897348] {CVE-2024-41079}
- nvmet-auth: complete a request only after freeing the dhchap pointers (Maurizio Lombardi) [Orabug: 36897348] {CVE-2024-41079}
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Justin Tee) [Orabug: 37116505] {CVE-2024-46842}
- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (Eric Dumazet) [Orabug: 37264120] {CVE-2024-50155}
- nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov) [Orabug: 37268555] {CVE-2024-50215}
- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (Oleksij Rempel) [Orabug: 37433573] {CVE-2024-53213}
- PCI/MSI: Handle lack of irqdomain gracefully (Thomas Gleixner) [Orabug: 37452651] {CVE-2024-56760}
- selftests: rtnetlink: update netdevsim ipsec output format (Hangbin Liu) [Orabug: 37547931]
- netdevsim: print human readable IP address (Hangbin Liu) [Orabug: 37547931]
- uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi) [Orabug: 37619141]
- Add __init annotation to pensando_efi_mem_reserve (Joseph Dobosenski) [Orabug: 37619785]

ELSA-2025-4669 Important: Oracle Linux 9 osbuild-composer security update

Oracle Linux Security Advisory ELSA-2025-4669

http://linux.oracle.com/errata/ELSA-2025-4669.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
osbuild-composer-118.2-1.0.1.el9_5.x86_64.rpm
osbuild-composer-core-118.2-1.0.1.el9_5.x86_64.rpm
osbuild-composer-worker-118.2-1.0.1.el9_5.x86_64.rpm

aarch64:
osbuild-composer-118.2-1.0.1.el9_5.aarch64.rpm
osbuild-composer-core-118.2-1.0.1.el9_5.aarch64.rpm
osbuild-composer-worker-118.2-1.0.1.el9_5.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//osbuild-composer-118.2-1.0.1.el9_5.src.rpm

Related CVEs:

CVE-2025-30204

Description of changes:

[118.2-1.0.1]
- jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)

ELBA-2025-20316 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update

Oracle Linux Bug Fix Advisory ELBA-2025-20316

http://linux.oracle.com/errata/ELBA-2025-20316.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-1.23.3.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-1.23.3.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-1.23.3.el9uek.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-6.12.0-1.23.3.el9uek.src.rpm

Description of changes:

[6.12.0-1.23.3]
- RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan) [Orabug: 37800558]

[6.12.0-1.23.2]
- vhost_scsi: log write descriptors (Dongli Zhang) [Orabug: 37393517]
- vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang) [Orabug: 37393517]
- RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju) [Orabug: 37260584] [Orabug: 37551308]
- Revert "x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI" (Harshit Mogalapalli) [Orabug: 37638881]
- uek-rpm: Replace legacy FBDEV drivers with simpledrm and fbdev emulation layer (Harshit Mogalapalli) [Orabug: 37638881]
- uek-rpm/kernel-uek.spec: Set DEFAULTKERNEL correctly during %postun (Vijay Kumar)
- uek-rpm: Enable gcov build (Sherry Yang) [Orabug: 37734677]
- uek-rpm: remove .el9 from shim version (Samasth Norway Ananda) [Orabug: 37820202]
- drm/mgag200: Added support for the new device G200eH5 (Gwenael Georgeault) [Orabug: 37835185]

