- !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - !21713 Fix CVE-2026-23440 - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - !21682 Fix CVE-2026-31399 - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - !21720 urma: fix bind jetty compat error - !21693 Introduce dmem cgroup - net/mlx5e: Fix race condition during IPSec ESN update - !21712 Fix CVE-2026-23441 - urma: fix bind jetty compat error - !21630 urma: change urma kmod errno - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide() - net/mlx5e: Prevent concurrent access to IPSec ASO context - urma: change urma kmod errno - !21690 urma:delete redundant sub_trans_mode_cap in urma - !21648 RDMA/hns: Fix config the CNP DSCP - !21632 media: dvb-net: fix OOB access in ULE extension header tables - !21692 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma:delete redundant sub_trans_mode_cap in urma - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21695 urma: Create jetty with kernel thread - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21684 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - urma: Create jetty with kernel thread - !21687 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - !21685 urma: Create jetty with kernel thread - !21502 urma: bonding support health check - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI - cgroup/dmem: avoid pool UAF - cgroup/dmem: avoid rcu warning when unregister region - cgroup/dmem: fix NULL pointer dereference when setting max - cgroup/dmem: Don't open-code css_for_each_descendant_pre - cgroup/rdma: Drop bogus PAGE_COUNTER select - doc/cgroup: Fix title underline length - cgroup/dmem: Fix parameters documentation - kernel/cgroup: Remove the unused variable climit - cgroup/dmem: Select PAGE_COUNTER - kernel/cgroup: Add "dmem" memory accounting cgroup - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG - mm/page_counter: move calculating protection values to page_counter - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN - urma: Create jetty with kernel thread - urma: bonding support health check - !21520 urma: add software reliability for create and destroy connection - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove - urma: add software reliability for create and destroy connection - !21668 v4 Reuse SUBSYS for xcu and freezer to preserve KABI - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario - nvdimm/bus: Fix potential use after free in asynchronous initialization - !21671 Fix CVE-2026-23269 - !21526 tcp: secure_seq: add back ports to TS offset - !21602 Fix CVE-2026-31408 - !21593 Fix CVE-2026-31393 - !21557 ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression - !21606 ice: Fix memory leak in ice_set_ringparam() - !21645 bpf: Fix regsafe() for pointers to packet - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel - !21662 [OLK-6.6]:update patches for sw64 architecture - !21670 urma: change well-known jetty to UM - !21669 urma: adjust netlink log level of ipourma - apparmor: validate DFA start states are in bounds in unpack_pdb - urma: change well-known jetty to UM - urma: adjust netlink log level of ipourma - !21646 icmp: fix NULL pointer dereference in icmp_tag_validation() - !21636 v2 net/sched: Fix CVE-2026-23378 - xSched: update xSched manual for xcu cmdline enable option - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16 - xSched/cgroup: make xcu.stat invisible at root cgroup - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI - !21641 Fix CVE-2026-23407 - !21651 spi: fix use-after-free on controller registration failure - !21652 PM: runtime: Fix a race condition related to device removal - !21639 Fix CVE-2026-23406 - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0 - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables - f2fs: fix to detect potential corrupted nid in free_nid_list - ntfs3: Fix uninit buffer allocated by __getname() - nvme-pci: Fix race bug in nvme_poll_irqdisable() - tls: Purge async_hold in tls_decrypt_async_wait() - clsact: Fix use-after-free in init/destroy rollback asymmetry - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - apparmor: fix race between freeing data and fs accessing it - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - urma: fix race condition in async event causing kfree of invalid pointer - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nfnetlink_osf: validate individual option lengths in fingerprints - tls: Fix race condition in tls_sw_cancel_work_tx() - urma: Kernel-mode file for bugfix of vtpn of empty pointer - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - af_unix: Give up GC if MSG_PEEK intervened. - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - apparmor: fix differential encoding verification - ub:hisi-ubus: Synchronize the missing code - apparmor: Fix double free of ns_name in aa_replace_profiles() - mptcp: pm: in-kernel: always mark signal+subflow endp as used - bridge: cfm: Fix race condition in peer_mep deletion - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - apparmor: fix race on rawdata dereference - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - net/sched: act_gate: snapshot parameters with RCU on replace - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - netfilter: nf_tables: always walk all pending catchall elements - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nf_tables: release flowtable after rcu grace period on error - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - netfilter: xt_CT: drop pending enqueued packets on template removal - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - apparmor: fix memory leak in verify_header - wifi: libertas: fix use-after-free in lbs_free_adapter() - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - can: bcm: fix locking for bcm_op runtime updates - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - urma: fix potential deadlock risk in urma_ping - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - net: usb: kalmia: validate USB endpoints - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - urma: use user-specified dev_name when creating agg dev - mm: thp: deny THP for files on anonymous inodes - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !20531 [OLK-6.6] Fix CVE-2025-68315 - !20546 [OLK-6.6] Fix CVE-2025-68727 - !21588 smb/server: fix return values of smb2_0_server_cmds proc - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !21551 Fix CVE-2026-23414 - !21549 Fix CVE-2026-23413 - !21611 nf_tables: nft_dynset: fix possible stateful expression memleak in error path - !21610 xdp: Fix CVE-2026-23343 - !21625 Fix CVE-2026-23411 - sw64: fix compile error with missing arch-specific header file - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default - !21627 Fix riscv check-build warning - !21412 urma: change well-known jetty to UM - !21623 sched/fair: scale wake_wide() threshold by SMT width - PM: runtime: Fix a race condition related to device removal - spi: fix use-after-free on controller registration failure - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - !21629 urma: fix race condition in async event causing kfree of invalid pointer - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21618 apparmor: replace recursive profile removal with iterative approach - !21617 apparmor: fix: limit the number of levels of policy namespaces - !21484 Fix CVE-2026-23397 - !21499 Fix CVE-2026-23240 - RDMA/hns: Fix config the CNP DSCP - RDMA/hns: Fix the panic caused by a large number of print - sched/fair: scale wake_wide() threshold by SMT width - sched/core: fix SCHED_FEAT overflow on 32-bit architectures - icmp: fix NULL pointer dereference in icmp_tag_validation() - bpf: Fix regsafe() for pointers to packet - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer - !21619 Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix side-effect bug in match_char() macro usage - urma: fix race condition in async event causing kfree of invalid pointer - urma: Kernel-mode file for bugfix of vtpn of empty pointer - net/sched: act_ife: Fix metalist update behavior - net/sched: act_ife: avoid possible NULL deref - !21522 af_unix: Give up GC if MSG_PEEK intervened. - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active - media: dvb-net: fix OOB access in ULE extension header tables - !21582 Fix CVE-2026-23409 - urma: change well-known jetty to UM - !21600 ub:hisi-ubus: Synchronize the missing code - !21528 Fix CVE-2026-23408 - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks" - riscv: Replace function-like macro by static inline function - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid() - apparmor: fix race between freeing data and fs accessing it - ub:hisi-ubus: Synchronize the missing code - !21477 Fix CVE-2026-23321 - !21533 Fix CVE-2026-23393 - !21470 Fix CVE-2026-23304 - !21338 drivers/ub/sentry: add oom rate limit - !21517 Fix CVE-2026-23410 - !21550 Fix CVE-2026-23351 - !21560 Fix CVE-2026-23245 - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: unregister xenstore notifier on module exit - xen/privcmd: restrict usage in unprivileged domU - apparmor: replace recursive profile removal with iterative approach - apparmor: fix: limit the number of levels of policy namespaces - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - ice: Fix memory leak in ice_set_ringparam() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - !21547 Fix CVE-2026-23310 - !21558 Fix CVE-2026-23278 - !21538 Fix CVE-2026-23274 - !21548 Fix CVE-2026-23340 - !21561 Fix CVE-2026-23272 - !21543 Fix CVE-2026-23392 - !21541 Fix CVE-2026-23270 - !21542 Fix CVE-2026-23391 - !21536 Fix CVE-2026-23277 - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - !21531 ACPI/IORT: Add PMCG platform information for 162001900 - smb/server: update some misguided comment of smb2_0_server_cmds proc - smb/server: fix return value of smb2_oplock_break() - smb/server: fix return value of smb2_ioctl() - smb/server: fix return value of smb2_query_dir() - smb/server: fix return value of smb2_notify() - smb/server: fix return value of smb2_read() - !21500 regmap: maple: free entry on mas_store_gfp() failure - drivers/ub/sentry: add oom rate limit - apparmor: fix differential encoding verification - !21511 Fix CVE-2026-23403 - !21559 wifi: libertas: fix use-after-free in lbs_free_adapter() - !21554 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - urma: Kernel-mode file for bugfix deactivate to apply pid in udma - netfilter: nf_tables: unconditionally bump set->nelems before insertion - !21476 Fix CVE-2026-23300 - !21475 Fix CVE-2026-23381 - !21472 Fix CVE-2026-23362 - !21474 Fix CVE-2026-23368 - !21471 Fix CVE-2026-23293 - !21527 CVE-2026-23276 - !21525 net: gro: fix outer network offset - !21524 net: annotate data-races around sk->sk_{data_ready,write_space} - !21523 net: add proper RCU protection to /proc/net/ptype - net/sched: act_gate: snapshot parameters with RCU on replace - wifi: libertas: fix use-after-free in lbs_free_adapter() - netfilter: nf_tables: always walk all pending catchall elements - !21552 nvme-fc: release admin tagset if init fails - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback - !21544 urma: fix potential deadlock risk in urma_ping - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - !21486 Fix CVE-2026-23395 - !21480 Fix CVE-2026-23371 - !21507 net: usb: kalmia: validate USB endpoints - nvme-fc: release admin tagset if init fails - tls: Purge async_hold in tls_decrypt_async_wait() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - clsact: Fix use-after-free in init/destroy rollback asymmetry - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - urma: Kernel-mode file for bugfix to move hashtable from alloc to active - urma: fix potential deadlock risk in urma_ping - !21516 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - bridge: cfm: Fix race condition in peer_mep deletion - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - !21530 urma: use user-specified dev_name when creating agg dev - urma: use user-specified dev_name when creating agg dev - apparmor: Fix double free of ns_name in aa_replace_profiles() - net: prevent NULL deref in ip[6]tunnel_xmit() - net: add xmit recursion limit to tunnel xmit functions - tcp: secure_seq: add back ports to TS offset - net: gro: fix outer network offset - net: annotate data-races around sk->sk_{data_ready,write_space} - net: add proper RCU protection to /proc/net/ptype - af_unix: Give up GC if MSG_PEEK intervened. - apparmor: fix race on rawdata dereference - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - apparmor: fix memory leak in verify_header - net: usb: kalmia: validate USB endpoints - !21492 mm: thp: deny THP for files on anonymous inodes - !21491 net: usb: pegasus: validate USB endpoints - nvme-pci: Fix race bug in nvme_poll_irqdisable() - !21466 mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - regmap: maple: free entry on mas_store_gfp() failure - tls: Fix race condition in tls_sw_cancel_work_tx() - !21447 Fix CVE-2026-23303 - !21120 Fix CVE-2026-23231 - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches - mm: thp: deny THP for files on anonymous inodes - net: usb: pegasus: validate USB endpoints - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair() - !21488 urma: adjust netlink log level of ipourma - !21433 urma: adjust the payload length in the ubcore_cm_send_to function - urma: adjust netlink log level of ipourma - xhci: dbgtty: fix device unregister: fixup - tty: introduce and use tty_port_tty_vhangup() helper - net: dsa: microchip: Fix error path in PTP IRQ setup - can: ucan: Fix infinite loop from zero-length messages - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - tools headers: Update the x86 headers with the kernel sources - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - nfnetlink_osf: validate individual option lengths in fingerprints - selftests: mptcp: join: properly kill background tasks - staging: rtl8712: Remove driver using deprecated API wext - net: macb: fix unregister_netdev call order in macb_remove() - iio: adc: rtq6056: Correct the sign bit index - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: common: Fix checks on irq_find_mapping() - drm/amd/display: Check NULL before accessing - drm: sti: fix device leaks at component probe - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - xhci: dbgtty: fix device unregister - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: pci: Sort out the Intel device IDs - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: renesas_usbhs: Fix synchronous external abort on unbind - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: cdns3: Fix double resource release in cdns3_pci_probe - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - mptcp: clear scheduled subflows on retransmit - firmware: stratix10-svc: fix bug in saving controller data - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - thunderbolt: Add support for Intel Wildcat Lake - drivers/usb/dwc3: fix PCI parent check - dm-verity: fix unreliable memory allocation - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: sja1000: fix max irq loop handling - atm/fore200e: Fix possible data race in fore200e_open() - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: accel: fix ADXL355 startup race condition - iio: accel: bmc150: Fix irq assumption regression - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: spi-mem: Add a new controller capability - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - mailbox: pcc: don't zero error register - mailbox: mailbox-test: Fix debugfs_create_dir error checking - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - net: fec: do not register PPS event for PEROUT - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not update PEROUT if it is enabled - net: fec: cancel perout_timer when PEROUT is disabled - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: lan966x: Fix the initialization of taprio - net: aquantia: Add missing descriptor cache invalidation on ATL2 - platform/x86: intel: punit_ipc: fix memory corruption - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - mptcp: pm: in-kernel: always mark signal+subflow endp as used - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - can: bcm: fix locking for bcm_op runtime updates - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - mptcp: fix a race in mptcp_pm_del_add_timer() - HID: amd_sfh: Stop sensor before starting - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - uio_hv_generic: Set event for all channels on the device - tracing/tools: Fix incorrcet short option in usage text for --threads - ALSA: usb-audio: fix uac2 clock source at terminal parser - s390/mm: Fix __ptep_rdp() inline assembly - kconfig/nconf: Initialize the default locale at startup - kconfig/mconf: Initialize the default locale at startup - net: tls: Cancel RX async resync request on rcd_delta overflow - selftests: net: use BASH for bareudp testing - x86/microcode/AMD: Limit Entrysign signature checking to known generations - scsi: core: Fix a regression triggered by scsi_host_busy() - cifs: fix typo in enable_gcm_256 module parameter - bcma: don't register devices disabled in OF - LoongArch: Use UAPI types in ptrace UAPI header - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - s390/ctcm: Fix double-kfree - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: dsa: hellcreek: fix missing error handling in LED registration - drm/tegra: Add call to put_pid() - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: Determine inner GSO type from packet inner protocol - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Increase DPCD read retries - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - mptcp: do not fallback when OoO is present - mptcp: avoid unneeded subflow-level drops - mptcp: fix premature close in case of fallback - mptcp: fix ack generation for fallback msk - mptcp: fix race condition in mptcp_schedule_work() - LoongArch: Don't panic if no valid cache info for PCI - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: imx_sc_key - fix memory corruption on unload - Input: goodix - add support for ACPI ID GDIX1003 - Input: cros_ec_keyb - fix an invalid memory access - net: dsa: microchip: lan937x: Fix RGMII delay tuning - smb: client: introduce close_cached_dir_locked() - mptcp: Disallow MPTCP subflows from sockmap - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - shmem: fix tmpfs reconfiguration (remount) when noswap is set - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - urma: adjust the payload length in the ubcore_cm_send_to function - tools headers: Update the KVM headers with the kernel sources - KVM: SVM: Add Idle HLT intercept support - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept - perf vendor events amd: Update Zen 5 data cache fill events - perf vendor events amd: Add Zen 5 data fabric metrics - perf vendor events amd: Add Zen 5 data fabric events - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - ntfs3: Fix uninit buffer allocated by __getname() - f2fs: fix to detect potential corrupted nid in free_nid_list - !22077 bpf: Fix the use of prog->axu->sleepable - bpf: Fix the use of prog->axu->sleepable - !21981 Fix CVE-2026-31415 - !21980 Fix CVE-2026-31416 - !21984 Fix CVE-2026-31427 - !21979 Fix CVE-2026-31428 - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel. - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h - !21818 update rnpm driver to version 1.0.0. - !22035 v3 critical err extend - !21882 v2 mainline bpf patch - !22020 ub: udma: fix a bug related to free rcu mem - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes - numa: add critical_err sysfs interface for remote node recovery - mm: mark node as critical_err on remote RAS error - !21916 Fix CVE-2026-31528 - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support - ub: udma: fix a bug related to free rcu mem - ub: ubase: Add a soft dependency declaration for the ubase driver - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed - ub: ubase: Verify the length of ctrlq rq msg - !21971 net: hns3: set the freed pointer to NULL - !21995 bpf: Load vmlinux btf for any struct_ops map - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。 - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集 - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel - gpio: rockchip: Stop calling pinctrl for set_direction - ub: ubase: debugfs supports tpg context query - bpf: Load vmlinux btf for any struct_ops map - gpio: pca953x: fix wrong error probe return value - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - ASoC: fsl_sai: Add missing registers to cache default - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ALSA: usb-audio: Update for native DSD support quirks - can: j1939: make j1939_session_activate() fail if device is no longer registered - drm/amd/display: Fix DP no audio issue - powercap: fix sscanf() error return value handling - powercap: fix race condition in register_control_type() - NFS: trace: show TIMEDOUT instead of 0x6e - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ac97bus: Use guard() for mutex locks - HID: quirks: work around VID/PID conflict for appledisplay - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net/mlx5e: Don't print error message due to invalid module - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - inet: ping: Fix icmp out counting - net: mscc: ocelot: Fix crash when adding interface under a lag - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: Utilise temporary variable for struct device - gpio: pca953x: Utilise dev_err_probe() where it makes sense - netfilter: nft_synproxy: avoid possible data-race on update operation - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - ARM: dts: imx6q-ba16: fix RTC interrupt level - arm64: dts: add off-on-delay-us for usdhc2 regulator - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - NFS: Fix up the automount fs_context to use the correct cred - NFSv4: ensure the open stateid seqid doesn't go backwards - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - alpha: don't reference obsolete termio struct for TC* constants - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - csky: fix csky_cmpxchg_fixup not working - nfsd: convert to new timestamp accessors - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - gpio: rockchip: mark the GPIO controller as sleeping - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/pl111: Fix error handling in pl111_amba_probe - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - counter: 104-quad-8: Fix incorrect return value in IRQ handler - lib/crypto: aes: Fix missing MMU protection for AES S-box - mei: me: add nova lake point S DID - btrfs: always detect conflicting inodes when logging inode refs - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - atm: Fix dma_free_coherent() size - NFSD: Fix permission check for read access to executable-only files - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS - irqchip/mbigen: hardcode gicr_base for HIP12 - irqchip/mbigen: add HIP12 support for vtimer irq bypass - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore - irqchip/mbigen: add check for GICv4.1 before enabling vtimer - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm - ipv6: avoid overflows in ip6_datagram_send_ctl() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21969 kprobes: avoid crash when rmmod/insmod after ftrace killed - net: hns3: set the freed pointer to NULL - net: hns3: add support to query/set pfc_prevention_tout for ethtool - urma: add rate limit for high-frequency error logs in ubmad and ubcm - net: hns3: debugfs support for dumping fd rules - net: hns3: support tc flow for vf - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow - net: hns3: support two more actions for tc flow - net: hns3: Improved the unused_tuple parameter setting. - net: hns3: adjust add_cls_flower() for support more action - net: hns3: Clear the static alarm about 'no previous prototype' - net: hns3: Clear the static alarm about discarding the 'const' qualifier - !21819 Support sched ext bpf-part - kprobes: avoid crash when rmmod/insmod after ftrace killed - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails - !21903 ptt: Adapt the PTT tune event name in the document match to the actual - !21852 scsi: hisi_sas: Correct the printing format issues - !21914 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21960 udma：fix ub udma set dev name style - !21955 urma: check driver and wq duration for conn_err - !21956 urma: rate-limit error logs across ubcore - udma：fix ub udma set dev name style - urma: rate-limit error logs across ubcore - !21932 urma: fix ubcore_get_device_by_eid without put. - ub:hisi-ubus: add soft dep of ummu for hisi_ubus - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status - urma: fix ubcore_get_device_by_eid without put. - kvm: arm64: set default early time for HIP12 - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface - arm64: paravirt: Implement timer early inject PV guest support - kvm: arm64: Implement timer early inject PV hypcall handling - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write - !21929 urma: use user-specified ue_idx for bonding import exchange - urma: use user-specified ue_idx for bonding import exchange - !21701 urma: fix ubcore_get_device_by_eid uaf. - !21706 urma: fix double put ubagg_dev. - !21919 sched/fair: Clear rel_deadline when initializing forked entities - KVM: arm64: Implement vtimer active status MMIO handling - KVM: arm64: vgic: Add is_uaccess parameter for active state handling - irqchip/gic-v3: Report vtimer active status to hypervisor - arm64: paravirt: Add pvtimer status support for guest - KVM: arm64: Provide VCPU attributes for pvtimer status - KVM: arm64: Add vCPU pvtimer_status structure and initialization - !21883 urma: Fix UAF risk in the ubagg_dev_exists function - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path - urma: fix double put ubagg_dev. - !21906 mfs: handle file system umount event - urma: fix ubcore_get_device_by_eid uaf. - sched/fair: Clear rel_deadline when initializing forked entities - !21889 urma: ubcore_get_tp_list log ratelimit - perf: Make sure to use pmu_ctx->pmu for groups - perf: Fix kabi breakage of perf_output_handle - perf: Avoid the read if the count is already updated - perf: Extract a few helpers - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations - !21908 ub/ubmempfd: Fix issues from AI and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors - ub/ubmempfd: Fix issues from AI - ub/ubdevshm: Optimize print format - ub/ubdevshm: Fix issues from AI. - scsi: hisi_sas: Correct printing format issues - !21898 Fix CVE-2026-31473 - EDAC/amd64: Add support for Hygon family 18h model 18h - EDAC/amd64: Convert Hygon family 18h model checks to switch-case - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - !21910 urma: switch to acalloc for large memory allocation - !21891 urma: fix wk-jetty send implementation - urma: switch to acalloc for large memory allocation - urma: fix wk-jetty send implementation - !21894 sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - ub/ubdevshm: Bugfix for multi-Ops with same va. - ub/ubdevshm: Optimize functions to improve readability. - mfs: handle file system umount event - mfs: notify user-space programs when it is being unmounted - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel - ptt: Adapt the PTT tune event name in the document match to the actual names in the code. - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。 - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。 - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集 - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare - x86/copy_user_avx2: add sfence before vzeroupper in fixup path - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - !21895 Fix CVE-2026-31467 - erofs: add GFP_NOIO in the bio completion if needed - sched/ebpf: Fix bpf_sched_set_task_prefer_nid() - !21884 v2 fix CVE-2026-31398 - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed - LoongArch: KVM: rename extioi to eiointc - LoongArch: KVM: Remove duplicated cache attribute setting - LoongArch: KVM: Set page with write attribute if dirty track disabled - LoongArch: KVM: Simplify kvm_deliver_intr() - LoongArch: KVM: Rework kvm_send_pv_ipi() - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code - LoongArch: KVM: Add PTW feature detection on new hardware - LoongArch: KVM: Remove unused returns and semicolons - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits - LoongArch: KVM: Add ecode parameter for exception handlers - LoongArch: KVM: Fully clear some CSRs when VM reboot - LoongArch: KVM: Fix multiple typos of KVM code - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() - LoongArch: KVM: Remove unnecessary header include path - LoongArch: KVM: Set host with kernel mode when switch to VM mode - LoongArch: KVM: Fix typo issue about GCFG feature detection - LoongArch: KVM: Protect kvm_check_requests() with SRCU - LoongArch: KVM: Fix GPA size issue about VM - LoongArch: KVM: Adapt pch_pic alignment check - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() - LoongArch: KVM: Adapt send_ipi_data() stack protector fix - LoongArch: KVM: Make function kvm_own_lbt() robust - ub: udma: Delete the mailbox memory allocation and release in UDMA - ub: ubase: Release the MAILBOX memory when AE is received - x86/mce/amd: Filter bogus hardware errors on Zen3 clients - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs - mm/rmap: fix incorrect pte restoration for lazyfree folios - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure - mm: remove boolean output parameters from folio_pte_batch_ext() - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() - mm: smaller folio_pte_batch() improvements - mm: convert FPB_IGNORE_* into FPB_RESPECT_* - mm: fix folio_pte_batch() on XEN PV - x86/mce: Handle AMD threshold interrupt storms - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/mce: Add support for physical address valid bit - x86/mce: Save and use APEI corrected threshold limit - x86/mce/amd: Define threshold restart function for banks - x86/mce/amd: Remove redundant reset_block() - x86/mce/amd: Support SMCA Corrected Error Interrupt - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems - x86/mce: Unify AMD DFR handler with MCA Polling - x86/mce: Unify AMD THR handler with MCA Polling - x86/mce: Add a clear_bank() helper - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers - tracing: Add __print_dynamic_array() helper - x86/mce: Move machine_check_poll() status checks to helper functions - x86/mce: Separate global and per-CPU quirks - x86/mce: Convert family/model mixed checks to VFM-based checks - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references - x86/mce: Cleanup bank processing on init - x86/mce: Do 'UNKNOWN' vendor check early - x86/mce: Break up __mcheck_cpu_apply_quirks() - x86/mce: Make four functions return bool - x86/mce: Make several functions return bool - x86/mce: Add wrapper for struct mce to export vendor specific info - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields - x86/mce: Rename mce_setup() to mce_prep_record() - x86/mce: Remove unused variable and return value in machine_check_poll() - x86/mce: Switch to new Intel CPU model defines - x86/mce: Dynamically size space for machine check records - x86/mce: Remove redundant check from mce_device_create() - x86/mce: Cleanup mce_usable_address() - x86/mce: Define amd_mce_usable_address() - x86/MCE/AMD: Split amd_mce_is_memory_error() - x86/cpu: Clear SVM feature if disabled by BIOS - x86/mce: Define BSP-only SMCA init - x86/mce: Define BSP-only init - x86/mce: Set CR4.MCE last during init - x86/mce: Remove __mcheck_cpu_init_early() - x86/mce/amd: Put list_head in threshold_bank - x86/mce/amd: Remove shared threshold bank plumbing - x86/mce/amd: Remove smca_banks_map - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() - x86/mce/amd: Rename threshold restart function - x86/mce: Ensure user polling settings are honored when restarting timer - x86/mce: Add per-bank CMCI storm mitigation - x86/mce: Remove old CMCI storm mitigation code - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - EDAC/amd64: Add support for AMD family 1Ah-based newer models - x86/CPU/AMD: Add X86_FEATURE_ZEN6 - x86/cpufeatures: Free up unused feature bits - urma: Fix UAF risk in the ubagg_dev_exists function - bpf: Fix incorrect pruning due to atomic fetch precision tracking - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Reject sleepable kprobe_multi programs at attach time - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 - LoongArch: Adapt upstream backport for openEuler - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1 - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel - !21867 urma: fix kernel irq profiling - !21868 urma: fix peer reconnection notification after ubagg failover - pwm: dwc: Add support for Hygon pwm controller - urma: fix kernel irq profiling - !21746 xSched dmem - !21824 v2 Introduce xSched dmem - !21865 urma: fix the panic issue caused by ipourma abnormal exit - !21866 urma: add configurable retransmission count limit - urma: fix peer reconnection notification after ubagg failover - urma: add configurable retransmission count limit - !21859 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches - !21858 ub: udma: fix a bug related to get tp list. - urma: fix the panic issue caused by ipourma abnormal exit - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table. - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size. - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - !21855 perf/core: Fix race between perf_event_exit_task and perf_pending_task - ub: udma: fix a bug related to get tp list. - !21176 v4 Fix CVE-2025-21696. - !21844 mm/numa_remote: set default distance between remote nodes to 255 - !21839 urma: add timeout mechanism for TP state waiting loop - !21840 ub: udma: bugfix related to stars jfc db. - !21856 net: usb: kaweth: validate USB endpoints - !21854 arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - !21845 RDMA/hns: Support setting GSI QP SL - net: usb: kaweth: validate USB endpoints - perf/core: Fix race between perf_event_exit_task and perf_pending_task - !21846 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - !21851 drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys - urma: add timeout mechanism for TP state waiting loop - !21847 urma: fix log implementation in urma kmod - !21848 urma: fix deactivate tp failure under RM share TP mode - urma: fix log implementation in urma kmod - !21849 urma: fix tjetty creation anomaly in the first connection creation - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - urma: fix tjetty creation anomaly in the first connection creation - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Introduce gem_init_rx_ring() - net: macb: queue tie-off or disable during WOL suspend - net: macb: Shuffle the tx ring before enabling tx - net: macb: Fix tx/rx malfunction after phy link down and up - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - net: openvswitch: Avoid releasing netdev before teardown completes - ext4: fix error message when rejecting the default hash - ext4: filesystems without casefold feature cannot be mounted with siphash - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - firmware: arm_scmi: Fix unused notifier-block in unregister - tty: fix tty_port_tty_*hangup() kernel-doc - pwm: stm32: Always program polarity - virtio_console: fix order of fields cols and rows - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - net: Allow to use SMP threads for backlog NAPI. - net: Remove conditional threaded-NAPI wakeup based on task state. - sched/fair: Small cleanup to sched_balance_newidle() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: amphion: Remove vpu_vb_is_codecconfig - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Add a frame flush mode for decoder - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Store chroma and motion vectors offset - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: use global inline_xattr_slab instead of per-sb slab cache - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to avoid updating compression context during writeback - f2fs: drop inode from the donation list when the last file is closed - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - drm/mediatek: Fix probe resource leaks - drm/mediatek: Fix probe memory leak - drm/amdgpu: Forward VMID reservation errors - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: Use device_get_match_data() - wifi: mac80211: Discard Beacon frames to non-broadcast address - lockd: fix vfs_test_lock() calls - mptcp: fallback earlier on simult connection - PCI: brcmstb: Fix disabling L0s capability - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - gpiolib: acpi: Add quirk for Dell Precision 7780 - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - mm/ksm: fix exec/fork inheritance support for prctl - wifi: mt76: Fix DTS power-limits on little endian systems - btrfs: don't rewrite ret from inode_permission - gfs2: fix freeze error handling - jbd2: fix the inconsistency between checksum and data in memory for journal sb - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use standard print API - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/mgag200: Fix big-endian support - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: usb: sr9700: fix incorrect command used to write single register - nfsd: Drop the client reference in client_states_open() - LoongArch: BPF: Zero-extend bpf_tail_call() index - fjes: Add missing iounmap in fjes_hw_init() - samples/ftrace: Adjust LoongArch register restore order in direct calls - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - idr: fix idr_alloc() returning an ID out of range - kasan: refactor pcpu kasan vmalloc unpoison - compiler_types.h: add "auto" as a macro for "__auto_type" - LoongArch: Use unsigned long for _end and _text - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Add new PCI ID for pci_fixup_vgadev() - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: amphion: Cancel message work before releasing the VPU core - media: vpif_display: fix section mismatch - media: vpif_capture: fix section mismatch - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: cec: Fix debugfs leak on bus_register() failure - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: gbefb: fix to use physical address instead of dma address - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - firmware: stratix10-svc: Add mutex in stratix10 memory management - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - media: rc: st_rc: Fix reset control resource leak - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - clk: samsung: exynos-clkout: Assign .num before accessing .hws - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp50xx: Allow LED 0 to be added to module bank - powerpc, mm: Fix mprotect on book3s 32-bit - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - HID: logitech-dj: Remove duplicate error logging - iommu: disable SVA when CONFIG_X86 is set - iommu/tegra: fix device leak on probe_device() - iommu/sun50i: fix device leak on of_xlate() - iommu/qcom: fix device leak on of_xlate() - iommu/omap: fix device leaks on probe_device() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek-v1: fix device leaks on probe() - iommu/mediatek-v1: fix device leak on probe_device() - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/exynos: fix device leak on of_xlate() - iommu/apple-dart: fix device leak on of_xlate() - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ntfs: Do not overwrite uptodate pages - selftests/ftrace: traceonoff_triggers: strip off names - !21826 Fix CVE-2026-23448 - urma: fix deactivate tp failure under RM share TP mode - !21834 net: add sockopt TCP_UBS_HANDSHAKE - !21760 Fix CVE-2026-31392 - !21833 FIX CVE-2026-23473 - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz - xsk: introduce helper to determine rxq->frag_size - RDMA/hns: Support setting GSI QP SL - RDMA/hns: Fix warning in poll cq direct mode - RDMA/hns: Fix missing CQE when UD QP use different SL - mm/numa_remote: set default distance between remote nodes to 255 - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集 - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集 - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集 - ub: udma: bugfix related to stars jfc db. - !21822 urma: fix of adapt to bondp_import - net: add sockopt TCP_UBS_HANDSHAKE - !21827 Fix CVE-2026-31426 - !21835 ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - !21836 jfs: add dmapctl integrity check to prevent invalid operations - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - ksmbd: Fix memory leak in get_file_all_info() - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/efa: Remove possible negative shift - RDMA/irdma: avoid invalid read in irdma_net_event - net: rose: fix invalid array index in rose_kill_by_device() - net: stmmac: fix the crash issue for zero copy XDP_TX action - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: dsa: b53: skip multicast entries for fdb_dump() - firewire: nosy: Fix dma_free_coherent() size - genalloc.h: fix htmldocs warning - selftests: net: fix "buffer overflow detected" for tap.c - amd-xgbe: reset retries and mode on RX adapt failures - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: msi-laptop: add missing sysfs_remove_group() - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: mdio: aspeed: add dummy read to avoid read-after-write issue - Bluetooth: btusb: revert use of devm_kzalloc in btusb - i40e: fix scheduling in set_rx_mode - wifi: mac80211: do not use old MBSSID elements - iommu/mediatek: fix use-after-free on probe deferral - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (max16065) Use local variable to avoid TOCTOU - i2c: amd-mp2: fix reference leak in MP2 PCI device - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - rpmsg: glink: fix rpmsg device leak - jfs: add dmapctl integrity check to prevent invalid operations - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors - rnpm: update rnpm driver to version 1.0.0. - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: improve readability of poll reference decrementing - urma: fix of adapt to bondp_import - !21788 Fix CVE-2026-23455 - !21789 Fix CVE-2026-23449 - !21815 Fix CVE-2026-23456 - !21787 Fix CVE-2026-23457 - !21785 Fix CVE-2026-23458 - !21781 Fix CVE-2026-23439 - !21786 Fix CVE-2026-23442 - !21777 Fix CVE-2026-23450 - !21780 Fix CVE-2026-31400 - !21821 urma: fix psn exchange anomaly when import jfr - LoongArch: efi: avoid double calling set_virtual_map() - LoongArch: Fix the improper handling of the set_virtual_map's return value - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - LoongArch: Disable instrumentation for setup_ptwalker() - !21817 mfs: remove anon_file item from struct mfs_cache_object - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - LoongArch: Remove some code if kasan_arch_is_ready() is false - !21689 spi: fix statistics allocation - !21624 mfs: fix race condition issue in try_hook_fd() - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集 - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - xSched/dmem: introduce xsched_dmem_cleanup() - xSched/dmem: introduce xsched_dmem_free() - xSched/dmem: introduce xsched_dmem_alloc() - xSched/dmem: add support for XPU devices to register/unregister dmem regions - urma: fix psn exchange anomaly when import jfr - !21798 urma: fix psn exchange anomaly under share_tp mode - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0 - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0 - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c - selftests/bpf: Add file_read_pattern to gitignore - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED - libbpf: Fix return zero when elf_begin failed - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing - selftests/bpf: Use -4095 as the bad address for bits iterator - selftests/bpf: Add three test cases for bits_iter - bpf: Use __u64 to save the bits in bits iterator - bpf: Check the validity of nr_words in bpf_iter_bits_new() - bpf: Add bpf_mem_alloc_check_size() helper - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() - selftests/bpf: Check if distilled base inherits source endianness - libbpf: Ensure new BTF objects inherit input endianness - bpf: Fix a crash when btf_parse_base() returns an error pointer - selftests/bpf: test passing iterator to a kfunc - bpf: allow passing struct bpf_iter_<type> as kfunc arguments - bpf: extract iterator argument type and name validation logic - libbpf: Fix license for btf_relocate.c - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - libbpf: Fix error handling in btf__distill_base() - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod - kbuild,bpf: Add module-specific pahole flags for distilled base BTF - libbpf,bpf: Share BTF relocate-related code with kernel - libbpf: Split field iter code into its own file kernel - bpf: Fix kabi breakage in struct module - module, bpf: Store BTF base pointer in struct module - libbpf: BTF relocation followup fixing naming, loop logic - resolve_btfids: Handle presence of .BTF.base section - libbpf: Make btf_parse_elf process .BTF.base transparently - selftests/bpf: Extend distilled BTF tests to cover BTF relocation - libbpf: Split BTF relocation - selftests/bpf: Test distilled base, split BTF generation - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF - libbpf: Remove callback-based type/string BTF field visitor helpers - bpftool: Use BTF field iterator in btfgen - libbpf: Make use of BTF field iterator in BTF handling code - libbpf: Make use of BTF field iterator in BPF linker code - libbpf: Add BTF field iterator - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs - selftests/bpf: Add selftest for bits iter - bpf: Add bits iterator - kbuild, bpf: Use test-ge check for v1.25-only pahole - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later - bitops: make BYTES_TO_BITS() treewide-available - bpf: Check return from set_memory_rox() - bpf: Remove arch_unprotect_bpf_trampoline() - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem - bpf: Fix kabi for bpf_prog_aux and bpf_prog - bpf: move sleepable flag from bpf_prog_aux to bpf_prog - selftests/bpf: Test struct_ops maps with a large number of struct_ops program. - bpf: struct_ops supports more than one page for trampolines. - bpf, net: validate struct_ops when updating value. - selftests/bpf: Test if shadow types work correctly. - bpftool: Add an example for struct_ops map and shadow type. - bpftool: Generated shadow variables for struct_ops maps. - libbpf: Convert st_ops->data to shadow type. - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops. - bpf: introduce in_sleepable() helper - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators. - bpf: Create argument information for nullable arguments. - bpf: Move __kfunc_param_match_suffix() to btf.c. - bpf: Fix kabi for bpf_ctx_arg_aux - bpf: add btf pointer to struct bpf_ctx_arg_aux. - bpf, btf: Check btf for register_bpf_struct_ops - selftests/bpf: Add tests for RCU lock transfer between subprogs - bpf: Transfer RCU lock state between subprog calls - selftests/bpf: Add test for static subprog call in lock cs - bpf: Allow calling static subprogs while holding a bpf_spin_lock - selftests/bpf: Suppress warning message of an unused variable. - bpf: Remove an unnecessary check. - libbpf: Add btf__new_split() API that was declared but not implemented - bpf: treewide: Annotate BPF kfuncs in BTF - bpf: btf: Add BTF_KFUNCS_START/END macro pair - bpf: btf: Support flags for BTF_SET8 sets - bpf: Fix error checks against bpf_get_btf_vmlinux(). - libbpf: Ensure undefined bpf_attr field stays 0 - selftests/bpf: test case for register_bpf_struct_ops(). - bpf: export btf_ctx_access to modules. - libbpf: Find correct module BTFs for struct_ops maps and progs. - bpf, net: switch to dynamic registration - bpf: validate value_type - bpf_verifier: Fix kabi for bpf_verifier_env - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification. - bpf: Fix kabi for bpf_attr - bpf: pass attached BTF to the bpf_struct_ops subsystem - bpf: lookup struct_ops types from a given module BTF. - bpf: pass btf object id in bpf_map_info. - bpf: make struct_ops_map support btfs other than btf_vmlinux. - bpf: add struct_ops_tab to btf. - bpf, net: introduce bpf_struct_ops_desc. - bpf: get type information with BTF_ID_LIST - bpf: refactory struct_ops type initialization to a function. - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops - bpf: Introduce "volatile compare" macros - s390/bpf: Fix indirect trampoline generation - bpf: Fix dtor CFI - cfi: Add CFI_NOSEAL() - x86/cfi,bpf: Fix bpf_struct_ops CFI - x86/cfi,bpf: Fix bpf_callback_t CFI - x86/cfi,bpf: Fix BPF JIT call - cfi: Flip headers - x86, bpf: Use bpf_prog_pack for bpf trampoline - bpf: Fix kabi-breakage for bpf_tramp_image - bpf: Use arch_bpf_trampoline_size - bpf: Add arch_bpf_trampoline_size() - bpf, x86: Adjust arch_prepare_bpf_trampoline return value - bpf: Add helpers for trampoline image management - bpf: Adjust argument names of arch_prepare_bpf_trampoline() - bpf: Let bpf_prog_pack_free handle any pointer - selftests/bpf: Add lazy global subprog validation tests - bpf: Fix kabi-breakage for bpf_func_info_aux - bpf: Validate global subprogs lazily - bpf: Emit global subprog name in verifier logs - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg - selftests/bpf: Add test for using css_task iter in sleepable progs - selftests/bpf: Add tests for css_task iter combining with cgroup iter - bpf: Relax allowlist for css_task iter - bpf: Add __bpf_hook_{start,end} macros - bpf: Add __bpf_kfunc_{start,end}_defs macros - bpf: fix compilation error without CGROUPS - kbuild: avoid too many execution of scripts/pahole-flags.sh - selftests/bpf: Add tests for open-coded task and css iter - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c - bpf: Let bpf_iter_task_new accept null task ptr - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS - bpf: Introduce css open-coded iterator kfuncs - bpf: Introduce task open coded iterator kfuncs - bpf: Introduce css_task open-coded iterator kfuncs - cgroup: Prepare for using css_task_iter_*() in BPF - selftests/bpf: Add tests for open-coded task_vma iter - bpf: Introduce task_vma open-coded iterator kfuncs - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c - bpf: Don't explicitly emit BTF for struct btf_iter_num - selftests/bpf: Test pinning bpf timer to a core - bpf: Add ability to pin bpf timer to calling CPU - bpf: Charge modmem for struct_ops trampoline - !21791 Fix CVE-2026-23454 - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches - !21816 [OLK-6.6]:update patches for sw64 architecture - LoongArch: entry: Migrate ret_from_fork() to C - LoongArch: Clarify 3 MSG interrupt features - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN - drivers/amdgpu: amd rx550 should emit 10 fences after run a command - LoongArch: Fix AP booting issue in VM mode - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 - LoongArch: Relax memory ordering for atomic operations - pci/quirks: 2k3000: set discrete GPU as default boot device if present - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content - !21744 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - !21740 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - mfs: remove anon_file item from struct mfs_cache_object - sw64: fix compile error with missing header file - sw64: update openeuler_defconfig and remove junzhang_defconfig - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - intel_th: fix device leak on output open() - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - efi/cper: Fix cper_bits_to_str buffer handling and return value - soc: amlogic: canvas: fix device leak on lookup - soc: qcom: ocmem: fix device leak on lookup - tracing: Fix fixed array of synthetic event - amba: tegra-ahb: Fix device leak on SMMU enable - crypto: caam - Add check for kcalloc() in test_len() - selftests: openvswitch: Fix escape chars in regexp. - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - s390/ipl: Clear SBP flag when bootprog is set - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - svcrdma: return 0 on success from svc_rdma_copy_inline_range - nfsd: Mark variable __maybe_unused to avoid W=1 build break - net/handshake: restore destructor on submit failure - r8169: fix RTL8117 Wake-on-Lan in DASH mode - xfs: fix a memory leak in xfs_buf_item_init() - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - parisc: Do not reprogram affinitiy on ASP chip - scs: fix a wrong parameter in __scs_magic - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - media: vidtv: initialize local pointers upon transfer of memory ownership - tools/testing/nvdimm: Use per-DIMM device handle - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: ensure node page reads complete before f2fs_put_super() finishes - NFSD: use correct reservation type in nfsd4_scsi_fence_client - scsi: aic94xx: fix use-after-free in device removal path - cpufreq: nforce2: fix reference count leak in nforce2 - cpuidle: governors: teo: Drop misguided target residency check - intel_th: Fix error handling in intel_th_output_open - char: applicom: fix NULL pointer dereference in ac_ioctl - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - USB: lpc32xx_udc: Fix error handling in probe - phy: broadcom: bcm63xx-usbh: fix section mismatches - media: pvrusb2: Fix incorrect variable used in trace message - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - media: v4l2-mem2mem: Fix outdated documentation - jbd2: use a weaker annotation in journal handling - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - ext4: fix incorrect group number assertion in mb_check_buddy - ktest.pl: Fix uninitialized var in config-bisect.pl - kallsyms: Fix wrong "big" kernel symbol type read from procfs - floppy: fix for PAGE_SIZE != 4KB - block: rate-limit capacity change info log - s390/dasd: Fix gendisk parent after copy pair swap - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - vhost/vsock: improve RCU read sections around vhost_vsock_get() - block: rnbd-clt: Fix signedness bug in init_dev() - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - nvme-fc: don't hold rport lock when putting ctrl - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: xhci: limit run_graceperiod for only usb 3.0 devices - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - usbip: Fix locking bug in RT-enabled kernels - exfat: fix remount failure in different process environments - reset: fix BIT macro reference - via_wdt: fix critical boot hang due to unnamed resource allocation - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - powerpc/addnote: Fix overflow on 32-bit builds - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - firmware: imx: scu-irq: Init workqueue before request mbox channel - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - spi: fsl-cpm: Check length parity before switching to 16 bit mode - can: gs_usb: gs_can_open(): fix error handling - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - block: rnbd-clt: Fix leaked ID in init_dev() - spi: cadence-quadspi: Fix clock disable on probe failure path - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - MIPS: Fix a reference leak bug in ip22_check_gio() - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (ibmpex) fix use-after-free in high/low store - net: enetc: do not transmit redirected XDP frames when the link is down - net/handshake: duplicate handshake cancellations leak socket - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5: fw reset, clear reset requested on drain_fw_reset - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - netfilter: nf_tables: pass context structure to nft_parse_register_load - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - caif: fix integer underflow in cffrml_receive() - broadcom: b44: prevent uninitialized value usage - mlxsw: spectrum_router: Fix possible neighbour reference count leak - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - netrom: Fix memory leak in nr_sendmsg() - net: fec: ERR007885 Workaround for XDP TX path - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning - urma: fix psn exchange anomaly under share_tp mode - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - ksmbd: vfs: fix race on m_flags in vfs_cache - gfs2: fix remote evict for read-only filesystems - btrfs: scrub: always update btrfs_scrub_progress::last_physical - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - hfsplus: fix volume corruption issue for generic/073 - hfsplus: Verify inode mode when loading from disk - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix volume corruption issue for