[6.12.0-1.23.1]
- LTS version: v6.12.23 (Jack Vogel)
- platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc() (Dan Carpenter)
- tracing: Do not use PERF enums when perf is not defined (Steven Rostedt)
- ARM: 9443/1: Require linker to support KEEP within OVERLAY for DCE (Nathan Chancellor)
- NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Chuck Lever)
- NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Chuck Lever)
- NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Chuck Lever)
- nfsd: fix management of listener transports (Olga Kornievskaia)
- nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng)
- nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Jeff Layton)
- media: streamzap: fix race between device disconnection and urb callback (Murad Masimov)
- media: vimc: skip .s_stream() for stopped entities (Nikita Zhandarovich)
- exec: fix the racy usage of fs_struct->in_exec (Oleg Nesterov)
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Yosry Ahmed)
- jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
- jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
- ext4: fix OOB read when checking dotdot dir (Acs, Jakub)
- ext4: don't over-report free space or inodes in statvfs (Theodore Ts'o)
- wifi: mt76: mt7921: fix kernel panic due to null pointer dereference (Ming Yen Hsieh)
- arm64: Don't call NULL in do_compat_alignment_fixup() (Angelos Oikonomopoulos)
- mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs (David Hildenbrand)
- tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Ran Xiaokai)
- tracing: Fix synth event printk format for str fields (Douglas Raillard)
- tracing: Ensure module defining synth event cannot be unloaded while tracing (Douglas Raillard)
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu)
- exfat: fix potential wrong error return from get_block (Sungjong Seo)
- exfat: fix random stack corruption after get_block (Sungjong Seo)
- ksmbd: fix null pointer dereference in alloc_preauth_hash() (Namjae Jeon)
- ksmbd: validate zero num_subauth before sub_auth is accessed (Norbert Szetei)
- ksmbd: fix overflow in dacloffset bounds check (Norbert Szetei)
- ksmbd: fix session use-after-free in multichannel connection (Namjae Jeon)
- ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Namjae Jeon)
- ksmbd: add bounds check for create lease context (Norbert Szetei)
- ksmbd: add bounds check for durable handle context (Namjae Jeon)
- KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error (Sean Christopherson)
- mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD (Ulf Hansson)
- mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
- mmc: omap: Fix memory leak in mmc_omap_new_slot (Miaoqian Lin)
- Remove unnecessary firmware version check for gc v9_4_2 (Candice Li)
- media: omap3isp: Handle ARM dma_iommu_mapping (Robin Murphy)
- ARM: 9444/1: add KEEP() keyword to ARM_VECTORS (Christian Eggers)
- ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
- acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Murad Masimov)
- wifi: mt76: mt7925: remove unused acpi function for clc (Ming Yen Hsieh)
- x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn)
- x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
- x86/Kconfig: Add cmpxchg8b support back to Geode CPUs (Arnd Bergmann)
- uprobes/x86: Harden uretprobe syscall trampoline check (Jiri Olsa)
- perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Kan Liang)
- perf/x86/intel: Apply static call for drain_pebs (Peter Zijlstra (Intel))
- ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
- platform/x86: ISST: Correct command storage data length (Srinivas Pandruvada)
- platform/x86: thinkpad_acpi: disable ACPI fan access for T495* and E560 (Eduard Christian Dumitrescu)
- ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (Hans de Goede)
- x86/tdx: Fix arch_safe_halt() execution for TDX VMs (Vishal Annapurve)
- x86/mce: use is_copy_from_user() to determine copy-from-user context (Shuai Xue)
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Boris Ostrovsky)
- KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini)
- x86/hyperv: Fix check of return value from snp_set_vmsa() (Tianyu Lan)
- LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC (Hengqi Chen)
- LoongArch: BPF: Don't override subprog's return value (Hengqi Chen)
- LoongArch: BPF: Fix off-by-one error in build_prologue() (Hengqi Chen)
- LoongArch: Increase MAX_IO_PICS up to 8 (Huacai Chen)
- LoongArch: Increase ARCH_DMA_MINALIGN up to 16 (Huacai Chen)
- rust: Fix enabling Rust and building with GCC for LoongArch (WANG Rui)
- usbnet:fix NPE during rx_complete (Ying Lu)
- wifi: mac80211: Fix sparse warning for monitor_sdata (Alexander Wetzel)
- tty: serial: lpuart: only disable CTS instead of overwriting the whole UARTMODIR register (Sherry Sun)
- tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning (Sherry Sun)
- tty: serial: fsl_lpuart: use port struct directly to simply code (Sherry Sun)
- tty: serial: fsl_lpuart: Use u32 and u8 for register variables (Sherry Sun)
- cgroup/rstat: Fix forceidle time in cpu.stat (Abel Wu)
- cgroup/rstat: Tracking cgroup-level niced CPU time (Joshua Hahn)
- tracing: Correct the refcount if the hist/hist_debug file fails to open (Tengda Wu)
- tracing/hist: Support POLLPRI event for poll on histogram (Masami Hiramatsu (Google))
- tracing/hist: Add poll(POLLIN) support on hist file (Masami Hiramatsu (Google))
- tracing: Switch trace_events_hist.c code over to use guard() (Steven Rostedt)
- tools/power turbostat: report CoreThr per measurement interval (Len Brown)
- perf/core: Fix child_total_time_enabled accounting bug at task exit (Yeoreum Yun)
- drm/amdgpu/gfx12: fix num_mec (Alex Deucher)
- drm/amdgpu/gfx11: fix num_mec (Alex Deucher)
- kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally (Alexandru Gagniuc)
- net: ibmveth: make veth_pool_store stop hanging (Dave Marquardt)
- arcnet: Add NULL check in com20020pci_probe() (Henry Martin)
- ipv6: Do not consider link down nexthops in path selection (Ido Schimmel)
- ipv6: Start path selection from the first nexthop (Ido Schimmel)
- net: fix geneve_opt length integer overflow (Lin Ma)
- net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer)
- ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
- netfilter: nft_tunnel: fix geneve_opt type confusion addition (Lin Ma)
- net: decrease cached dst counters in dst_release (Antoine Tenart)
- tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault)
- vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
- udp: Fix memory accounting leak. (Kuniyuki Iwashima)
- udp: Fix multiple wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima)
- net: mvpp2: Prevent parser TCAM memory corruption (Tobias Waldekranz)
- sctp: add mutual exclusion in proc_sctp_do_udp_port() (Eric Dumazet)
- net_sched: skbprio: Remove overly strict queue assertions (Cong Wang)
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu)
- netfilter: nf_tables: don't unregister hook when table is dormant (Florian Westphal)
- netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Pablo Neira Ayuso)
- idpf: fix adapter NULL pointer dereference on reboot (Emil Tantilov)
- e1000e: change k1 configuration on MTP and later platforms (Vitaly Lifshits)
- spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent (Florian Fainelli)
- ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Takashi Iwai)
- spi: bcm2835: Do not call gpiod_put() on invalid descriptor (Florian Fainelli)
- ASoC: imx-card: Add NULL check in imx_card_probe() (Henry Martin)
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Caleb Sander Mateos)
- riscv/purgatory: 4B align purgatory_start (Björn Töpel)
- riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator (Yao Zi)
- riscv: Fix hugetlb retrieval of number of ptes in case of !present pte (Alexandre Ghiti)
- spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() (Josh Poimboeuf)
- ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe() (Christophe JAILLET)
- s390/entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation (Sven Schnelle)
- ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei)
- x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski)
- RISC-V: errata: Use medany for relocatable builds (Palmer Dabbelt)
- ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Takashi Iwai)
- firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Richard Fitzgerald)
- ntb: intel: Fix using link status DB's (Nikita Shubin)
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
- riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Juhan Jin)
- fs/9p: fix NULL pointer dereference on mkdir (Christian Schoenebeck)
- spufs: fix a leak in spufs_create_context() (Al Viro)
- spufs: fix gang directory lifetimes (Al Viro)
- spufs: fix a leak on spufs_new_file() failure (Al Viro)
- netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int (David Howells)
- hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
- memory: omap-gpmc: drop no compatible check (Roger Quadros)
- can: statistics: use atomic access in hot path (Oliver Hartkopp)
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Navon John Lukose)
- selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Florian Westphal)
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Taehee Yoo)
- drm/amd: Keep display off while going into S4 (Mario Limonciello)
- nvme-pci: fix stuck reset on concurrent DPC and HP (Keith Busch)
- x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov)
- x86/hyperv: Fix output argument to hypercall that changes page visibility (Michael Kelley)
- locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
- wifi: mac80211: fix SA Query processing in MLO (Johannes Berg)
- wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state (Emmanuel Grumbach)
- ASoC: rt1320: set wake_capable = 0 explicitly (Bard Liao)
- ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Alexey Klimov)
- x86/hyperv/vtl: Stop kernel from probing VTL0 low memory (Naman Jain)
- sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
- ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Stefan Binding)
- exfat: add a check for invalid data size (Yuezhang Mo)
- platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-TA (Shyam Sundar S K)
- platform/x86/amd/pmf: Propagate PMF-TA return codes (Shyam Sundar S K)
- HID: i2c-hid: improve i2c_hid_get_report error message (Wentao Guan)
- net: dsa: rtl8366rb: don't prompt users for LED control (Jakub Kicinski)
- platform/x86/intel/vsec: Add Diamond Rapids support (David E. Box)
- platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (Dmitry Panchenko)
- cifs: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
- smb: common: change the data type of num_aces to le16 (Namjae Jeon)
- perf/core: Fix perf_pmu_register() vs. perf_init_event() (Peter Zijlstra)
- ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Daniel Bárta)
- ALSA: hda/realtek: Fix Asus Z13 2025 audio (Antheas Kapenekakis)
- affs: don't write overlarge OFS data block size fields (Simon Tatham)
- affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
- wifi: brcmfmac: keep power during suspend if board requires it (Matthias Proske)
- nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Icenowy Zheng)
- nvme-pci: clean up CMBMSC when registering CMB fails (Icenowy Zheng)
- nvme-tcp: fix possible UAF in nvme_tcp_poll (Sagi Grimberg)
- wifi: iwlwifi: mvm: use the right version of the rate API (Emmanuel Grumbach)
- wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
- wifi: mac80211: remove debugfs dir for virtual monitor (Alexander Wetzel)
- wifi: mac80211: Cleanup sta TXQs on flush (Alexander Wetzel)
- nfs: Add missing release on error in nfs_lock_and_join_requests() (Dan Carpenter)
- objtool/loongarch: Add unwind hints in prepare_frametrace() (Josh Poimboeuf)
- rcu-tasks: Always inline rcu_irq_work_resched() (Josh Poimboeuf)
- context_tracking: Always inline ct_{nmi,irq}_{enter,exit}() (Josh Poimboeuf)
- sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
- objtool: Fix verbose disassembly if CROSS_COMPILE isn't set (David Laight)
- octeontx2-af: Free NIX_AF_INT_VEC_GEN irq (Geetha sowjanya)
- octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Geetha sowjanya)
- net: phy: broadcom: Correct BCM5221 PHY model detection (Jim Liu)
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Giovanni Gherdovich)
- LoongArch: Rework the arch_kgdb_breakpoint() implementation (Yuli Wang)
- LoongArch: Fix device node refcount leak in fdt_cpu_clk_init() (Miaoqian Lin)
- LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig (谢致邦 (XIE Zhibang))
- objtool: Fix segfault in ignore_unreachable_insn() (Josh Poimboeuf)
- ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
- net/mlx5e: SHAMPO, Make reserved size independent of page size (Lama Kayal)
- ksmbd: fix r_count dec/increment mismatch (Namjae Jeon)
- ksmbd: fix multichannel connection failure (Namjae Jeon)
- ksmbd: use aead_request_free to match aead_request_alloc (Miaoqian Lin)
- rndis_host: Flag RNDIS modems as WWAN devices (Lubomir Rintel)
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Mark Zhang)
- exfat: fix missing shutdown check (Yuezhang Mo)
- exfat: fix the infinite loop in exfat_find_last_cluster() (Yuezhang Mo)
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Wang Zhaolong)
- NFS: Shut down the nfs_client only after all the superblocks (Trond Myklebust)
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf)
- objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Josh Poimboeuf)
- thermal: core: Remove duplicate struct declaration (xueqin Luo)
- perf bpf-filter: Fix a parsing error with comma (Namhyung Kim)
- perf tools: annotate asm_pure_loop.S (Marcus Meissner)
- fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
- perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation (Ilkka Koskinen)
- tty: n_tty: use uint for space returned by tty_write_room() (Jiri Slaby (SUSE))
- staging: vchiq_arm: Fix possible NPR of keep-alive thread (Stefan Wahren)
- staging: vchiq_arm: Register debugfs after cdev (Stefan Wahren)
- staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES (谢致邦 (XIE Zhibang))
- perf: intel-tpebs: Fix incorrect usage of zfree() (James Clark)
- perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
- perf python: Don't keep a raw_data pointer to consumed ring buffer space (Arnaldo Carvalho de Melo)
- perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
- perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
- i3c: master: svc: Fix missing the IBI rules (Stanley Chu)
- um: hostfs: avoid issues on inode number reuse by host (Benjamin Berg)
- um: remove copy_from_kernel_nofault_allowed (Benjamin Berg)
- um: Pass the correct Rust target and options with gcc (David Gow)
- selftests/mm/cow: fix the incorrect error handling (Cyan Yang)
- fuse: fix dax truncate/punch_hole fault path (Alistair Popple)
- NFS: fix open_owner_id_maxsz and related fields. (NeilBrown)
- NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Trond Myklebust)
- NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Trond Myklebust)
- NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Trond Myklebust)
- NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Trond Myklebust)
- arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig (Anshuman Khandual)
- ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev)
- kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
- kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page() (David Hildenbrand)
- perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
- perf evlist: Add success path to evlist__create_syswide_maps (Ian Rogers)
- perf debug: Avoid stack overflow in recursive error message (Ian Rogers)
- iio: light: Add check for array bounds in veml6075_read_int_time_ms (Karan Sanghavi)
- iio: adc: ad7768-1: set MOSI idle state to prevent accidental reset (Jonathan Santos)
- iio: adc: ad7173: Fix comparison of channel configs (Uwe Kleine-König)
- iio: adc: ad7124: Fix comparison of channel configs (Uwe Kleine-König)
- iio: adc: ad4130: Fix comparison of channel setups (Uwe Kleine-König)
- dmaengine: fsl-edma: free irq correctly in remove path (Peng Fan)
- dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister (Peng Fan)
- fs/ntfs3: Prevent integer overflow in hdr_first_de() (Dan Carpenter)
- fs/ntfs3: Fix a couple integer overflows on 32bit systems (Dan Carpenter)
- usb: xhci: correct debug message page size calculation (Niklas Neronin)
- perf bench: Fix perf bench syscall loop count (Thomas Richter)
- perf arm-spe: Fix load-store operation checking (Leo Yan)
- iio: backend: make sure to NULL terminate stack buffer (Nuno Sá)
- iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails. (Jonathan Cameron)
- iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
- ucsi_ccg: Don't show failed to get FW build information error (Mario Limonciello)
- perf build: Fix in-tree build due to symbolic link (Luca Ceresoli)
- tools/x86: Fix linux/unaligned.h include path in lib/insn.c (Ian Rogers)
- perf pmu: Don't double count common sysfs and json events (James Clark)
- coresight-etm4x: add isb() before reading the TRCSTATR (Yuanfang Zhang)
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie)
- coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
- greybus: gb-beagleplay: Add error handling for gb_greybus_init (Wentao Liang)
- perf report: Switch data file correctly in TUI (Namhyung Kim)
- soundwire: slave: fix an OF node reference leak in soundwire slave device (Joe Hattori)
- isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
- phy: phy-rockchip-samsung-hdptx: Don't use dt aliases to determine phy-id (Heiko Stuebner)
- fs/ntfs3: Update inode->i_mapping->a_ops on compression state (Konstantin Komarov)
- w1: fix NULL pointer dereference in probe (Chenyuan Yang)
- perf: Always feature test reallocarray (James Clark)
- perf stat: Fix find_stat for mixed legacy/non-legacy events (Ian Rogers)
- clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock (Barnabás Czémán)
- pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm() (Andy Shevchenko)
- crypto: hisilicon/sec2 - fix for aead auth key length (Wenkai Lin)
- RDMA/core: Fix use-after-free when rename device name (Wang Liang)
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
- leds: Fix LED_OFF brightness race (Remi Pommarel)
- mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
- pinctrl: renesas: rzv2m: Fix missing of_node_put() call (Fabrizio Castro)
- RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad)
- bpf: Fix array bounds error with may_goto (Jiayuan Chen)
- clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable() (Neil Armstrong)
- crypto: nx - Fix uninitialised hv_nxc on error (Herbert Xu)
- power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
- x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
- clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
- clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents (Laurentiu Mihalcea)
- crypto: qat - remove access to parity register for QAT GEN4 (Bairavi Alagappan)
- pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment (Andy Shevchenko)
- rust: fix signature of rust_fmt_argument (Alice Ryhl)
- selftests/bpf: Select NUMA_NO_NODE to create map (Saket Kumar Bhaskar)
- clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
- clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
- pinctrl: tegra: Set SFIO mode to Mux Register (Prathamesh Shete)
- IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
- crypto: api - Fix larval relookup type and mask (Herbert Xu)
- power: supply: bq27xxx_battery: do not update cached flags prematurely (Sicelo A. Mhlongo)
- remoteproc: qcom_q6v5_mss: Handle platforms with one power domain (Luca Weiss)
- RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() (Cheng Xu)
- RDMA/mlx5: Fix calculation of total invalidated pages (Chiara Meiohas)
- RDMA/core: Don't expose hw_counters outside of init net namespace (Roman Gushchin)
- clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
- selftests/bpf: Fix freplace_link segfault in tailcalls prog test (Tengda Wu)
- RDMA/mlx5: Fix MR cache initialization error flow (Michael Guralnik)
- pinctrl: renesas: rzg2l: Fix missing of_node_put() call (Fabrizio Castro)
- pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
- lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
- bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
- clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK (Konrad Dybcio)
- remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226 (Luca Weiss)
- crypto: tegra - Set IV to NULL explicitly for AES ECB (Akhil R)
- RDMA/mana_ib: Ensure variable err is initialized (Kees Bakker)
- s390: Remove ioremap_wt() and pgprot_writethrough() (Niklas Schnelle)
- clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock (Vladimir Lypak)
- crypto: tegra - Fix CMAC intermediate result handling (Akhil R)
- pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw() (Yue Haibing)
- clk: samsung: Fix UBSAN panic in samsung_clk_init() (Will McVicker)
- remoteproc: qcom: pas: add minidump_id to SC7280 WPSS (Luca Weiss)
- clk: renesas: r8a08g045: Check the source of the CPU PLL settings (Claudiu Beznea)
- x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (David Hildenbrand)
- selftests/bpf: Fix string read in strncmp benchmark (Viktor Malik)
- libbpf: Fix hypothetical STT_SECTION extern NULL deref case (Andrii Nakryiko)
- remoteproc: qcom_q6v5_pas: Make single-PD handling more robust (Luca Weiss)
- pinctrl: renesas: rzg2l: Suppress binding attributes (Claudiu Beznea)
- of: property: Increase NR_FWNODE_REFERENCE_ARGS (Zijun Hu)
- remoteproc: core: Clear table_sz when rproc_shutdown (Peng Fan)
- RDMA/mlx5: Fix page_size variable overflow (Michael Guralnik)
- crypto: hisilicon/sec2 - fix for sec spec check (Wenkai Lin)
- crypto: hisilicon/sec2 - fix for aead authsize alignment (Wenkai Lin)
- clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
- crypto: tegra - Use HMAC fallback when keyslots are full (Akhil R)
- crypto: bpf - Add MODULE_DESCRIPTION for skcipher (Arnd Bergmann)
- crypto: tegra - check return value for hash do_one_req (Akhil R)
- crypto: tegra - Use separate buffer for setkey (Akhil R)
- crypto: qat - set parity error mask for qat_420xx (Bairavi Alagappan)
- crypto: iaa - Test the correct request flag (Herbert Xu)
- fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
- mdacon: rework dependency list (Arnd Bergmann)
- dummycon: fix default rows/cols (Arnd Bergmann)
- fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
- PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Järvinen)
- PCI: Fix BAR resizing when VF BARs are assigned (Ilpo Järvinen)
- PCI: histb: Fix an error handling path in histb_pcie_probe() (Christophe JAILLET)
- PCI: dwc: ep: Return -ENOMEM for allocation failures (Dan Carpenter)
- drm/amd/display: avoid NPD when ASIC does not support DMUB (Thadeu Lima de Souza Cascardo)
- drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer() (Dan Carpenter)
- drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr (Douglas Anderson)
- drm/mediatek: Fix config_updating flag never false when no mbox channel (Jason-JH Lin)
- PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe (Thippeswamy Havalige)
- PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
- powerpc/kexec: fix physical address calculation in clear_utlb_entry() (Christophe Leroy)
- crypto: powerpc: Mark ghashp8-ppc.o as an OBJECT_FILES_NON_STANDARD (Christophe Leroy)
- drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump (Rob Clark)
- drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters() (Vitaliy Shevtsov)
- drm/panthor: Update CS_STATUS_ defines to correct values (Ashley Smith)
- PCI: Avoid reset when disabled via sysfs (Nishanth Aravamudan)
- PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
- PCI: brcmstb: Fix potential premature regulator disabling (Jim Quinlan)
- PCI: brcmstb: Fix error path after a call to regulator_bulk_get() (Jim Quinlan)
- PCI: brcmstb: Use internal register to change link capability (Jim Quinlan)
- PCI: brcmstb: Set generation limit before PCIe link up (Jim Quinlan)
- PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload (Hans Zhang)
- drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables' (Srinivasan Shanmugam)
- drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host (Marijn Suijten)
- drm/msm/dsi: Use existing per-interface slice count in DSC timing (Marijn Suijten)
- drm/msm/dsi/phy: Program clock inverters in correct register (Krzysztof Kozlowski)
- drm/msm/dpu: don't use active in atomic_check() (Dmitry Baryshkov)
- drm/amd/display: fix an indent issue in DML21 (Aurabindo Pillai)
- PCI/ACS: Fix 'pci=config_acs=' parameter (Tushar Dave)
- drm/panel: ilitek-ili9882t: fix GPIO name in error message (John Keeping)
- PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden)
- drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
- drm/mediatek: mtk_hdmi: Unregister audio platform device on failure (AngeloGioacchino Del Regno)
- PCI: Remove add_align overwrite unrelated to size0 (Ilpo Järvinen)
- PCI: Use downstream bridges for distributing resources (Kai-Heng Feng)
- drm/amdgpu/umsch: fix ucode check (Alex Deucher)
- drm/amdgpu: refine smu send msg debug log format (Yang Wang)
- gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines (Vitalii Mordan)
- drm/vkms: Fix use after free and double free on init error (José Expósito)
- drm: xlnx: zynqmp: Fix max dma segment size (Tomi Valkeinen)
- drm/bridge: it6505: fix HDCP V match check is not performed correctly (Hermes Wu)
- drm/dp_mst: Fix drm RAD print (Wayne Lin)
- drm/ssd130x: ensure ssd132x pitch is correct (John Keeping)
- drm/ssd130x: fix ssd132x encoding (John Keeping)