generic/070 - ntfs: set dummy blocksize to read boot_block when mounting - kbuild: Use objtree for module signing key path - fs/ntfs3: Support timestamps prior to epoch - livepatch: Match old_sympos 0 and 1 in klp_find_func() - cpuidle: menu: Use residency threshold in polling state override decisions - cpufreq: s5pv210: fix refcount leak - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - x86/ptrace: Always inline trivial accessors - iomap: account for unaligned end offsets when truncating read range - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: do not skip logging new dentries when logging a new name - net/sched: teql: Fix double-free in teql_master_xmit - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - ipv6: add NULL checks for idev in SRv6 paths - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - sunrpc: fix cache_request leak in cache_release - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - ALSA: dice: fix buffer overflow in detect_stream_formats() - usb: phy: Initialize struct usb_phy list_head - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - net: lan743x: Allocate rings outside ZONE_DMA - ocfs2: fix memory leak in ocfs2_merge_rec_left() - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: Add a new helper function to print bitmasks - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - rtc: gamecube: Check the return value of ioremap() - ALSA: uapi: Fix typo in asound.h comment - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - nvme-auth: use kvfree() for memory allocated with kvcalloc() - ASoC: ak5558: Disable regulator when error happens - ASoC: ak4458: Disable regulator when error happens - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - NFS: Fix inheritance of the block sizes when automounting - Expand the type of nfs_fattr->valid - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - fs/nls: Fix utf16 to utf8 conversion - NFS: Avoid changing nlink when file removes and attribute updates race - 9p: fix cache/debug options printing in v9fs_show_options - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - perf tools: Fix split kallsyms DSO counting - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - clk: keystone: fix compile testing - md/raid5: fix IO hang when array is broken with IO inflight - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - !21764 ub: cdma: fix cdma code format issue - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n. - ub: cdma: cdma code format issue bugfix - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - x86/amd_node: Fix AMD root device caching - x86/amd_node: Add support for debugfs access to SMN registers - x86/amd_node: Add SMN offsets to exclusive region access - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global - platform/x86/amd/hsmp: Use dev_groups in the driver structure - platform/x86/amd/hsmp: Use name space while exporting module symbols - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev - platform/x86/amd/hsmp: Move ACPI code to acpi.c - platform/x86/amd/hsmp: Move platform device specific code to plat.c - platform/x86/amd/hsmp: Move structure and macros to header file - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer - platform/x86/amd/hsmp: Create wrapper function init_acpi() - platform/x86/amd/hsmp: Create hsmp/ directory - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors - platform/x86/amd/hsmp: switch to use device_add_groups() - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() - platform/x86/amd/hsmp: Remove extra parenthesis and add a space - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh - platform/x86/amd/hsmp: Add support for ACPI based probing - platform/x86/amd/hsmp: Restructure sysfs group creation - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket - platform/x86/amd/hsmp: Define a struct to hold mailbox regs - platform/x86/amd/hsmp: Create static func to handle platdev - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket - platform/x86/amd/hsmp: Move hsmp_test to probe - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature - platform/x86/amd/hsmp: Fix iomem handling - platform/x86/amd/hsmp: improve the error log - platform/x86/amd/hsmp: add support for metrics tbl - platform/x86/amd/hsmp: create plat specific struct - x86/amd_node: Use defines for SMN register offsets - x86/amd_node: Remove dependency on AMD_NB - x86/amd_node: Update __amd_smn_rw() error paths - x86/amd_nb: Move SMN access code to a new amd_node driver - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() - x86/amd_nb: Enhance SMN access error checking - EDAC/amd64: Check return value of amd_smn_read() - EDAC/amd64: Remove unused register accesses - x86/amd_nb: Simplify function 3 search - x86/amd_nb: Use topology info to get AMD node count - x86/amd_nb: Simplify root device search - x86/amd_nb: Simplify function 4 search - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add AMD Family MI300 PCI IDs - x86: Start moving AMD node functionality out of AMD_NB - crypto: ccp - Add support for PCI device 0x17D8 - KVM: arm64: Add SMCCC interface for pvtimer status - KVM: arm64: Export vtimer_is_irqbypass for external use - !21754 ub:hisi-ubus: fix issue of message - !21565 urma: implement share tp for RM mode - !20616 [OLK-6.6] Fix CVE-2025-68291 - !20915 [OLK-6.6] fix CVE-2025-40003 - urma: implement share TP for RM mode - smb: client: fix krb5 mount with username option - ub:hisi-ubus: Adjust the order of the message struct - ub:ubus: Fix find error ubc_num of local ras - ub:ubus: Fix null message workqueue issue - !21752 urma: fix Clos networking and add a new interface get_path_set. - !21715 OLK-6.6 mainline or LTS patches sync - urma: fix Clos networking and add a new interface get_path_set. - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches - !21750 fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration - !21721 urma: fix bonding udata exchange for imported seg/jetty objects. - !21743 urma: bugfix ubagg get physical dev info acquisition - !21747 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - !21741 urma: fix log error in connect - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error - urma: bugfix ubagg get physical dev info acquisition - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics - xSched/cgroup: prevent to init xse when xcu cgroup is disabled - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' - urma: fix bonding udata exchange for imported seg/jetty objects. - urma: fix log error in connect - !21729 urma: fix kmod log format error - !21592 x86/uprobes: Fix XOL allocation failure for 32-bit tasks - !21599 pstore/ram: fix buffer overflow in persistent_ram_save_old() - !21733 urma: fix ubcore connect error - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - urma: fix ubcore connect error - !21718 urma: fix error for setting conn timeout - urma: fix error for setting conn timeout - !21737 ub: udma: change return value format. - ub: udma: change return value format. - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - tools: Fix bitfield dependency failure - iomap: allocate s_dio_done_wq for async reads as well - i3c: Move device name assignment after i3c_bus_init - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - selftests: bonding: Add more missing config options - selftests: bonding: add missing build configs - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - net: stmmac: fix rx limit check in stmmac_rx_zc() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ASoC: Intel: catpt: Fix error path in hw_params() - vdpa/pds: use %pe for ERR_PTR() in event handler registration - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio: fix typo in virtio_device_ready() comment - virtio_vdpa: fix misleading return in void function - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: remove unused return value of __mb_check_buddy - ublk: prevent invalid access with DEBUG - ublk: complete command synchronously on error - ublk: make sure io cmd handled in submitter task context - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - hwmon: sy7636a: Fix regulator_enable resource leak on error path - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - ASoC: fsl_xcvr: clear the channel status control memory - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - backlight: lp855x: Fix lp855x.h kernel-doc warnings - backlight: led-bl: Add devlink to supplier LEDs - wifi: ieee80211: correct FILS status codes - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - drm/nouveau: restrict the flush page to a 32-bit address - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - btrfs: fix leaf leak in an error path in btrfs_del_items() - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RISC-V: KVM: Fix guest page fault within HLV* instructions - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: starfive - Correctly handle return of sg_nents_for_len - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: chaoskey: fix locking for O_NONBLOCK - cpuset: Treat cpusets in attaching as populated - net: phy: adin1100: Fix software power-down ready condition - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: remove RX_DROP_UNUSABLE - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - perf arm_spe: Fix memset subclass in operation - perf arm-spe: Extend branch operations - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: out1 also needs to put mi - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - drm/msm/a2xx: stop over-complaining about the legacy firmware - NFSD/blocklayout: Fix minlength check in proc_layoutget - tracefs: fix a leak in eventfs_create_events_dir() - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - selftests/bpf: Fix failure paths in send_signal test - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - ps3disk: use memcpy_{from,to}_bvec index - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - PCI: keystone: Exit ks_pcie_probe() for invalid mode - leds: netxbig: Fix GPIO descriptor leak in error paths - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - lib/vsprintf: Check pointer before dereferencing in time_and_date() - clk: renesas: r9a06g032: Fix memory leak in error path - coresight: etm4x: Add context synchronization before enabling trace - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Correct polling IDLE bit - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - powerpc/32: Fix unpaired stwcx. on interrupt exit - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - RDMA/rtrs: server: Fix error handling in get_or_create_srv - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - staging: most: remove broken i2c driver - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - scsi: stex: Fix reboot_notifier leak in probe error path - regulator: core: disable supply if enabling main regulator fails - perf/x86/intel: Correct large PEBS flag check - ext4: correct the checking of quota files before moving extents - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - efi/libstub: Fix page table access in 5-level to 4-level paging transition - x86/boot: Fix page table access in 5-level to 4-level paging transition - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - spi: tegra210-quad: Fix timeout handling - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - scsi: target: Do not write NUL characters into ASCII configfs output - power: supply: apm_power: only unset own apm_get_power_status - power: supply: wm831x: Check wm831x_set_bits() return value - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - perf record: skip synthesize event when open evsel failed - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - interconnect: debugfs: Fix incorrect error handling for NULL path - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - i3c: master: svc: Prevent incomplete IBI transaction - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - pinctrl: stm32: fix hwspinlock resource leak in probe function - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: nand: relax ECC parameter validation check - Revert "mtd: rawnand: marvell: fix layouts" - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: renesas: gose: Remove superfluous port property - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - phy: mscc: Fix PTP for VSC8574 and VSC8572 - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - firmware: imx: scu-irq: fix OF node leak in - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/smp: Fix fallback CPU detection - wifi: ath11k: fix peer HE MCS assignment - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - inet: Avoid ehash lookup race in inet_ehash_insert() - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - objtool: Fix weak symbol detection - objtool: Fix standalone --hacks=jump_label - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: Use str_on_off() helper - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - USB: Fix descriptor count when handling invalid MBIM extended descriptor - drm/vgem-fence: Fix potential deadlock on release - drm/panel: visionox-rm69299: Don't clear all mode flags - gpu: host1x: Fix race in syncpt alloc/free - smack: fix bug: unprivileged task can create labels - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - comedi: check device's attached status in compat ioctls - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: c6xdigio: Fix invalid PNP driver unregistration - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - samples: work around glibc redefining some of our defines wrong - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86: huawei-wmi: add keys for HONOR models - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - platform/x86: acer-wmi: Ignore backlight event - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - HID: hid-input: Extend Elan ignore battery quirk to USB - bfs: Reconstruct file type when loading from disk - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - smb: fix invalid username check in smb3_fs_context_parse_param() - Bluetooth: btrtl: Avoid loading the config file on security chips - drm/vmwgfx: Use kref in vmw_bo_dirty - spi: imx: keep dma request disabled before dma transfer setup - spi: xilinx: increase number of retries before declaring stall - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - serial: add support of CPCI cards - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: option: move Telit 0x10c7 composition in the right place - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Foxconn T99W760 - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - locking/spinlock/debug: Fix data-race in do_raw_write_lock - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - Documentation: process: Also mention Sasha Levin as stable tree maintainer - leds: spi-byte: Use devm_led_classdev_register_ext() - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA - urma: fix kmod log format error - sched/debug: Fix avg_vruntime() usage - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight - sched/eevdf: Update se->vprot in reweight_entity() - sched/fair: Only set slice protection at pick time - sched: Fix struct sched_entity kabi broken - sched/fair: Fix NO_RUN_TO_PARITY case - sched/fair: Use protect_slice() instead of direct comparison - sched: Cancel the slice protection of the idle entity - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running - sched/eevdf: Disable shorter slices to wakeup-preempt - sched/eevdf: Allow shorter slices to wakeup-preempt - sched: Unify more update_curr*() - sched: Remove vruntime from trace_sched_stat_runtime() - sched: fix kabi broken in struct sched_statistics - sched: Unify runtime accounting across classes - sched/fair: Adhere to place_entity() constraints - sched/fair: Fix EEVDF entity placement bug causing scheduling lag - sched/fair: Fix zero_vruntime tracking - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions - sched: Fix kabi breakage of struct cfs_rq for sum_weight - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups - drivers/loongson-pwm: sync master patch to fix pwm driver - LoongArch:stmmac:fix mdc too high issues. - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE - drivers/pwm: export symbol for pwm_add_table - LoongArch: KVM: Add hypercall service support for usermode VMM - urma: check driver and wq duration for conn_err - spi: fix statistics allocation - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround - tools headers x86 cpufeatures: Sync with the kernel sources - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE - KVM: x86: Advertise support for AMD's PREFETCHI - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps - KVM: x86: Explicitly track feature flags that are enabled at runtime - KVM: x86: Explicitly track feature flags that require vendor enabling - KVM: x86: Rename "SF" macro to "SCATTERED_F" - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID - KVM: x86: Add a macro to init CPUID features that KVM emulates in software - KVM: x86: Add a macro to init CPUID features that ignore host kernel support - KVM: x86: Harden CPU capabilities processing against out-of-scope features - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features - KVM: x86: Add a macro to init CPUID features that are 64-bit only - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID - KVM: x86: Advertise AMD_IBPB_RET to userspace - KVM: SVM: Invert handling of SEV and SEV_ES feature flags - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1] - KVM: x86: Add SBPB support - KVM: x86: Add IBPB_BRTYPE support - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h - hwmon/k10temp: Add support for Hygon family 18h model 18h - mmc: sdhci-pci: Add support for Hygon SD controller - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs - mfs: fix race condition issue in try_hook_fd() - pstore/ram: fix buffer overflow in persistent_ram_save_old() - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller - spi: dw: Add device HID for Hygon SPI controller - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio - Solve kernel ABI issue introduced by x86_max_cores updates - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE - x86/topology: Handle the !APIC case gracefully - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC - x86/topology: Handle bogus ACPI tables correctly - x86/xen/smp_pv: Register the boot CPU APIC properly - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() - x86/topology: Don't evaluate logical IDs during early boot - x86/topology: Ignore non-present APIC IDs in a present package - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores - x86/cpu/topology: Provide __num_[cores|threads]_per_package - x86/cpu/topology: Rename topology_max_die_per_package() - x86/cpu/topology: Rename smp_num_siblings - x86/cpu/topology: Retrieve cores per package from topology bitmaps - x86/cpu/topology: Use topology logical mapping mechanism - x86/cpu/topology: Provide logical pkg/die mapping - x86/cpu/topology: Simplify cpu_mark_primary_thread() - x86/cpu/topology: Mop up primary thread mask handling - x86/cpu/topology: Use topology bitmaps for sizing - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT - x86/xen/smp_pv: Count number of vCPUs early - x86/cpu/topology: Assign hotpluggable CPUIDs during init - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug - x86/topology: Add a mechanism to track topology via APIC IDs - x86/cpu: Detect real BSP on crash kernels - x86/cpu/topology: Rework possible CPU management - x86/cpu/topology: Sanitize the APIC admission logic - x86/smpboot: Make error message actually useful - x86/cpu/topology: Use a data structure for topology info - x86/cpu/topology: Simplify APIC registration - x86/cpu/topology: Confine topology information - x86/xen/smp_pv: Register fake APICs - x86/acpi: Dont invoke topology_register_apic() for XEN PV - x86/mpparse: Use new APIC registration function - x86/of: Use new APIC registration functions - x86/jailhouse: Use new APIC registration function - x86/acpi: Use new APIC registration functions - x86/cpu/topology: Provide separate APIC registration functions - x86/cpu/topology: Move registration out of APIC code - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init() - x86/apic: Use a proper define for invalid ACPI CPU ID - x86/apic: Remove yet another dubious callback - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid - x86/mpparse: Remove the physid_t bitmap wrapper - x86/mm/numa: Move early mptable evaluation into common code - x86/mpparse: Switch to new init callbacks - x86/hyperv/vtl: Prepare for separate mpparse callbacks - x86/xen/smp_pv: Prepare for separate mpparse callbacks - x86/jailhouse: Prepare for separate mpparse callbacks - x86/platform/intel-mid: Prepare for separate mpparse callbacks - x86/platform/ce4100: Prepare for separate mpparse callbacks - x86/dtb: Rename x86_dtb_init() - x86/mpparse: Prepare for callback separation - x86/mpparse: Provide separate early/late callbacks - x86/mpparse: Rename default_find_smp_config() - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() - x86/ioapic: Make io_apic_get_unique_id() simpler - x86/apic: Get rid of get_physical_broadcast() - x86/ioapic: Replace some more set bit nonsense - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids - x86/xen: return a sane initial apic id when running as PV guest - x86/cpu/topology: Make the APIC mismatch warnings complete - Solve kernel ABI issues introduced by x86_coreid_bits updates - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON - x86/apic/uv: Remove the private leaf 0xb parser - x86/xen/smp_pv: Remove cpudata fiddling - x86/apic: Remove unused phys_pkg_id() callback - x86/cpu: Remove x86_coreid_bits - x86/cpu: Remove topology.c - x86/cpu: Make topology_amd_node_id() use the actual node info - x86/mm/numa: Use core domain size on AMD - x86/cpu: Use common topology code for HYGON - x86/cpu: Use common topology code for AMD - x86/smpboot: Teach it about topo.amd_node_id - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater - x86/topology/amd: Ensure that LLC ID is initialized - x86/cpu/amd: Move TOPOEXT enablement into the topology parser - x86/cpu/amd: Make the NODEID_MSR union actually work - x86/cpu/amd: Make the CPUID 0x80000008 parser correct - x86/cpu: Provide an AMD/HYGON specific topology parser - x86/cpu/amd: Provide a separate accessor for Node ID - x86/topology/intel: Unlock CPUID before evaluating anything - x86/cpu: Use common topology code for Intel - x86/cpu: Provide a sane leaf 0xb/0x1f parser - x86/cpu: Move __max_die_per_package to common.c - x86/cpu: Use common topology code for Centaur and Zhaoxin - x86/cpu: Add legacy topology parser - x86/cpu: Provide cpu_init/parse_topology() - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h> - x86/cpu: Provide cpuid_read() et al. - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor" - Solve kernel ABI issues introduced by cpuinfo_x86 updates - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes - perf/amd/ibs: Prevent leaking sensitive data to userspace - perf/x86: Check data address for IBS software filter - perf/x86: Relax privilege filter restriction on AMD IBS - perf/core: Export perf_exclude_event() - KVM: x86: Disallow hugepages when memory attributes are mixed - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure() - x86/bugs: Add RSB mitigation document - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() - x86/bugs: Rename entry_ibpb() to write_ibpb() - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel - perf/amd/ibs: Update DTLB/PageSize decode logic - perf/amd/ibs: Add support for OP Load Latency Filtering - perf/amd/ibs: Ceil sample_period to min_period - perf/amd/ibs: Add ->check_period() callback - perf/amd/ibs: Add PMU specific minimum period - perf/amd/ibs: Don't allow freq mode event creation through ->config interface - perf/amd/ibs: Remove pointless sample period check - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros - amd-pstate: Switch to amd-pstate by default on some Server platforms - cpufreq: amd-pstate: enable shared memory type CPPC by default - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq - x86/cpu: Provide debug interface - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too - x86/apic: Use u32 for wakeup_secondary_cpu[_64]() - x86/apic: Use u32 for [gs]et_apic_id() - x86/apic: Use u32 for phys_pkg_id() - x86/apic: Use u32 for cpu_present_to_apicid() - x86/apic: Use u32 for check_apicid_used() - x86/apic: Use u32 for APIC IDs in global data - x86/apic: Use BAD_APICID consistently - x86/cpu: Move cpu_l[l2]c_id into topology info - x86/cpu: Move logical package and die IDs into topology info - x86/cpu: Move cu_id into topology info - x86/cpu: Move cpu_core_id into topology info - hwmon: (fam15h_power) Use topology_core_id() - scsi: lpfc: Use topology_core_id() - x86/cpu: Move cpu_die_id into topology info - x86/cpu: Move phys_proc_id into topology info - x86/cpu: Encapsulate topology information in cpuinfo_x86 - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx - mm/mremap: fix WARN with uffd that has remap events disabled - mm: clear uffd-wp PTE/PMD state on mremap() - userfaultfd: move userfaultfd_ctx struct to header file - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - RNPGBE: NET: Update driver to 1.0.0 - RNP: NET: Update driver to 1.0.0 - kernel.spec: fix symbol conflicts between 4K and 64K page packages - !22147 Fix CVE-2026-31431 - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - Fix minimum RX size check for decryption - !22111 Fix CVE-2026-31651 - !22095 Fix CVE-2026-31430 - !21996 Fix CVE-2026-31504 - !21997 Fix CVE-2026-31515 - !22098 Fix CVE-2026-31678 - !22113 Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature - !20823 [Intel-SIG] DMR APX support - kernel-host part - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear() - mmc: vub300: fix NULL-deref on disconnect - !22006 Fix CVE-2026-31677 - X.509: Fix out-of-bounds access when parsing extensions - !21918 perf/x86/intel: Add missing branch counters constraint apply - crypto: af_alg - limit RX SG extraction by receive buffer budget - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface. - !21992 urma: move variable initialization before use in error branch - openvswitch: defer tunnel netdev_put to RCU release - urma: move variable initialization before use in error branch - af_key: validate families in pfkey_send_migrate() - net: fix fanout UAF in packet_release() via NETDEV_UP race - perf/x86/intel: Add missing branch counters constraint apply - x86/microcode/intel: Enable staging when available - x86/microcode/intel: Support mailbox transfer - x86/microcode/intel: Implement staging handler - x86/microcode/intel: Define staging state struct - x86/microcode/intel: Establish staging control logic - x86/microcode: Introduce staging step to reduce late-loading time - x86/cpu/topology: Make primary thread mask available with SMP=n - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs() - x86/fpu: Remove export of mxcsr_feature_mask - x86/pkeys: Simplify PKRU update in signal frame - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE - x86/fpu: Log XSAVE disablement consistently - selftests/x86/apx: Add APX test - x86/fpu/apx: Enable APX state support - x86/fpu/apx: Disallow conflicting MPX presence - x86/fpu/apx: Define APX state component - tools headers x86 cpufeatures: Sync with the kernel sources - x86/cpufeatures: Add X86_FEATURE_APX - x86/fpu/xstate: Adjust xstate copying logic for user ABI - x86/fpu/xstate: Adjust XSAVE buffer size calculation - x86/fpu/xstate: Introduce xfeature order table and accessor macro - x86/fpu/xstate: Remove xstate offset check - x86/fpu/xstate: Simplify print_xstate_features() - selftests/x86/avx: Add AVX tests - selftests/x86/xstate: Clarify supported xstates - selftests/x86/xstate: Consolidate test invocations into a single entry - selftests/x86/xstate: Introduce signal ABI test - selftests/x86/xstate: Refactor ptrace ABI test - selftests/x86/xstate: Refactor context switching test - selftests/x86/xstate: Enumerate and name xstate components - selftests/x86/xstate: Refactor XSAVE helpers for general use - selftests/x86: Consolidate redundant signal helper functions - x86/pkeys: Ensure updated PKRU value is XRSTOR'd - x86/pkeys: Change caller of update_pkru_in_sigframe() - x86/pkeys: Update PKRU to enable all pkeys before XSAVE - x86/pkeys: Add helper functions to update PKRU on the sigframe - selftests/x86: fix Makefile dependencies to work with clang - selftests/x86: remove (or use) unused variables and functions - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms - !22197 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !21790 Fix CVE-2026-31407 - !22090 Fix CVE-2026-31424 - !22088 Fix CVE-2026-31423 - !22086 Fix CVE-2026-31420 - !22085 Fix CVE-2026-31418 - !22083 Fix CVE-2026-31516 - !22084 Fix CVE-2026-31665 - !22056 Fix CVE-2026-31590 - !21974 Fix CVE-2026-31542 - !22042 Fix CVE-2026-31628 - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - !22179 Fix CVE-2026-31532 - !22177 Fix CVE-2026-31533 - !22180 Fix CVE-2026-31429 - !22153 iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically" - !22172 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21260 bfq: Lock when clearing the q->elevator entry - !22024 nvmet: move async event work off nvmet-wq - !21972 Fix CVE-2026-31451 - !21942 Fix CVE-2026-31450 - !22015 Fix CVE-2026-31449 - !21937 Fix CVE-2026-31447 - !21941 Fix CVE-2026-31446 - net: skb: fix cross-cache free of KFENCE-allocated skb head - can: raw: fix ro->uniq use-after-free in raw_rcv() - !21089 [OLK-6.6] Fix CVE-2025-68345 - !21115 [OLK-6.6] Fix CVE-2025-68334 - !21116 [OLK-6.6] Fix CVE-2025-68320 - !21119 [OLK-6.6] Fix CVE-2025-68765 - !21117 [OLK-6.6] Fix CVE-2025-68340 - !21139 [OLK-6.6] Fix CVE-2025-68753 - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - !22158 perf/x86: Fix potential bad container_of in intel_pmu_hw_config - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series - !22156 drm/i915/gt: Check set_default_submission() before deferencing - !22155 urma: change kzalloc into vzalloc for ubcore - !22044 ALSA: ctxfi: Limit PTP to a single page - urma: change kzalloc into vzalloc for ubcore - perf/x86: Fix potential bad container_of in intel_pmu_hw_config - !22154 A set of CVE fixes for Bluetooth - !21931 Fix CVE-2026-31452 - drm/i915/gt: Check set_default_submission() before deferencing - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - !22071 CVE-2026-31673 - !22050 Fix CVE-2026-31674 - !22069 CVE-2026-31680 - !22025 Fix CVE-2026-31682 - !22002 Fix CVE-2026-31546 - !22011 Fix CVE-2026-31570 - !22000 Fix CVE-2026-31495 - !21999 Fix CVE-2026-31496 - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - netfilter: conntrack: add missing netlink policy validations - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - bridge: mrp: reject zero test interval to avoid OOM panic - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: nft_ct: fix use-after-free in timeout object destroy - xfrm: prevent policy_hthresh.work from racing with netns teardown - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - ALSA: ctxfi: Limit PTP to a single page - x86/CPU: Fix FPDSS on Zen1 - bridge: br_nd_send: linearize skb before parsing ND options - nvmet: move async event work off nvmet-wq - ext4: validate p_idx bounds in ext4_ext_correct_indexes - ext4: prevent partial update of the extents path - ext4: refactor ext4_ext_rm_idx() to index 'path' - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - netfilter: ctnetlink: use netlink policy range checks - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - x86/platform/uv: Handle deconfigured sockets - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: publish jinode after initialization - ext4: fix use-after-free in update_super_work when racing with umount - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: convert inline data to extents when truncate exceeds inline size - x86/topo: Fix SNC topology mess - x86/topo: Replace x86_has_numa_in_package - x86/topo: Add topology_num_nodes_per_package() - x86/numa: Store extra copy of numa_nodes_parsed - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled - x86/smpboot: moves x86_topology to static initialize and truncate - x86/smpboot: remove redundant CONFIG_SCHED_SMT - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup - sched: Move sched domain name out of CONFIG_SCHED_DEBUG - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly - x86/mm: Don't print out SRAT table information - powerpc/smp: Dynamically build Powerpc topology - powerpc/smp: Avoid asym packing within thread_group of a core - powerpc/smp: Add __ro_after_init attribute - powerpc/smp: Disable MC domain for shared processor - powerpc/smp: Enable Asym packing for cores on shared processor - bfq: Lock when clearing the q->elevator entry - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - team: Move team device type change at the end of team_port_add - lan966x: Fix sleeping in atomic context - platform/x86/amd/pmc: Add support for Van Gogh SoC - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - tools headers: Sync x86 headers with kernel sources - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag - perf/x86/intel: Use early_initcall() to hook bts_init() - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common() - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use - perf/x86/intel: Optimize PEBS extended config - perf/x86/intel: Check PEBS dyn_constraints - perf/x86/intel: Add a check for dynamic constraints - perf/x86/intel: Add counter group support for arch-PEBS - perf/x86/intel: Setup PEBS data configuration and enable legacy groups - perf/x86/intel: Update dyn_constraint base on PEBS event precise level - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR - perf/x86/intel: Process arch-PEBS records or record fragments - perf/x86/intel/ds: Factor out PEBS group processing code to functions - perf/x86/intel/ds: Factor out PEBS record processing code to functions - perf/x86/intel: Initialize architectural PEBS - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call - perf/x86: Fix NULL event access and potential PEBS record loss - perf/x86: Remove redundant is_x86_event() prototype - perf/core: Check sample_type in perf_sample_save_brstack - perf/core: Check sample_type in perf_sample_save_callchain - perf/x86/intel/ds: Remove redundant assignments to sample.period - perf/x86/intel: Introduce pairs of PEBS static calls - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs - perf/x86/intel: Decouple BTS initialization from PEBS initialization - !22246 Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs" - !22187 support mempool and NUMA.remote for 64KB page - !22201 mm: memcontrol: don't throttle dying tasks on memory.high - !22213 futex: Clear stale exiting pointer in futex_lock_pi() retry path - !22212 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22221 EDAC/mc: Fix error path ordering in edac_mc_alloc() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - !22202 pstore: ram_core: fix incorrect success return when vmap() fails - !22203 perf/x86/intel/uncore: Skip discovery table for offline dies - !22215 usb: cdns3: gadget: fix state inconsistency on gadget init failure - !22078 Fix CVE-2026-31681 - !22041 Fix CVE-2026-31664 - !22082 Fix CVE-2026-31671 - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches - !22199 CVE-2026-31414 - !22185 Fix CVE-2026-31679 - !22164 Fix CVE-2026-31551 - usb: cdns3: gadget: fix state inconsistency on gadget init failure - futex: Clear stale exiting pointer in futex_lock_pi() retry path - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - !22173 Fix CVE-2026-31592 - !22021 smb: client: fix off-by-8 bounds check in check_wsl_eas() - !22022 smb: client: fix OOB reads parsing symlink error response - !21926 nvme-pci: ensure we're polling a polled queue - !21924 ext4: avoid infinite loops caused by residual data - !21922 ksmbd: fix OOB write in QUERY_INFO for compound requests - !22171 xen/privcmd: fix double free via VMA splitting - !22167 *** fix CVE-2026-31443 *** - !22166 spi: spi-dw-dma: fix print error log when wait finish transaction - perf/x86/intel/uncore: Skip discovery table for offline dies - pstore: ram_core: fix incorrect success return when vmap() fails - mm: memcontrol: don't throttle dying tasks on memory.high - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_helper: pass helper to expect cleanup - mm/numa_remote: remove depends on ARM64_4K_PAGES - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES - openvswitch: validate MPLS set/set_masked payload length - xfrm_user: fix info leak in build_report() - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock - xen/privcmd: fix double free via VMA splitting - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Delete unnecessary NULL check - spi: spi-dw-dma: fix print error log when wait finish transaction - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - netfilter: xt_multiport: validate range encoding in checkentry - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix double free in create_space_info() error path - interconnect: debugfs: fix devm_kstrdup and kfree mismatch - Revert "ALSA: usb: Increase volume range that triggers a warning" - x86/kfence: fix booting on 32bit non-PAE systems - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - btrfs: fix leak of kobject name for sub-group space_info - net: phy: fix phy_uses_state_machine() - fs/ntfs3: Initialize allocated memory before use - nvme: fix PCIe subsystem reset controller state transition - nvme-pci: do not directly handle subsys reset fallout - nvme-fc: rename free_ctrl callback to match name pattern - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa881x: Drop unused version readout - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - mm: kmsan: fix poisoning of high-order non-compound pages - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - iio: adc: exynos_adc: fix OF populate on driver rebind - ALSA: scarlett2: Fix buffer overflow in config retrieval - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - iio: core: add separate lockdep class for info_exist_lock - iio: core: add missing mutex_destroy in iio_dev_release() - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - selftests/bpf: Check for timeout in perf_link test - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - perf/x86/intel: Do not enable BTS for guests - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - platform/x86: hp-bioscfg: Fix automatic module loading - netrom: fix double-free in nr_route_frame() - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - octeontx2: Fix otx2_dma_map_page() error return code - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: ath12k: fix dma_free_coherent() pointer - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: chemical: scd4x: fix reported channel endianness - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: ad9467: fix ad9434 vref mask - iio: accel: iis328dq: fix gain values - of: platform: Use default match table for /firmware - of: fix reference count leak in of_alias_scan() - x86: make page fault handling disable interrupts properly - vsock/test: fix seqpacket message bounds test - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - octeontx2-af: Fix error handling - net: dsa: fix off-by-one in maximum bridge ID determination - selftests: net: amt: wait longer for connection before sending packets - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/pm: Don't clear SI SMC table when setting power limit - usbnet: limit max_mtu based on device's hard_mtu - mISDN: annotate data-race around dev->work - be2net: fix data race in be_get_new_eqd - net: hns3: fix data race in hns3_fetch_stats - ALSA: usb: Increase volume range that triggers a warning - riscv: clocksource: Fix stimecmp update hazard on RV32 - kconfig: fix static linking of nconf - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - interconnect: debugfs: initialize src_node and dst_node to empty strings - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - comedi: Fix getting range information for subdevices 16 to 255 - x86/kfence: avoid writing L1TF-vulnerable PTEs - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - scsi: storvsc: Process unsupported MODE_SENSE_10 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - comedi: dmm32at: serialize use of paged registers - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - octeontx2: cn10k: fix RX flowid TCAM mask handling - veth: fix data race in veth_get_ethtool_stats - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - tools: ynl: Specify --no-line-number in ynl-regen.sh. - gue: Fix skb memleak with inner IP protocol 0. - amd-xgbe: avoid misleading per-packet error log - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - net: usb: dm9601: remove broken SR9700 support - igc: fix race condition in TX timestamp read for register 0 - ice: Avoid detrimental cleanup for bond during interface stop - ice: initialize ring_stats->syncp - ata: libata: Print features also for ATAPI devices - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Add cpr_log to ata_dev_print_features() early return - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: qcom,rpmpd: Add SM7150 - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - io_uring: move local task_work in exit cancel loop - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Bump the HDMI clock to 340MHz - LoongArch: Fix PMU counter allocation for mixed-type event groups - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/x38: Fix a resource leak in x38_probe1() - hrtimer: Fix softirq base check in update_needs_ipi() - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: option: add Telit LE910 MBIM composition - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb: dwc3: Check for USB4 IP_NAME - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - HID: usbhid: paper over wrong bNumDescriptor field - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - dmaengine: omap-dma: fix dma_pool resource leak in error paths - phy: stm32-usphyc: Fix off by one in probe() - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: drop probe registration printks - phy: phy-snps-eusb2: refactor constructs names - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: tegra-adma: Fix use-after-free - mm, kfence: describe @slab parameter in __kfence_obj_info() - textsearch: describe @list member in ts_ops search - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: fix null pointer - selftests: drv-net: fix RPS mask handling for high CPU numbers - btrfs: fix memory leaks in create_space_info() error paths - btrfs: introduce btrfs_space_info sub-group - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: store fs_info in space_info - net/mlx5e: Restore destroying state bit after profile cleanup - vsock/test: add a final full barrier after run all tests - net: update netdev_lock_{type,name} - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - btrfs: send: check for inline extents in range_is_hole_in_parent() - can: etas_es58x: allow partial RX URB allocation to succeed - ASoC: codecs: wsa884x: fix codec initialisation - firmware: imx: scu-irq: Set mu_resource_id before get handle - xfrm: clear trailing padding in build_polexpire() - smb: client: fix OOB reads parsing symlink error response - smb: client: fix off-by-8 bounds check in check_wsl_eas() - nvme-pci: ensure we're polling a polled queue - ext4: avoid infinite loops caused by residual data - ksmbd: fix OOB write in QUERY_INFO for compound requests - !22406 CVE - !22327 ceph: fix i_nlink underrun during async unlink - !22400 bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22401 Fix CVE-2026-31486 - !22383 dmaengine: idxd: Fix not releasing workqueue on .release() - !22394 *** fix CVE-2026-31527 *** - !22335 ceph: fix memory leaks in ceph_mdsc_build_path() - !22351 ixgbevf: add missing negotiate_features op to Hyper-V ops table - !22333 ceph: supply snapshot context in ceph_zero_partial_object() - HID: core: Mitigate potential OOB by removing bogus memset() - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: multitouch: Check to ensure report responses match the request - Bluetooth: MGMT: validate LTK enc_size on load - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/core) Declare regulator notification function as void - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs - !22336 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - !22345 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - !22346 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - !22353 Bluetooth: SMP: derive legacy responder STK authentication from MITM state - !22347 Bluetooth: MGMT: validate mesh send advertising payload length - !22367 Bluetooth: hci_event: move wake reason storage into validated event handlers - driver/core: Fix kabi broken of platform_device/bus_type/device - driver core: platform: use generic driver_override infrastructure - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - dmaengine: idxd: Fix not releasing workqueue on .release() - !22275 CVE-2026-43313 - !22272 EFI/CPER: don't dump the entire memory region - !22267 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - !22266 v2 CVE-2026-43265 - !22355 5 CVE fix patches - !22224 mm/userfaultfd: fix hugetlb fault mutex hash calculation - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - !22342 rxrpc: proc: size address buffers for %pISpc output - !22363 dmaengine: idxd: Fix leaking event log memory - !22356 dmaengine: idxd: Fix memory leak when a wq is reset - Bluetooth: hci_event: move wake reason storage into validated event handlers - !22321 Fix CVE-2026-43013 - !22278 Fix CVE-2026-31699 - !22269 Fix CVE-2026-31698 - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: alps: fix NULL pointer dereference in alps_raw_event() - Input: uinput - fix circular locking dependency with ff-core - HID: apple: avoid memory leak in apple_report_fixup() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - ixgbevf: add missing negotiate_features op to Hyper-V ops table - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - rxrpc: proc: size address buffers for %pISpc output - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: supply snapshot context in ceph_zero_partial_object() - !22204 cgroupv2 io bugfix patches - !22264 Fix CVE-2026-43262 - !22307 Fix CVE-2026-43363 - !22320 Fix CVE-2026-43429 - !20492 scsi: leapraid: add RAID disk hide/show events and fix misc issues - ceph: fix i_nlink underrun during async unlink - !22306 dmaengine: idxd: Fix possible invalid memory access after FLR - !22304 module: Fix kernel panic when a symbol st_shndx is out of bounds - !22317 drm/ioc32: stop speculation on the drm_compat_ioctl path - !22226 kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - !22105 cpufreq: conservative: Reset requested_freq on limits change - net/mlx5: lag: Check for LAG device before creating debugfs - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - USB: usbcore: Introduce usb_bulk_msg_killable() - !22037 Fix CVE-2026-31469 - !22292 Fix CVE-2026-43407 - drm/ioc32: stop speculation on the drm_compat_ioctl path - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0 - !22296 urma: fix potential parameter overflow in initialization - !22290 mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - x86/apic: Disable x2apic on resume if the kernel expects so - dmaengine: idxd: Fix possible invalid memory access after FLR - module: Fix kernel panic when a symbol st_shndx is out of bounds - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - !22276 crypto: af-alg - fix NULL pointer dereference in scatterwalk - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory - urma: fix potential parameter overflow in initialization - !20782 tracing: Fix soft lockup when lseeking trace file - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - !21650 urma: query resource options by id. - !22260 CVE-2026-31419 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - !22217 Fix CVE-2026-31697 - !22234 Fix CVE-2026-31422 - !22076 Fix CVE-2026-31684 - !22074 Fix CVE-2026-31685 - EFI/CPER: don't dump the entire memory region - !22127 rnpvf: update rnpvf driver to version 1.1.10. - !22170 rnp: update rnp driver to version 1.1.14. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - gfs2: fiemap page fault fix - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros - net: bonding: fix use-after-free in bond_xmit_broadcast() - bonding: do not set usable_slaves for broadcast mode - net: bonding: update the slave array for broadcast mode - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support - !22241 Fix CVE-2026-31779 - !22240 atm: lec: fix use-after-free in sock_def_readable() - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers - !22249 [OLK-6.6] Fix CVE-2026-43284 - Ethernet: Linkdata: Supports Linkdata ethernet Controllers - xfrm: esp: avoid in-place decrypt on shared skb frags - ub: ubase: Added proxy functions to ubase - ub: ubase: support DTU feature - ub: ubase: add USC and UCP - ub: ubase: Add Ubase S Device ID - !22184 Fix CVE-2026-31675 - !22220 net: Fix CVE-2026-31518 - !22219 net/sched: Fix CVE-2026-31421 - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - atm: lec: fix use-after-free in sock_def_readable() - net: sched: act_csum: validate nested VLAN headers - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - netfilter: ip6t_eui64: reject invalid MAC header for all packets - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features - mm/userfaultfd: fix hugetlb fault mutex hash calculation - urma: query resource options by id. - esp: fix skb leak with espintcp and async crypto - xfrm: Fix the usage of skb->sk - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - blk-iocost: fix busy_level reset when no IOs complete - block: use min() instead of min_t() - blk-throttle: fix lower bps rate by throtl_trim_slice() - block: flush all throttled bios when deleting the cgroup - jbd2: increase IO priority of checkpoint - blk-throttle: don't take carryover for prioritized processing of metadata - blk-throttle: support prioritized processing of metadata - blk-throttle: fix lower control under super low iops limit - rnp: update rnp driver to version 1.1.14. - net/sched: sch_netem: fix out-of-bounds access in packet corruption - rnpvf: update rnpvf driver to version 1.1.10. - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU" - cpufreq: conservative: Reset requested_freq on limits change - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - tracing: Fix soft lockup when lseeking trace file - scsi: leapraid: add RAID disk hide/show events and fix misc issues - The RISC-V architecture features have been updated. For more details, refer to the rvck-olk repository. - !22660 Fix CVE-2026-43119 - !22696 CVEs - !22652 Fix CVE-2026-43223 - !22651 Fix CVE-2026-43472 - !22329 Fix CVE-2026-31752 - !22709 config: x86: Fix CI "checkdefconfig" warning by updating defconfig - config: x86: Fix CI "checkdefconfig" warning by updating defconfig - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - fbcon: check return value of con2fb_acquire_newinfo() - !22646 obmm: implement 64K pagesize support - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory - !22542 ub: cdma: add software TLB invalidation for KSVA memory - !22661 USB: core: Limit the length of unkillable synchronous timeouts - !22124 CVE-2026-31503 - !22567 Fix CVE-2026-43170 - !22475 Fix CVE-2026-43427 - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM - USB: core: Limit the length of unkillable synchronous timeouts - !22599 Fix dup panic - Bluetooth: hci_sync: annotate data-races around hdev->req_status - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET - media: pvrusb2: fix URB leak in pvr2_send_request_ex - unshare: fix unshare_fs() handling - !22479 crypto: hisilicon - turn mainline patch - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration - !22563 fix migvm_queue_dev_mmap buffer check - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu - KVM: arm64: Fix timer_early_inject conflict with CVM - virtCCA-Live-Migration: Add host agent support for CVM live migration - !22600 sched_ext: Sync openeuler_defconfig for sched_ext - fix migvm_queue_dev_mmap buffer check - !22530 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22535 usb: xhci: Prevent interrupt storm on host controller error (HCE) - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE - obmm: relax contig_mem_pool restriction for 64KB pages - obmm: add VMA access for ptrace/GDB on PFNMAP regions - obmm: support VMA split with ownership-aligned attributes - !22560 net/oenetcls: Limit rxqs against combined_channels - !22523 net/oenetcls: free sk entry hash on ntuple cleanup - !22315 sched/fair: Fix overflow in vruntime_eligible() - obmm: refactor ownership tracking for PMD-granularity support - !22564 Fix CVE-2026-43212 - !22514 ceph: add a bunch of missing ceph_path_info initializers - !22559 blk-cgroup: skip dying blkg in blkcg_activate_policy() - x86: config: Enable resctrl related configs - !22055 urma: fix the panic when ipourma module is repeatedly loaded - sched_ext: Sync openeuler_defconfig for sched_ext - alloc_fdtable(): change calling conventions. - fs: consistently deref the files table with rcu_dereference_raw() - !22462 net: ipa: fix event ring index not programmed for IPA v5.0+ - !22551 net/oenetcls: RPS enhancements and bug fixes - !22182 Fix CVE-2026-31755 - !22576 arm64: entry: Fix missing sync_sei in irq_ventry - obmm: fix PTE protection bits for READWRITE mappings - arm64: entry: Fix missing sync_sei in irq_ventry - crypto: hisilicon - remove unused and non-public APIs for qm and sec - crypto: hisilicon/qm - drop redundant variable initialization - crypto: hisilicon/qm - remove else after return - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item - crypto: hisilicon - fix the format string type error - crypto: hisilicon/sec2 - prevent req used-after-free for sec - crypto: hisilicon - add device load query functionality to debugfs - crypto: hisilicon/qm - increase wait time for mailbox - crypto: hisilicon/qm - obtain the mailbox configuration at one time - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write() - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time" - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time" - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip - !22287 patchset for sched_ext - usb: dwc3: gadget: Move vbus draw to workqueue context - !22504 dm: clear cloned request bio pointer when last clone bio completes - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - !22554 CVE-2026-46333 - net/oenetcls: Limit rxqs against combined_channels - blk-cgroup: skip dying blkg in blkcg_activate_policy() - ptrace: Fix kabi breakage in struct task_struct - ptrace: slightly saner 'get_dumpable()' logic - net/oenetcls: remove duplicated linux/inet.h include - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - sched_ext: Update comments replacing breather with aborting mechanism - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer - tools/sched_ext: update scx_show_state.py for scx_aborting change - scx_central: Defer timer start to central dispatch to fix init error - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback - selftests/sched_ext: Add missing error check for exit__load() - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix bypass depth leak on scx_enable() failure - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Exit dispatch and move operations immediately when aborting - sched_ext: Simplify breather mechanism with scx_aborting flag - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode - sched_ext: Refactor do_enqueue_task() local and global DSQ paths - sched_ext: Fix SCX_KICK_WAIT to work reliably - tools/sched_ext: Provide a compatible helper for scx_bpf_events() - tools/sched_ext: Sync with scx repo - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Don't kick CPUs running higher classes - sched_ext: Always use SMP versions in kernel/sched/ext.c - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched_ext: Drop kfuncs marked for removal in 6.15 - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() - sched/ext: Prevent update_locked_rq() calls with NULL rq - sched_ext: Fix rq lock state in hotplug ops - sched_ext: Remove duplicate BTF_ID_FLAGS definitions - rhashtable: Fix rhashtable_try_insert test - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() - sched_ext: Make scx_group_set_weight() always update tg->scx.weight - sched/ext: Fix invalid task state transitions on class switch - sched/fair: Fix sched_can_stop_tick() for fair tasks - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set() - sched_ext: Make scx_locked_rq() inline - sched_ext: Track currently locked rq - sched_ext: Move