- drm/ssd130x: Set SPI .id_table to prevent an SPI core warning (Javier Martinez Canillas)
- drm/bridge: ti-sn65dsi86: Fix multiple instances (Geert Uytterhoeven)
- ALSA: timer: Don't take register_mutex with copy_from/to_user() (Takashi Iwai)
- ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible (Jayesh Choudhary)
- ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
- dt-bindings: vendor-prefixes: add GOcontroll (Maud Spierings)
- HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER (Jiri Kosina)
- ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry (Venkata Prasad Potturu)
- ASoC: cs35l41: check the return value from spi_setup() (Vitaliy Shevtsov)
- platform/x86: dell-ddv: Fix temperature calculation (Armin Wolf)
- platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver static (Ilpo Järvinen)
- platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol static (Ilpo Järvinen)
- auxdisplay: panel: Fix an API misuse in panel.c (Andy Shevchenko)
- media: platform: allgro-dvt: unregister v4l2_device on the error path (Joe Hattori)
- media: verisilicon: HEVC: Initialize start_bit field (Benjamin Gaignard)
- auxdisplay: MAX6959 should select BITREVERSE (Geert Uytterhoeven)
- regulator: pca9450: Fix enable register for LDO5 (Frieder Schrempf)
- x86/entry: Add __init to ia32_emulation_override_cmdline() (Vitaly Kuznetsov)
- x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures (Chao Gao)
- x86/traps: Make exc_double_fault() consistently noreturn (Josh Poimboeuf)
- perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
- lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
- PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
- thermal: int340x: Add NULL check for adev (Chenyuan Yang)
- x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (James Morse)
- EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
- EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
- EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
- selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
- watchdog/hardlockup/perf: Fix perf_event memory leak (Li Huafei)
- kunit/stackinit: Use fill byte different from Clang i386 pattern (Kees Cook)
- RISC-V: KVM: Disable the kernel perf counter during configure (Atish Patra)
- cpufreq: tegra194: Allow building for Tegra234 (Aaron Kling)
- PM: sleep: Adjust check before setting power.must_resume (Rafael J. Wysocki)
- lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock (Peter Zijlstra)
- x86/sev: Add missing RIP_REL_REF() invocations during sme_enable() (Kevin Loughlin)
- x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
- x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
- x86/fpu: Fix guest FPU state buffer allocation size (Stanislav Spassov)
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids (Qiuxu Zhuo)
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
- sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks (Tianchen Ding)
- sched: Cancel the slice protection of the idle entity (zihan zhou)
- smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label (Konstantin Andreev)
- smack: dont compile ipv6 code unless ipv6 is configured (Konstantin Andreev)
- cpufreq: scpi: compare kHz instead of Hz (zuoqian)
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport (Microsoft))
- watch_queue: fix pipe accounting mismatch (Eric Sandeen)
- LTS version: v6.12.22 (Jack Vogel)
- bcachefs: bch2_ioctl_subvolume_destroy() fixes (Kent Overstreet)
- serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
- serial: stm32: do not deassert RS485 RTS GPIO prematurely (Cheick Traore)
- perf tools: Fix up some comments and code to properly use the event_source bus (Greg Kroah-Hartman)
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu)
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michal Pecio)
- usb: xhci: Don't skip on Stopped - Length Invalid (Michal Pecio)
- net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
- net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
- net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
- tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers (Sherry Sun)
- tty: serial: 8250: Add Brainboxes XC devices (Cameron Williams)
- tty: serial: 8250: Add some more device IDs (Cameron Williams)
- counter: microchip-tcb-capture: Fix undefined counter channel state on probe (William Breathitt Gray)
- counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
- ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx (Dhruv Deshpande)
- netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy)
- drm/amd/display: Don't write DP_MSTM_CTRL after LT (Wayne Lin)
- atm: Fix NULL pointer dereference (Minjoong Kim)
- HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
- ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
- LTS version: v6.12.21 (Jack Vogel)
- mptcp: Fix data stream corruption in the address announcement (Arthur Mongodin)
- mm/huge_memory: drop beyond-EOF folios with the right number of refs (Zi Yan)
- arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S (Justin Klaassen)
- libsubcmd: Silence compiler warning (Eder Zulian)
- Revert "sched/core: Reduce cost of sched_move_task when config autogroup" (Dietmar Eggemann)
- KVM: arm64: Eagerly switch ZCR_EL{1,2} (Mark Rutland)
- KVM: arm64: Mark some header functions as inline (Mark Rutland)
- KVM: arm64: Refactor exit handlers (Mark Rutland)
- KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Mark Rutland)
- KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Mark Rutland)
- KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Mark Rutland)
- KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Mark Rutland)
- KVM: arm64: Calculate cptr_el2 traps on activating traps (Fuad Tabba)
- io_uring/net: fix sendzc double notif flush (Pavel Begunkov)
- ksmbd: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
- drm/amdkfd: Fix user queue validation on Gfx7/8 (Philip Yang)
- drm/amdgpu: Fix JPEG video caps max size for navi1x and raven (David Rosca)
- drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size (David Rosca)
- drm/amdgpu: Remove JPEG from vega and carrizo video caps (David Rosca)
- drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2 (Alex Deucher)
- drm/amdgpu/pm: Handle SCLK offset correctly in overdrive for smu 14.0.2 (Tomasz Pakuła)
- drm/amdgpu: Restore uncached behaviour on GFX12 (David Belanger)
- drm/amd/pm: add unique_id for gfx12 (Harish Kasiviswanathan)
- drm/amd/display: Use HW lock mgr for PSR1 when only one eDP (Mario Limonciello)
- drm/amd/display: Fix message for support_edp0_on_dp1 (Yilin Chen)
- drm/amdgpu/gfx12: correct cleanup of 'me' field with gfx_v12_0_me_fini() (Wentao Liang)
- drm/sched: Fix fence reference count leak (qianyi liu)
- drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich)
- pmdomain: amlogic: fix T7 ISP secpower (Xianwei Zhao)
- soc: qcom: pdr: Fix the potential deadlock (Saranya R)
- batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
- xsk: fix an integer overflow in xp_create_and_assign_umem() (Gavrilov Ilia)
- keys: Fix UAF in key_put() (David Howells)
- efi/libstub: Avoid physical address 0x0 when doing random allocation (Ard Biesheuvel)
- firmware: qcom: uefisecapp: fix efivars registration race (Johan Hovold)
- ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
- ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6 (Stefan Eichenberger)
- memcg: drain obj stock on cpu hotplug teardown (Shakeel Butt)
- proc: fix UAF in proc_get_inode() (Ye Bin)
- mm/page_alloc: fix memory accept before watermarks gets initialized (Kirill A. Shutemov)
- mm/migrate: fix shmem xarray update during migration (Zi Yan)
- mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Raphael S. Carvalho)
- selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation (Rafael Aquini)
- mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
- mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops (Kamal Dasu)
- arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou (Quentin Schulz)
- arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou (Quentin Schulz)
- arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card (Stefan Eichenberger)
- arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card (Stefan Eichenberger)
- accel/qaic: Fix integer overflow in qaic_validate_req() (Dan Carpenter)
- regulator: check that dummy regulator has been probed before using it (Christian Eggers)
- regulator: dummy: force synchronous probing (Christian Eggers)
- netfs: Call invalidate_cache only if implemented (Max Kellermann)
- riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (E Shattow)
- io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally (Jens Axboe)
- drm/v3d: Don't run jobs that have errors flagged in its fence (Maíra Canal)
- drm/xe: Fix exporting xe buffers multiple times (Tomasz Rusinowicz)
- can: flexcan: disable transceiver during system PM (Haibo Chen)
- can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
- can: ucan: fix out of bound read in strscpy() source (Vincent Mailhol)
- can: rcar_canfd: Fix page entries in the AFL list (Biju Das)
- dt-bindings: can: renesas,rcar-canfd: Fix typo in pattern properties for R-Car V4M (Biju Das)
- net: mana: Support holes in device list reply msg (Haiyang Zhang)
- i2c: omap: fix IRQ storms (Andreas Kemnade)
- tracing: tprobe-events: Fix leakage of module refcount (Masami Hiramatsu (Google))
- Revert "gre: Fix IPv6 link-local address generation." (Guillaume Nault)
- net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
- libfs: Fix duplicate directory entry in offset_dir_lookup (Yongjian Sun)
- net: ipv6: ioam6: fix lwtunnel_output() loop (Justin Iurman)
- net: lwtunnel: fix recursion loops (Justin Iurman)
- net: ti: icssg-prueth: Add lock to stats (MD Danish Anwar)
- net: atm: fix use after free in lec_send() (Dan Carpenter)
- gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU (Jason Gunthorpe)
- phy: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
- dpll: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
- devlink: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima)
- net: ipv6: fix TCP GSO segmentation with NAT (Felix Fietkau)
- net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence (Vignesh Raghavendra)
- ata: libata-core: Add ATA_QUIRK_NO_LPM_ON_ATI for certain Samsung SSDs (Niklas Cassel)
- tracing: tprobe-events: Fix to clean up tprobe correctly when module unload (Masami Hiramatsu (Google))
- ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX (David Lechner)
- accel/qaic: Fix possible data corruption in BOs > 2G (Jeffrey Hugo)
- Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters (Arkadiusz Bokowy)
- Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter)
- RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
- RDMA/hns: Fix missing xa_destroy() (Junxian Huang)
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common() (Junxian Huang)
- RDMA/hns: Fix invalid sq params not being blocked (Junxian Huang)
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db() (Junxian Huang)
- RDMA/hns: Fix soft lockup during bt pages loop (Junxian Huang)
- RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
- dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Baochen Qiang)
- ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200 (Chester A. Unal)
- ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300 (Chester A. Unal)
- ARM: dts: bcm2711: Don't mark timer regs unconfigured (Phil Elwell)
- ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP (Arnd Bergmann)
- RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Qasim Ijaz)
- RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Kashyap Desai)
- RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests (Zhu Yanjun)
- arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1 (Yao Zi)
- arm64: dts: bcm2712: PL011 UARTs are actually r1p5 (Phil Elwell)
- ARM: dts: bcm2711: PL011 UARTs are actually r1p5 (Phil Elwell)
- ARM: dts: bcm2711: Fix xHCI power-domain (Stefan Wahren)
- soc: imx8m: Unregister cpufreq and soc dev in cleanup path (Peng Fan)
- soc: imx8m: Use devm_* to simplify probe failure handling (Marek Vasut)
- soc: imx8m: Remove global soc_uid (Marek Vasut)
- xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
- xfrm: fix tunnel mode TX datapath in packet offload mode (Alexandre Cassen)
- arm64: dts: rockchip: remove supports-cqe from rk3588 tiger (Heiko Stuebner)
- arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar (Heiko Stuebner)
- arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply (Alexander Stein)
- firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
- firmware: qcom: scm: Fix error code in probe() (Dan Carpenter)
- rds: Tear down the copy-from-user cache before destroying rds_wq (Håkon Bugge) [Orabug: 37379052]
- uek-rpm: Set uek_release variable in UEK 8 spec file (Harshit Mogalapalli) [Orabug: 37801392]