built-in idle CPU selection policy to a separate file - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP - selftests/sched_ext: Fix exit selftest hang on UP - sched_ext: Use kvzalloc for large exit_dump allocation - sched_ext: create_dsq: Return -EEXIST on duplicate request - rhashtable: Fix potential deadlock by moving schedule_work outside lock - tools include UAPI: Sync linux/sched.h copy with the kernel sources - sched/doc: Update documentation after renames and synchronize Chinese version - sched/fair: Remove stale FREQUENCY_UTIL comment - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr() - file: add take_fd() cleanup helper - sched/ext: Remove sched_fork() hack - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. - sched_ext: selftests: Fix grammar in tests description - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() - sched_ext: Fix migration disabled handling in targeted dispatches - sched_ext: Implement auto local dispatching of migration disabled tasks - sched_ext: Fix incorrect time delta calculation in time_delta() - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems - tools/sched_ext: Add helper to check task migration state - sched_ext: Fix incorrect autogroup migration detection - sched_ext: selftests/dsp_local_on: Fix sporadic failures - selftests/sched_ext: Fix enum resolution - sched_ext: Include task weight in the error state dump - sched_ext: Fixes typos in comments - sched_ext: fix kernel-doc warnings - sched_ext: Use time helpers in BPF schedulers - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now() - sched_ext: Add time helpers for BPF schedulers - sched_ext: Add scx_bpf_now() for BPF scheduler - sched_ext: Implement scx_bpf_now() - sched_ext: Relocate scx_enabled() related code - sched_ext: Add option -l in selftest runner to list all available tests - sched_ext: Include remaining task time slice in error state dump - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON - sched_ext: idle: small CPU iteration refactoring - sched_ext: idle: introduce check_builtin_idle_enabled() helper - sched_ext: idle: clarify comments - sched_ext: idle: use assign_cpu() to update the idle cpumask - cpumask: introduce assign_cpu() macro - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology() - sched_ext: Use sizeof_field for key_len in dsq_hash_params - tools/sched_ext: Receive updates from SCX repo - sched_ext: Use the NUMA scheduling domain for NUMA optimizations - sched_ext: keep running prev when prev->scx.slice != 0 - sched_ext: idle: Refresh idle masks during idle-to-idle transitions - sched_ext: switch class when preempted by higher priority scheduler - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() - sched_ext: Fix dsq_local_on selftest - sched_ext: initialize kit->cursor.flags - sched_ext: Fix invalid irq restore in scx_ops_bypass() - MAINTAINERS: add me as reviewer for sched_ext - MAINTAINERS: add self as reviewer for sched_ext - scx: Fix maximal BPF selftest prog - sched_ext: fix application of sizeof to pointer - selftests/sched_ext: fix build after renames in sched_ext API - sched_ext: Add __weak to fix the build errors - sched_ext: Replace scx_next_task_picked() with switch_class() in comment - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*() - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local() - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]() - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl() - sched_ext: Clarify sched_ext_ops table for userland scheduler - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup - watchdog/softlockup: Report the most frequent interrupts - watchdog/softlockup: Low-overhead detection of interrupt storm - genirq: Provide a snapshot mechanism for interrupt statistics - genirq: Fix kabi for kstat_irqs in struct irq_desc - genirq: Convert kstat_irqs to a struct - genirq: Deduplicate interrupt descriptor initialization - sched_ext: Avoid live-locking bypass mode switching - sched_ext: Fix incorrect use of bitwise AND - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap - sched_ext: Introduce NUMA awareness to the default idle selection policy - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags - sched_ext: Rename CFI stubs to names that are recognized by BPF - sched_ext: Introduce LLC awareness to the default idle selection policy - sched_ext: Clarify ops.select_cpu() for single-CPU tasks - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection - sched_ext: Use btf_ids to resolve task_struct - sched/ext: Use tg_cgroup() to elieminate duplicate code - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx() - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type - sched_ext: Add a missing newline at the end of an error message - sched_ext: Fix enq_last_no_enq_fails selftest - sched_ext: Make cast_mask() inline - scx: Fix raciness in scx_ops_bypass() - scx: Fix exit selftest to use custom DSQ - sched_ext: Fix function pointer type mismatches in BPF selftests - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ - sched: Pass correct scheduling policy to __setscheduler_class - sched: Add __setscheduler_class() for sched_ext - sched_ext: Remove unnecessary cpu_relax() - sched_ext: Don't hold scx_tasks_lock for too long - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers - sched_ext: bypass mode shouldn't depend on ops.select_cpu() - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl() - sched_ext: Start schedulers with consistent p->scx.slice values - Revert "sched_ext: Use shorter slice while bypassing" - sched_ext: use correct function name in pick_task_scx() warning message - selftests: sched_ext: Add sched_ext as proper selftest target - sched_ext: Documentation: Update instructions for running example schedulers - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init() - sched_ext: Improve error reporting during loading - sched_ext: Add __weak markers to BPF helper function decalarations - sched_ext: Remove redundant p->nr_cpus_allowed checker - sched_ext: Decouple locks in scx_ops_enable() - sched_ext: Decouple locks in scx_ops_disable_workfn() - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online() - sched_ext: Enable scx_ops_init_task() separately - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable() - sched_ext: Initialize in bypass mode - sched_ext: Remove SCX_OPS_PREPPING - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable() - sched_ext: Use shorter slice while bypassing - sched_ext: Split the global DSQ per NUMA node - sched_ext: Relocate find_user_dsq() - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new() - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL - tools/sched_ext: Receive misc updates from SCX repo - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle - sched_ext: Build fix for !CONFIG_SMP - sched_ext: Provide a sysfs enable_seq counter - sched_ext: Fix build when !CONFIG_STACKTRACE - sched_ext: Don't trigger ops.quiescent/runnable() on migrations - sched_ext: Synchronize bypass state changes with rq lock - scx_qmap: Implement highpri boosting - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq() - sched_ext: Compact struct bpf_iter_scx_dsq_kern - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq() - sched_ext: Move consume_local_task() upward - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq() - sched_ext: Reorder args for consume_local/remote_task() - sched_ext: Restructure dispatch_to_local_dsq() - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON - sched_ext: Refactor consume_remote_task() - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate - sched_ext: Add missing static to scx_dump_data - sched_ext: Add missing static to scx_has_op[] - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx() - sched: Add dummy version of sched_group_set_idle() - sched: Fix kabi for int idle in struct task_group - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT - sched_ext: Add a cgroup scheduler which uses flattened hierarchy - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group - sched_ext: Add cgroup support - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT - sched: Make cpu_shares_read_u64() use tg_weight() - sched: Expose css_tg() - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable - sched_ext: Remove sched_class->switch_class() - sched_ext: Remove switch_class_scx() - sched_ext: Relocate functions in kernel/sched/ext.c - sched_ext: Unify regular and core-sched pick task paths - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP - sched_ext: Don't call put_prev_task_scx() before picking the next task - sched: Fix kabi for put_prev_task in struct sched_class - sched: Add put_prev_task(.next) - sched: Combine the last put_prev_task() and the first set_next_task() - sched: Fix kabi pick_task in struct sched_class - sched: Rework pick_next_task() - sched: Split up put_prev_task_balance() - sched: Fixup set_next_task() implementations - sched/fair: Unify pick_{,next_}_task_fair() - sched/fair: Cleanup pick_task_fair()'s curr - sched/fair: Cleanup pick_task_fair() vs throttle - sched/fair: Remove unused 'curr' argument from pick_next_entity() - sched: Use set_next_task(.first) where required - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched() - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq() - sched_ext: Add missing cfi stub for ops.tick - scx_central: Fix smatch checker warning - sched_ext: Don't use double locking to migrate tasks across CPUs - sched_ext: define missing cfi stubs for sched_ext - sched_ext: Improve logging around enable/disable - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals() - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64 - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu() - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked() - sched_ext: Fix kabi for balance in struct sched_class - sched_ext: Simplify UP support by enabling sched_class->balance() in UP - sched_ext: Use update_curr_common() in update_curr_scx() - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance() - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick() - sched_ext: Allow p->scx.disallow only while loading - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT] - scx/selftests: Verify we can call create_dsq from prog_run - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL - sched_ext: Fixes incorrect type in bpf_scx_init() - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP - sched_ext: Unpin and repin rq lock from balance_scx() - sched: Move struct balance_callback definition upward - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated - sched_ext: Reimplement scx_bpf_reenqueue_local() - sched_ext/scx_qmap: Add an example usage of DSQ iterator - sched_ext: Implement DSQ iterator - sched_ext: Take out ->priq and ->flags from scx_dsq_node - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h - sched, sched_ext: Open code for_balance_class_range() - sched_ext: Minor cleanups in kernel/sched/ext.h - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task() - sched, sched_ext: Simplify dl_prio() case handling in sched_fork() - sched/ext: Add BPF function to fetch rq - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency - sched_ext: fix typo in set_weight() description - sched_ext: Fix spelling mistake: "intead" -> "instead" - sched_ext: Drop tools_clean target from the top-level Makefile - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed - sched_ext: Add cpuperf support - cpufreq_schedutil: Refactor sugov_cpu_is_busy() - sched_ext: Fix kabi for switch_class in struct sched_class - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class() - sched_ext: Add selftests - sched_ext: Documentation: scheduler: Document extensible scheduler class - sched_ext: Add vtime-ordered priority queue to dispatch_q's - sched_ext: Implement core-sched support - sched_ext: Bypass BPF scheduler while PM events are in progress - sched_ext: Implement sched_ext_ops.cpu_online/offline() - sched_ext: Implement sched_ext_ops.cpu_acquire/release() - sched_ext: Implement SCX_KICK_WAIT - sched_ext: Track tasks that are subjects of the in-flight SCX operation - sched_ext: Implement tickless support - sched_ext: Add task state tracking operations - sched_ext: Make watchdog handle ops.dispatch() looping stall - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support - tools/sched_ext: Add scx_show_state.py - sched_ext: Print debug dump after an error exit - sched_ext: Print sched_ext info when dumping stack - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT - sched_ext: Implement runnable task stall watchdog - sched_ext: Add sysrq-S which disables the BPF scheduler - sched_ext: Add scx_simple and scx_example_qmap example schedulers - sched_ext: Allow dequeue_task_scx to fail - sched_ext: Fix kabi for scx in struct task_struct - sched_ext: Implement BPF extensible scheduler class - sched: Fix kabi for dequeue_task in struct sched_class - sched: Allow sched_class::dequeue_task() to fail - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class - sched/fair: Rename check_preempt_curr() to wakeup_preempt() - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair() - sched_ext: Add boilerplate for extensible scheduler class - sched: Add normal_policy() - sched: Factor out update_other_load_avgs() from __update_blocked_others() - sched: Factor out cgroup weight conversion functions - sched: Fix kabi for switching_to in struct sched_class - sched: Add sched_class->switching_to() and expose check_class_changing/changed() - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c - sched/cpufreq: Rework schedutil governor performance estimation - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state" - sched/core: Remove ifdeffery for saved_state - sched: Misc cleanups - Revert "sched/core: Remove ifdeffery for saved_state" - Revert "sched: Fix kabi breakage of struct task_struct for saved_state" - sched: Simplify sched_move_task() - sched: Simplify sched_rr_get_interval() - sched: Simplify yield_to() - sched: Simplify sched_{set,get}affinity() - sched: Simplify syscalls - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting" - sched: Simplify set_user_nice() - cleanup: Make no_free_ptr() __must_check - sched: Fix kabi for reweight_task in struct sched_class - sched: Add sched_class->reweight_task() - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() - sched: Restructure sched_class order sanity checks in sched_init() - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse" - Revert "sched: Add qos_sched_enabled() helper for future expansion" - Revert "sched/fair: Move dynamic affinity helper functions to sched.h" - Revert "sched/fair: Add SMT QoS sched core code" - Revert "arm64: Add arch code for SMT QoS" - Revert "config: Enable SMT_QOS" - ub: cdma: add software TLB invalidation for KSVA memory - !22510 ub: udma: code optimization about safe mode - !21986 urma: Enable RH2D streaming by IPoURMA - !22521 v12 SMT QOS - usb: xhci: Prevent interrupt storm on host controller error (HCE) - !21948 urma: fix spinlock usage in ubagg_get_seg_info function - net/oenetcls: fix mode-0 init rollback for ntuple resources - !22501 smb: client: prevent races in ->query_interfaces() - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - !22482 cifs: some missing initializations on replay - !22472 smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - !22426 smb: client: prevent races in ->query_interfaces() - net/oenetcls: fix RPS CPU index scaling bias - ub: udma: code optimization - net/oenetcls: free sk entry hash on ntuple cleanup - !22511 apei: use blocking notifier for page offline policy chain - config: Enable SMT_QOS - arm64: Add arch code for SMT QoS - sched/fair: Add SMT QoS sched core code - sched/fair: Move dynamic affinity helper functions to sched.h - sched: Add qos_sched_enabled() helper for future expansion - sched: Split out QOS_LEVEL from QOS_SCHED for reuse - !22442 v5 ext4 hardware atomic write support - urma: Enable RH2D streaming by IPoURMA - !22503 ub: ub_fwctl: add querying the peak bandwidth. - !22500 ub:ubus: Bugfix control software restart features - ceph: add a bunch of missing ceph_path_info initializers - apei: use blocking notifier for page offline policy chain - urma: fix spinlock usage in ubagg_get_seg_info function - ub: udma: resolve legacy issues of shared page tables. - ub: udma: support dtu function. - ub: udma: support jetty_opt. - ub: udma: support ucp & udp. - ub: udma: support sharing JFC. - ub: udma: supports write with atomic. - ub: udma: Supports Safe Mode. - !22256 urma: fix reference count imbalance in ubagg and uburma modules - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute - x86: config: Enable Intel Application Energy Telemetry (AET) - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - x86,fs/resctrl: Update documentation for telemetry events - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG - fs/resctrl: Move RMID initialization to first mount - x86,fs/resctrl: Compute number of RMIDs as minimum across resources - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG - x86/resctrl: Add energy/perf choices to rdt boot option - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() - fs/resctrl: Refactor mkdir_mondata_subdir() - x86/resctrl: Read telemetry events - x86/resctrl: Find and enable usable telemetry events - x86,fs/resctrl: Add architectural event pointer - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs - x86/resctrl: Discover hardware telemetry events - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains - x86,fs/resctrl: Add and initialize a resource for package scope monitoring - x86,fs/resctrl: Add an architectural hook called for first mount - x86,fs/resctrl: Support binary fixed point event counters - x86,fs/resctrl: Handle events that can be read from any CPU - fs/resctrl: Make event details accessible to functions when reading events - x86,fs/resctrl: Rename some L3 specific functions - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters - fs/resctrl: Split L3 dependent parts out of __mon_event_count() - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr - x86/resctrl: Clean up domain_remove_cpu_ctrl() - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types - x86/resctrl: Move L3 initialization into new helper function - x86,fs/resctrl: Improve domain type checking - fs/resctrl: Consider sparse masks when initializing new group's allocation - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled - MAINTAINERS: resctrl: Add myself as reviewer - x86/resctrl: Configure mbm_event mode if supported - fs/resctrl: Introduce the interface to switch between monitor modes - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled - fs/resctrl: Introduce the interface to modify assignments in a group - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group - fs/resctrl: Auto assign counters on mkdir and clean up on group removal - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir - fs/resctrl: Provide interface