[6.12.0-0.20.20.1]
- rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge) [Orabug: 37702023]
- scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil) [Orabug: 37778472]
- scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Ranjan Kumar) [Orabug: 37778472]
- scsi: mpi3mr: Check admin reply queue from Watchdog (Ranjan Kumar) [Orabug: 37778472]
- scsi: mpi3mr: Update timestamp only for supervisor IOCs (Ranjan Kumar) [Orabug: 37778472]
- scsi: mpi3mr: Update MPI Headers to revision 35 (Ranjan Kumar) [Orabug: 37778472]
- scsi: mpi3mr: Fix locking in an error path (Bart Van Assche) [Orabug: 37778472]
- scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Colin Ian King) [Orabug: 37778472]
- scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Ranjan Kumar) [Orabug: 37778472]
- scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Ranjan Kumar) [Orabug: 37778472]
- scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Ranjan Kumar) [Orabug: 37778472]
- scsi: mpi3mr: Avoid reply queue full condition (Ranjan Kumar) [Orabug: 37778472]
- scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Ranjan Kumar) [Orabug: 37778472]
- uek-rpm: Enable Intel In Field Scan as a module in UEK8 (Harshit Mogalapalli) [Orabug: 37778856]

ELSA-2025-4491 Moderate: Oracle Linux 9 389-ds-base security update

Oracle Linux Security Advisory ELSA-2025-4491

http://linux.oracle.com/errata/ELSA-2025-4491.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
389-ds-base-2.5.2-9.el9_5.x86_64.rpm
389-ds-base-libs-2.5.2-9.el9_5.x86_64.rpm
389-ds-base-snmp-2.5.2-9.el9_5.x86_64.rpm
python3-lib389-2.5.2-9.el9_5.noarch.rpm
389-ds-base-devel-2.5.2-9.el9_5.x86_64.rpm

aarch64:
389-ds-base-2.5.2-9.el9_5.aarch64.rpm
389-ds-base-libs-2.5.2-9.el9_5.aarch64.rpm
389-ds-base-snmp-2.5.2-9.el9_5.aarch64.rpm
python3-lib389-2.5.2-9.el9_5.noarch.rpm
389-ds-base-devel-2.5.2-9.el9_5.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//389-ds-base-2.5.2-9.el9_5.src.rpm

Related CVEs:

CVE-2025-2487

Description of changes:

[2.5.2-9]
- Resolves: RHEL-83874 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.5.z]
- Resolves: RHEL-80712 - Increased memory consumption caused by NDN cache [rhel-9.5.z]
- Resolves: RHEL-87194 - Some replication status data are reset upon a restart. [rhel-9.5.z]

ELBA-2025-4792 Oracle Linux 9 e2fsprogs bug fix update

Oracle Linux Bug Fix Advisory ELBA-2025-4792

http://linux.oracle.com/errata/ELBA-2025-4792.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
e2fsprogs-1.46.5-6.el9_5.x86_64.rpm
e2fsprogs-devel-1.46.5-6.el9_5.i686.rpm
e2fsprogs-devel-1.46.5-6.el9_5.x86_64.rpm
e2fsprogs-libs-1.46.5-6.el9_5.i686.rpm
e2fsprogs-libs-1.46.5-6.el9_5.x86_64.rpm
libcom_err-1.46.5-6.el9_5.i686.rpm
libcom_err-1.46.5-6.el9_5.x86_64.rpm
libcom_err-devel-1.46.5-6.el9_5.i686.rpm
libcom_err-devel-1.46.5-6.el9_5.x86_64.rpm
libss-1.46.5-6.el9_5.i686.rpm
libss-1.46.5-6.el9_5.x86_64.rpm
libss-devel-1.46.5-6.el9_5.i686.rpm
libss-devel-1.46.5-6.el9_5.x86_64.rpm

aarch64:
e2fsprogs-1.46.5-6.el9_5.aarch64.rpm
e2fsprogs-devel-1.46.5-6.el9_5.aarch64.rpm
e2fsprogs-libs-1.46.5-6.el9_5.aarch64.rpm
libcom_err-1.46.5-6.el9_5.aarch64.rpm
libcom_err-devel-1.46.5-6.el9_5.aarch64.rpm
libss-1.46.5-6.el9_5.aarch64.rpm
libss-devel-1.46.5-6.el9_5.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//e2fsprogs-1.46.5-6.el9_5.src.rpm

Description of changes:

* Mon Jan 27 2025 Pavel Reichl [preichl@redhat.com]
- Fix: e2fsprogs: online resize fails

ELSA-2025-4487 Moderate: Oracle Linux 9 ruby security update

Oracle Linux Security Advisory ELSA-2025-4487

http://linux.oracle.com/errata/ELSA-2025-4487.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby-3.0.7-165.el9_5.i686.rpm
ruby-3.0.7-165.el9_5.x86_64.rpm
ruby-default-gems-3.0.7-165.el9_5.noarch.rpm
ruby-devel-3.0.7-165.el9_5.i686.rpm
ruby-devel-3.0.7-165.el9_5.x86_64.rpm
ruby-libs-3.0.7-165.el9_5.i686.rpm
ruby-libs-3.0.7-165.el9_5.x86_64.rpm
rubygem-bigdecimal-3.0.0-165.el9_5.x86_64.rpm
rubygem-bundler-2.2.33-165.el9_5.noarch.rpm
rubygem-io-console-0.5.7-165.el9_5.x86_64.rpm
rubygem-irb-1.3.5-165.el9_5.noarch.rpm
rubygem-json-2.5.1-165.el9_5.x86_64.rpm
rubygem-minitest-5.14.2-165.el9_5.noarch.rpm
rubygem-power_assert-1.2.1-165.el9_5.noarch.rpm
rubygem-psych-3.3.2-165.el9_5.x86_64.rpm
rubygem-rake-13.0.3-165.el9_5.noarch.rpm
rubygem-rbs-1.4.0-165.el9_5.noarch.rpm
rubygem-rdoc-6.3.4.1-165.el9_5.noarch.rpm
rubygem-rexml-3.2.5-165.el9_5.noarch.rpm
rubygem-rss-0.2.9-165.el9_5.noarch.rpm
rubygem-test-unit-3.3.7-165.el9_5.noarch.rpm
rubygem-typeprof-0.15.2-165.el9_5.noarch.rpm
rubygems-3.2.33-165.el9_5.noarch.rpm
rubygems-devel-3.2.33-165.el9_5.noarch.rpm
ruby-doc-3.0.7-165.el9_5.noarch.rpm

aarch64:
ruby-3.0.7-165.el9_5.aarch64.rpm
ruby-default-gems-3.0.7-165.el9_5.noarch.rpm
ruby-devel-3.0.7-165.el9_5.aarch64.rpm
ruby-libs-3.0.7-165.el9_5.aarch64.rpm
rubygem-bigdecimal-3.0.0-165.el9_5.aarch64.rpm
rubygem-bundler-2.2.33-165.el9_5.noarch.rpm
rubygem-io-console-0.5.7-165.el9_5.aarch64.rpm
rubygem-irb-1.3.5-165.el9_5.noarch.rpm
rubygem-json-2.5.1-165.el9_5.aarch64.rpm
rubygem-minitest-5.14.2-165.el9_5.noarch.rpm
rubygem-power_assert-1.2.1-165.el9_5.noarch.rpm
rubygem-psych-3.3.2-165.el9_5.aarch64.rpm
rubygem-rake-13.0.3-165.el9_5.noarch.rpm
rubygem-rbs-1.4.0-165.el9_5.noarch.rpm
rubygem-rdoc-6.3.4.1-165.el9_5.noarch.rpm
rubygem-rexml-3.2.5-165.el9_5.noarch.rpm
rubygem-rss-0.2.9-165.el9_5.noarch.rpm
rubygem-test-unit-3.3.7-165.el9_5.noarch.rpm
rubygem-typeprof-0.15.2-165.el9_5.noarch.rpm
rubygems-3.2.33-165.el9_5.noarch.rpm
rubygems-devel-3.2.33-165.el9_5.noarch.rpm
ruby-doc-3.0.7-165.el9_5.noarch.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//ruby-3.0.7-165.el9_5.src.rpm

Related CVEs:

CVE-2025-27219
CVE-2025-27220

Description of changes:

[3.0.7-165]
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
Resolves: RHEL-86104
- Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220)
Resolves: RHEL-86130

[3.0.7-164]
- Undefine GC compaction methods on ppc64le.
Resolves: RHEL-83136
- Fix printing warnings when using IRB from a script.
Resolves: RHEL-83044

ELSA-2025-4492 Moderate: Oracle Linux 9 qemu-kvm security update

Oracle Linux Security Advisory ELSA-2025-4492

http://linux.oracle.com/errata/ELSA-2025-4492.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
qemu-guest-agent-9.0.0-10.el9_5.3.x86_64.rpm
qemu-img-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-audio-pa-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-block-blkio-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-block-curl-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-block-rbd-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-common-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-core-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-device-display-virtio-gpu-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-device-display-virtio-gpu-pci-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-device-display-virtio-vga-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-device-usb-host-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-device-usb-redirect-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-docs-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-tools-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-ui-egl-headless-9.0.0-10.el9_5.3.x86_64.rpm
qemu-kvm-ui-opengl-9.0.0-10.el9_5.3.x86_64.rpm
qemu-pr-helper-9.0.0-10.el9_5.3.x86_64.rpm

aarch64:
qemu-guest-agent-9.0.0-10.el9_5.3.aarch64.rpm
qemu-img-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-audio-pa-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-block-blkio-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-block-curl-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-block-rbd-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-common-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-core-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-device-display-virtio-gpu-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-device-display-virtio-gpu-pci-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-device-usb-host-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-device-usb-redirect-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-docs-9.0.0-10.el9_5.3.aarch64.rpm
qemu-kvm-tools-9.0.0-10.el9_5.3.aarch64.rpm
qemu-pr-helper-9.0.0-10.el9_5.3.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//qemu-kvm-9.0.0-10.el9_5.3.src.rpm

Related CVEs:

CVE-2023-6693
CVE-2024-3567

Description of changes:

[9.0.0-10.el9_5.3]
- kvm-target-i386-fix-feature-dependency-for-WAITPKG.patch [RHEL-84866]
- Resolves: RHEL-84866
(Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: waitpkg [rhel-9.5.z])

ELBA-2025-4489 Oracle Linux 9 virt-v2v bug fix update

Oracle Linux Bug Fix Advisory ELBA-2025-4489

http://linux.oracle.com/errata/ELBA-2025-4489.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
virt-v2v-2.5.6-10.0.1.el9_5.x86_64.rpm
virt-v2v-bash-completion-2.5.6-10.0.1.el9_5.noarch.rpm
virt-v2v-man-pages-ja-2.5.6-10.0.1.el9_5.noarch.rpm
virt-v2v-man-pages-uk-2.5.6-10.0.1.el9_5.noarch.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//virt-v2v-2.5.6-10.0.1.el9_5.src.rpm

Description of changes:

[2.5.6-10.0.1]
- Replaced bugzilla.oracle.com references [Orabug: 34202300]
- replaced upstream references [Orabug:34089586]

[1:2.5.6-10]
- Print blkhash of converted image in virt-v2v debugging output
resolves: RHEL-85832

ELSA-2025-20323 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2025-20323

http://linux.oracle.com/errata/ELSA-2025-20323.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-308.179.6.2.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-308.179.6.2.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-308.179.6.2.el9uek.x86_64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-5.15.0-308.179.6.2.el9uek.src.rpm

Related CVEs:

CVE-2024-28956

Description of changes:

[5.15.0-308.179.6.2.el9uek]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920681]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920681]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920681]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/alternatives: Remove faulty optimization (Josh Poimboeuf) [Orabug: 37863726] {CVE-2024-28956}
- x86/alternative: Optimize returns patching (Borislav Petkov (AMD)) [Orabug: 37863726] {CVE-2024-28956}

ELSA-2025-4488 Moderate: Oracle Linux 9 ruby:3.1 security update

Oracle Linux Security Advisory ELSA-2025-4488

http://linux.oracle.com/errata/ELSA-2025-4488.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby-3.1.7-146.module+el9.5.0+90564+273a1edd.i686.rpm
ruby-3.1.7-146.module+el9.5.0+90564+273a1edd.x86_64.rpm
ruby-bundled-gems-3.1.7-146.module+el9.5.0+90564+273a1edd.i686.rpm
ruby-bundled-gems-3.1.7-146.module+el9.5.0+90564+273a1edd.x86_64.rpm
ruby-default-gems-3.1.7-146.module+el9.5.0+90564+273a1edd.noarch.rpm
ruby-devel-3.1.7-146.module+el9.5.0+90564+273a1edd.i686.rpm
ruby-devel-3.1.7-146.module+el9.5.0+90564+273a1edd.x86_64.rpm
ruby-doc-3.1.7-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-bigdecimal-3.1.1-146.module+el9.5.0+90564+273a1edd.i686.rpm
rubygem-bigdecimal-3.1.1-146.module+el9.5.0+90564+273a1edd.x86_64.rpm
rubygem-bundler-2.3.27-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-io-console-0.5.11-146.module+el9.5.0+90564+273a1edd.i686.rpm
rubygem-io-console-0.5.11-146.module+el9.5.0+90564+273a1edd.x86_64.rpm
rubygem-irb-1.4.1-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-json-2.6.1-146.module+el9.5.0+90564+273a1edd.i686.rpm
rubygem-json-2.6.1-146.module+el9.5.0+90564+273a1edd.x86_64.rpm
rubygem-minitest-5.15.0-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.x86_64.rpm
rubygem-mysql2-doc-0.5.4-1.module+el9.1.0+20815+286161bd.noarch.rpm
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.x86_64.rpm
rubygem-pg-doc-1.3.5-1.module+el9.1.0+20815+286161bd.noarch.rpm
rubygem-power_assert-2.0.1-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-psych-4.0.4-146.module+el9.5.0+90564+273a1edd.i686.rpm
rubygem-psych-4.0.4-146.module+el9.5.0+90564+273a1edd.x86_64.rpm
rubygem-rake-13.0.6-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-rbs-2.7.0-146.module+el9.5.0+90564+273a1edd.i686.rpm
rubygem-rbs-2.7.0-146.module+el9.5.0+90564+273a1edd.x86_64.rpm
rubygem-rdoc-6.4.1.1-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-rexml-3.3.9-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-rss-0.3.1-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygems-3.3.27-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygems-devel-3.3.27-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-test-unit-3.5.3-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-typeprof-0.21.3-146.module+el9.5.0+90564+273a1edd.noarch.rpm
ruby-libs-3.1.7-146.module+el9.5.0+90564+273a1edd.i686.rpm
ruby-libs-3.1.7-146.module+el9.5.0+90564+273a1edd.x86_64.rpm

aarch64:
ruby-3.1.7-146.module+el9.5.0+90564+273a1edd.aarch64.rpm
ruby-bundled-gems-3.1.7-146.module+el9.5.0+90564+273a1edd.aarch64.rpm
ruby-default-gems-3.1.7-146.module+el9.5.0+90564+273a1edd.noarch.rpm
ruby-devel-3.1.7-146.module+el9.5.0+90564+273a1edd.aarch64.rpm
ruby-doc-3.1.7-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-bigdecimal-3.1.1-146.module+el9.5.0+90564+273a1edd.aarch64.rpm
rubygem-bundler-2.3.27-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-io-console-0.5.11-146.module+el9.5.0+90564+273a1edd.aarch64.rpm
rubygem-irb-1.4.1-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-json-2.6.1-146.module+el9.5.0+90564+273a1edd.aarch64.rpm
rubygem-minitest-5.15.0-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.aarch64.rpm
rubygem-mysql2-doc-0.5.4-1.module+el9.1.0+20815+286161bd.noarch.rpm
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.aarch64.rpm
rubygem-pg-doc-1.3.5-1.module+el9.1.0+20815+286161bd.noarch.rpm
rubygem-power_assert-2.0.1-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-psych-4.0.4-146.module+el9.5.0+90564+273a1edd.aarch64.rpm
rubygem-rake-13.0.6-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-rbs-2.7.0-146.module+el9.5.0+90564+273a1edd.aarch64.rpm
rubygem-rdoc-6.4.1.1-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-rexml-3.3.9-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-rss-0.3.1-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygems-3.3.27-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygems-devel-3.3.27-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-test-unit-3.5.3-146.module+el9.5.0+90564+273a1edd.noarch.rpm
rubygem-typeprof-0.21.3-146.module+el9.5.0+90564+273a1edd.noarch.rpm
ruby-libs-3.1.7-146.module+el9.5.0+90564+273a1edd.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//ruby-3.1.7-146.module+el9.5.0+90564+273a1edd.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.src.rpm

Related CVEs:

CVE-2024-39908
CVE-2024-41123
CVE-2024-41946
CVE-2024-43398
CVE-2025-27219
CVE-2025-27220
CVE-2025-27221

Description of changes:

ruby
[3.1.7-146]
- Upgrade to Ruby 3.1.7.
Resolves: RHEL-55410
- Fix DoS vulnerability in REXML. (CVE-2024-39908)
Resolves: RHEL-86077

ELSA-2025-4493 Moderate: Oracle Linux 9 ruby:3.3 security update

Oracle Linux Security Advisory ELSA-2025-4493

http://linux.oracle.com/errata/ELSA-2025-4493.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby-3.3.8-4.module+el9.5.0+90562+4bc8f111.i686.rpm
ruby-3.3.8-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
ruby-bundled-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.i686.rpm
ruby-bundled-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
ruby-default-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
ruby-devel-3.3.8-4.module+el9.5.0+90562+4bc8f111.i686.rpm
ruby-devel-3.3.8-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
ruby-doc-3.3.8-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-bigdecimal-3.1.5-4.module+el9.5.0+90562+4bc8f111.i686.rpm
rubygem-bigdecimal-3.1.5-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
rubygem-bundler-2.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-io-console-0.7.1-4.module+el9.5.0+90562+4bc8f111.i686.rpm
rubygem-io-console-0.7.1-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
rubygem-irb-1.13.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-json-2.7.2-4.module+el9.5.0+90562+4bc8f111.i686.rpm
rubygem-json-2.7.2-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
rubygem-minitest-5.20.0-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-mysql2-0.5.5-1.module+el9.4.0+90257+8524dee7.x86_64.rpm
rubygem-mysql2-doc-0.5.5-1.module+el9.4.0+90257+8524dee7.noarch.rpm
rubygem-pg-1.5.4-1.module+el9.4.0+90257+8524dee7.x86_64.rpm
rubygem-pg-doc-1.5.4-1.module+el9.4.0+90257+8524dee7.noarch.rpm
rubygem-power_assert-2.0.3-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-psych-5.1.2-4.module+el9.5.0+90562+4bc8f111.i686.rpm
rubygem-psych-5.1.2-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
rubygem-racc-1.7.3-4.module+el9.5.0+90562+4bc8f111.i686.rpm
rubygem-racc-1.7.3-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
rubygem-rake-13.1.0-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-rbs-3.4.0-4.module+el9.5.0+90562+4bc8f111.i686.rpm
rubygem-rbs-3.4.0-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm
rubygem-rdoc-6.6.3.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-rexml-3.3.9-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-rss-0.3.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygems-3.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygems-devel-3.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-test-unit-3.6.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-typeprof-0.21.9-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
ruby-libs-3.3.8-4.module+el9.5.0+90562+4bc8f111.i686.rpm
ruby-libs-3.3.8-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm

aarch64:
ruby-3.3.8-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
ruby-bundled-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
ruby-default-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
ruby-devel-3.3.8-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
ruby-doc-3.3.8-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-bigdecimal-3.1.5-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
rubygem-bundler-2.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-io-console-0.7.1-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
rubygem-irb-1.13.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-json-2.7.2-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
rubygem-minitest-5.20.0-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-mysql2-0.5.5-1.module+el9.4.0+90257+8524dee7.aarch64.rpm
rubygem-mysql2-doc-0.5.5-1.module+el9.4.0+90257+8524dee7.noarch.rpm
rubygem-pg-1.5.4-1.module+el9.4.0+90257+8524dee7.aarch64.rpm
rubygem-pg-doc-1.5.4-1.module+el9.4.0+90257+8524dee7.noarch.rpm
rubygem-power_assert-2.0.3-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-psych-5.1.2-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
rubygem-racc-1.7.3-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
rubygem-rake-13.1.0-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-rbs-3.4.0-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm
rubygem-rdoc-6.6.3.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-rexml-3.3.9-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-rss-0.3.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygems-3.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygems-devel-3.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-test-unit-3.6.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
rubygem-typeprof-0.21.9-4.module+el9.5.0+90562+4bc8f111.noarch.rpm
ruby-libs-3.3.8-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//ruby-3.3.8-4.module+el9.5.0+90562+4bc8f111.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//rubygem-mysql2-0.5.5-1.module+el9.4.0+90257+8524dee7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//rubygem-pg-1.5.4-1.module+el9.4.0+90257+8524dee7.src.rpm

Related CVEs:

CVE-2025-25186
CVE-2025-27219
CVE-2025-27221

Description of changes:

ruby
[3.3.8-4]
- Upgrade to Ruby 3.3.8.
Resolves: RHEL-86933
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
Resolves: RHEL-87182
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)

ELBA-2025-4490 Oracle Linux 9 podman bug fix update

Oracle Linux Bug Fix Advisory ELBA-2025-4490

http://linux.oracle.com/errata/ELBA-2025-4490.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
podman-5.2.2-16.0.1.el9_5.x86_64.rpm
podman-docker-5.2.2-16.0.1.el9_5.noarch.rpm
podman-plugins-5.2.2-16.0.1.el9_5.x86_64.rpm
podman-remote-5.2.2-16.0.1.el9_5.x86_64.rpm
podman-tests-5.2.2-16.0.1.el9_5.x86_64.rpm

aarch64:
podman-5.2.2-16.0.1.el9_5.aarch64.rpm
podman-docker-5.2.2-16.0.1.el9_5.noarch.rpm
podman-plugins-5.2.2-16.0.1.el9_5.aarch64.rpm
podman-remote-5.2.2-16.0.1.el9_5.aarch64.rpm
podman-tests-5.2.2-16.0.1.el9_5.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//podman-5.2.2-16.0.1.el9_5.src.rpm

Description of changes:

[5.2.2-16.0.1]
- podman: do not set rlimits to the default value [Orabug: 37310981]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

[4:5.2.2-16]
- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
( https://github.com/containers/podman/commit/da46fda)
- fixes "Rootless container libpod/tmp/persist directories not cleaned up, fill up tmpfs - [RHEL 9.5]"
- Resolves: RHEL-86866

ELSA-2025-4787 Moderate: Oracle Linux 9 emacs security update

Oracle Linux Security Advisory ELSA-2025-4787

http://linux.oracle.com/errata/ELSA-2025-4787.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
emacs-27.2-11.el9_5.2.x86_64.rpm
emacs-common-27.2-11.el9_5.2.x86_64.rpm
emacs-filesystem-27.2-11.el9_5.2.noarch.rpm
emacs-lucid-27.2-11.el9_5.2.x86_64.rpm
emacs-nox-27.2-11.el9_5.2.x86_64.rpm

aarch64:
emacs-27.2-11.el9_5.2.aarch64.rpm
emacs-common-27.2-11.el9_5.2.aarch64.rpm
emacs-filesystem-27.2-11.el9_5.2.noarch.rpm
emacs-lucid-27.2-11.el9_5.2.aarch64.rpm
emacs-nox-27.2-11.el9_5.2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//emacs-27.2-11.el9_5.2.src.rpm

Related CVEs:

CVE-2024-53920

Description of changes:

[1:27.2-11.el9_5.2]
- Fix arbitrary code execution via Lisp macro expansion (RHEL-69395)

ELBA-2025-20304 Oracle Linux 9 xfsprogs bug fix update

Oracle Linux Bug Fix Advisory ELBA-2025-20304

http://linux.oracle.com/errata/ELBA-2025-20304.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
xfsprogs-6.12.0-1.0.2.el9.i686.rpm
xfsprogs-6.12.0-1.0.2.el9.x86_64.rpm
xfsprogs-devel-6.12.0-1.0.2.el9.i686.rpm
xfsprogs-devel-6.12.0-1.0.2.el9.x86_64.rpm
xfsprogs-xfs_scrub-6.12.0-1.0.2.el9.x86_64.rpm

aarch64:
xfsprogs-6.12.0-1.0.2.el9.aarch64.rpm
xfsprogs-devel-6.12.0-1.0.2.el9.aarch64.rpm
xfsprogs-xfs_scrub-6.12.0-1.0.2.el9.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//xfsprogs-6.12.0-1.0.2.el9.src.rpm

Description of changes:

[6.12.0-1.0.2]
- Introduce xfs_defrag to xfsprogs.

[6.12.0-1.0.1]
- Add mkfs configuration files for OL.
- Add mkfs.xmem script.
- Enable background online fsck services by default. Users must set autofsck=1 on their filesystems.
- Rebase atop latest upstream.

Nginx, OpenShift, Yggdrasil, Ghostscript, .NET, Satellite updates for RHEL

RabbitMQ-Server, Apparmor, Kernel-Devel, and more updates for SUSE

Cloud-Init, Kernel, 389-DS-Base, and more updates for Oracle Linux

ELBA-2025-4486 Oracle Linux 9 cloud-init bug fix update

ELSA-2025-20318 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

ELSA-2025-20320 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

ELSA-2025-4669 Important: Oracle Linux 9 osbuild-composer security update

ELBA-2025-20316 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update

ELSA-2025-4491 Moderate: Oracle Linux 9 389-ds-base security update

ELBA-2025-4792 Oracle Linux 9 e2fsprogs bug fix update

ELSA-2025-4487 Moderate: Oracle Linux 9 ruby security update

ELSA-2025-4492 Moderate: Oracle Linux 9 qemu-kvm security update

ELBA-2025-4489 Oracle Linux 9 virt-v2v bug fix update

ELSA-2025-20323 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

ELSA-2025-4488 Moderate: Oracle Linux 9 ruby:3.1 security update

ELSA-2025-4493 Moderate: Oracle Linux 9 ruby:3.3 security update

ELBA-2025-4490 Oracle Linux 9 podman bug fix update

ELSA-2025-4787 Moderate: Oracle Linux 9 emacs security update

ELBA-2025-20304 Oracle Linux 9 xfsprogs bug fix update

Windows

Linux

macOS

Community