to update the event configurations - fs/resctrl: Add event configuration directory under info/L3_MON/ - fs/resctrl: Support counter read/reset with mbm_event assignment mode - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() - x86/resctrl: Refactor resctrl_arch_rmid_read() - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode - fs/resctrl: Pass struct rdtgroup instead of individual members - fs/resctrl: Add the functionality to unassign MBM events - fs/resctrl: Add the functionality to assign MBM events - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC - fs/resctrl: Introduce event configuration field in struct mon_evt - x86/resctrl: Add data structures and definitions for ABMC assignment - fs/resctrl: Introduce interface to display number of free MBM counters - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain - fs/resctrl: Add resctrl file to display number of assignable counters - fs/resctrl: Introduce the interface to display monitoring modes - x86/resctrl: Add support to enable/disable AMD ABMC feature - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource - x86/resctrl: Add ABMC feature in the command line options - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) - x86,fs/resctrl: Prepare for more monitor events - x86/resctrl: Remove the rdt_mon_features global variable - x86,fs/resctrl: Replace architecture event enabled checks - x86,fs/resctrl: Consolidate monitor event descriptions - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest - fs/resctrl: Optimize code in rdt_get_tree() - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters - resctrl: get rid of pointless debugfs_file_{get,put}() - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex - MAINTAINERS: Add reviewers for fs/resctrl - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name - x86/resctrl: Always initialise rid field in rdt_resources_all[] - x86/resctrl: Relax some asm #includes - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() - x86/resctrl: Squelch whitespace anomalies in resctrl core code - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs - x86/resctrl: Move enum resctrl_event_id to resctrl.h - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl - fs/resctrl: Add boiler plate for external resctrl code - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation - x86/resctrl: Split trace.h - x86/resctrl: Expand the width of domid by replacing mon_data_bits - x86/resctrl: Add end-marker to the resctrl_event_id enum - x86/resctrl: Move is_mba_sc() out of core.c - x86/resctrl: Drop __init/__exit on assorted symbols - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point - x86/resctrl: Check all domains are offline in resctrl_exit() - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" - x86/resctrl: Remove the limit on the number of CLOSID - x86/resctrl: Optimize cpumask_any_housekeeping() - kernfs: Move dput() outside of the RCU section. - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). - kernfs: annotate different lockdep class for of->mutex of writable files - kernfs: Use RCU to access kernfs_node::name. - kernfs: Use RCU to access kernfs_node::parent. - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy() - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy() - kernfs: sysfs: support custom llseek method for sysfs entries - ptrace: Convert ptrace_attach() to use lock guards - cpumask: Add cpumask_{first,next}_andnot() API - find: Add find_first_andnot_bit() - cpumask: Relax cpumask_any_but() - cpumask: Switch from inline to __always_inline - cpumask: Introduce cpumask_first_and_and() - cpumask: add cpumask_weight_andnot() - cpumask: add cpumask_any_and_but() - cpumask: kernel-doc cleanups and additions - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers - x86/resctrl: Move get_config_index() to a header - x86/resctrl: Handle throttle_mode for SMBA resources - x86/resctrl: Move RFTYPE flags to be managed by resctrl - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr - x86/resctrl: Make prefetch_disable_bits belong to the arch code - x86/resctrl: Allow an architecture to disable pseudo lock - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource - x86/resctrl: Move mba_mbps_default_event init to filesystem code - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers - x86/resctrl: Move monitor init work to a resctrl init call - x86/resctrl: Move monitor exit work to a resctrl exit call - x86/resctrl: Add an arch helper to reset one resource - x86/resctrl: Move resctrl types to a separate header - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() - x86/resctrl: Add helper for setting CPU default properties - x86/resctrl: Generate default_ctrl instead of sharing it - x86/resctrl: Add max_bw to struct resctrl_membw - x86/resctrl: Remove data_width and the tabular format - x86/resctrl: Use schema type to determine the schema format string - x86/resctrl: Use schema type to determine how to parse schema values - x86/resctrl: Remove fflags from struct rdt_resource - x86/resctrl: Add a helper to avoid reaching into the arch code resource list - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors - x86/resctrl: Document the new "mba_MBps_event" file - x86/resctrl: Add write option to "mba_MBps_event" file - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories - x86/resctrl: Make mba_sc use total bandwidth if local is not supported - x86/resctrl: Compute memory bandwidth for all supported events - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags - x86/resctrl: Use kthread_run_on_cpu() - x86/resctrl: Support Sub-NUMA cluster mode SNC6 - x86/resctrl: Slightly clean-up mbm_config_show() - x86/resctrl: Annotate get_mem_config() functions as __init - x86/resctrl: Avoid overflow in MB settings in bw_validate() - x86/resctrl: Fix arch_mbm_* array overrun on SNC - x86/resctrl: Update documentation with Sub-NUMA cluster changes - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Make __mon_event_count() handle sum domains - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Allocate a new field in union mon_data_bits - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function - x86/resctrl: Initialize on-stack struct rmid_read instances - x86/resctrl: Add a new field to struct rmid_read for summation of domains - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems - x86/resctrl: Introduce snc_nodes_per_l3_cache - x86/resctrl: Add node-scope to the options for feature scope - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures - x86/resctrl: Prepare for different scope for control/monitor operations - x86/resctrl: Prepare to split rdt_domain structure - x86/resctrl: Prepare for new domain scope - x86/resctrl: Replace open coded cacheinfo searches - cacheinfo: Add function to get cacheinfo for a given CPU and cache level - cpu: Drop "extern" from function declarations in cpuhplock.h - cpu: Move CPU hotplug function declarations into their own header - x86/resctrl: Don't try to free nonexistent RMIDs - x86/resctrl: Add tracepoint for llc_occupancy tracking - x86/resctrl: Rename pseudo_lock_event.h to trace.h - x86/resctrl: Simplify call convention for MSR update functions - x86/resctrl: Pass domain to target CPU - x86/resctrl: Switch to new Intel CPU model defines - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline - Documentation/x86: Fix title underline length - Documentation/x86: Document that resctrl bandwidth control units are MiB - x86/resctrl: Remove lockdep annotation that triggers false positive - x86/resctrl: Separate arch and fs resctrl locks - x86/resctrl: Move domain helper migration into resctrl_offline_cpu() - x86/resctrl: Add CPU offline callback for resctrl work - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU - x86/resctrl: Add CPU online callback for resctrl work - x86/resctrl: Add helpers for system wide mon/alloc capable - x86/resctrl: Make rdt_enable_key the arch's decision to switch - x86/resctrl: Move alloc/mon static keys into helpers - x86/resctrl: Make resctrl_mounted checks explicit - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep - x86/resctrl: Queue mon_event_read() instead of sending an IPI - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding - x86/resctrl: Track the number of dirty RMID a CLOSID has - x86/resctrl: Allow RMID allocation to be scoped by CLOSID - x86/resctrl: Access per-rmid structures by index - x86/resctrl: Track the closid with the rmid - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare() - x86/resctrl: Create helper for RMID allocation and mondata dir creation - x86/resctrl: Free rmid_ptrs from resctrl_exit() - x86/resctrl: Remove redundant variable in mbm_config_write_domain() - x86/resctrl: Implement new mba_MBps throttling heuristic - x86/resctrl: Read supported bandwidth sources from CPUID - x86/resctrl: Remove hard-coded memory bandwidth limit - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe() - x86: Decouple resctrl with resctrl-mpam - ub: ub_fwctl: add querying the peak bandwidth. - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process - dm: clear cloned request bio pointer when last clone bio completes - net/oenetcls: Add rps policy switch for phy NIC - net/oenetcls: Make OENETCLS default as module - net/oenetcls: Support ipv6 for ntuple mode - net/oenetcls: Supports rxq multiplexing - net/oenetcls: Add local flow NUMA-aware rps - net/oenetcls: Fix possible hash collision issue - net/oenetcls: Prioritize oenetcls hooks over rps - net/oenetcls: Add mode 2 for rps numa affinity - smb: client: prevent races in ->query_interfaces() - ub:ubus: Bugfix control software restart features - !22481 v3 optimize copy_from_user - !22490 ub: ubase&unic: Advanced Features for issue #9110 - !22424 powerpc, perf: Check that current->mm is alive before getting user callchain - gpiolib: acpi: Fix potential out-of-boundary left shift - ub: ubase: Provide interface for obtaining ub feature - ub: ubase&unic: ubase & unic use non mirror mem - !22359 linkdata: fix compile error - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool - !22456 ub:ubus: change the condition of io decoder creating page table or not - !22470 ub/unic: bugfix for ubase&unic driver - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !22310 iommu: Optimize the iommu PLBI Framework - !22437 iommu/ummu: remove swap operation when ungrant - cifs: some missing initializations on replay - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - arm64: uaccess: add CONFIG control for copy_from_user_opt - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11 - usb: class: cdc-wdm: fix reordering issue in read code path - !22427 perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure - ub: ubase: Resolve the issue of insufficient ctrlq sequences - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time - ub: ubase: Solve the mailbox processing times out in abnormal scenarios - net: unic: Fixed the issue of memory overwriting in unic traffic flow - ub: ubase&unic: encoding alarm rectification - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure - net: unic: Supports querying of the Ethernet port's NL-layer register - ub: ubase: Fix the problem of frequent log printing - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices - ub: ubase: Delete residual DTU window of the UDMA during reset - ub: ubase: Add DTU capability bit printing - net: unic: The unsupported VL rate limit value is displayed as 0 - net: unic: Notify MAMI when the LACP status changes - net: unic: adapt to the change for ETS tsa and bw configuration permission - !22413 ub: ub_fwctl: query port link status add construct first link data - bpf/selftests: test_select_reuseport_kern: Remove unused header - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: Allow to use SMP threads for backlog NAPI." - ksmbd: fix recursive locking in RPC handle list access - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - mptcp: avoid dup SUB_CLOSED events after disconnect - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - drm/msm/a6xx: fix bogus hwcg register updates - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - net/sched: act_ife: convert comma to semicolon - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - wifi: mac80211: move TDLS work to wiphy work - ksmbd: Fix race condition in RPC handle list access - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - ksmbd: smbd: fix dma_unmap_sg() nents - mei: trace: treat reg parameter as string - mm/kfence: randomize the freelist on initialization - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/soc21: fix xclk for APUs - drm/imx/tve: fix probe device leak - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - flex_proportions: make fprop_new_period() hardirq safe - selftests: mptcp: join: fix local endp not being tracked - mptcp: only reset subflow errors when propagated - scsi: qla2xxx: edif: Fix dma_free_coherent() size - gpio: pca953x: mask interrupts in irq shutdown - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - ASoC: fsl: imx-card: Do not force slot width to sample width - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - riscv: compat: fix COMPAT_UTS_MACHINE definition - pinctrl: meson: mark the GPIO controller as sleeping - dma/pool: distinguish between missing and exhausted atomic pools - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net: bridge: fix static key check - nfc: nci: Fix race between rfkill and nci_unregister_device(). - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Report rx_discards_phy via rx_dropped - ice: stop counting UDP csum mismatch as rx_errors - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - rocker: fix memory leak in rocker_world_port_post_fini() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - ipv6: use the right ifindex when replying to icmpv6 from localhost - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - octeon_ep: Fix memory leak in octep_device_setup() - net: bcmasp: fix early exit leak with fixed phy - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - !22370 scsi: target: tcm_loop: Drain commands in target_reset handler - !22364 cifs: Fix locking usage for tcon fields - net: ipa: fix event ring index not programmed for IPA v5.0+ - !22458 ub:ubus: Add control software restart features - !22447 v4 arm64/ras: Firmware-first SEI error handling with ESB synchronization - iommu/ummu: remove swap operation when ungrant - Linkdata: fix build failure due to missing IPsec configs in defconfig - ub:ubus: Add control software restart features - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL. - ub: ub_fwctl: query port link status add construct first link data - !22395 ub:ubus: support getting supported features data - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM - ub:ubus: change the condition of io decoder creating page table or not - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors" - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS - arm64: Add runtime switch to control ESB for SEI synchronization - arm64/entry: Add support to synchronize SEI at the exception boundary - !22417 iommu/ummu-core: support TID sharing within same mm - urma: fix reference count imbalance in ubagg and uburma modules - !22432 spi: use generic driver_override infrastructure - Documentation: ext4: Convert includes into toctrees - Documentation: ext4: atomic_writes: Demote last three sections - block: Don't allow an atomic write be truncated in blkdev_write_iter() - nvme: stop using AWUPF - ext4: Simplify last in leaf check in ext4_map_query_blocks - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE - block: Fix blk_validate_atomic_write_limits() build for arm32 - block: fix kabi broken in enum req_flag_bits - iomap: Lift blocksize restriction on atomic writes - ext4: Add atomic block write documentation - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc - ext4: Add multi-fsblock atomic write support with bigalloc - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS - ext4: Make ext4_meta_trans_blocks() non-static for later use - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() - ext4: Document an edge case for overwrites - ext4: Do not fallback to buffered-io for DIO atomic write - ext4: Support setting FMODE_CAN_ATOMIC_WRITE - ext4: Check for atomic writes support in write iter - ext4: Add statx support for atomic writes - fs: fix kabi broken in struct kstat - fs: Add initial atomic write support info to statx - fs: iomap: Atomic write support - fs: Export generic_atomic_write_valid() - nvme: Atomic write support - block: Add bdev atomic write limits helpers - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() - block/fs: Pass an iocb to generic_atomic_write_valid() - block: Add fops atomic write support - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() - block: fix kabi broken in struct queue_limits - block: Add core atomic write support - fs: Initial atomic write support - block: Generalize chunk_sectors support as boundary support - block: Pass blk_queue_get_max_sectors() a request pointer - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg() - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000 - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000 - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller - spi: use generic driver_override infrastructure - iommu/ummu-core: support TID sharing within same mm - perf/x86/intel/uncore: Fix die ID init and look up bugs - smb: client: prevent races in ->query_interfaces() - powerpc, perf: Check that current->mm is alive before getting user callchain - iommu: Optimize the iommu PLBI Framework - ub:ubus: support getting supported features data - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe - scsi: target: tcm_loop: Drain commands in target_reset handler - cifs: Fix locking usage for tcon fields - bridge: br_nd_send: validate ND option lengths - sched/fair: Fix overflow in vruntime_eligible() - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics - sched/fair: Mark m*_vruntime() with __maybe_unused - sched/fair: Clear rel_deadline when initializing forked entities - Revert "sched/fair: Clear rel_deadline when initializing forked entities" - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - udp: Fix wildcard bind conflict check when using hash2 - tcp: Rearrange tests in inet_csk_bind_conflict(). - x86/delay: add support for Zhaoxin PAUSEOPT instruction - urma: fix the panic when ipourma module is repeatedly loaded - apei/ghes: Add Zhaoxin platform support for ghes_edac - x86/cpu: detect extended topology for Zhaoxin CPUs - ALSA: HDA: Add Centaur HDMI Controller and Codec support - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors - efi/cper: Add Zhaoxin mem error decode for KH-50000 - efi/cper: Add Zhaoxin cache error decode - efi/cper: Add Zhaoxin micro-architectural error decode - efi/cper: Add Zhaoxin non standard cper error decode - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode - hwmon: zhaoxin-cputemp: Update for KX-8000 - zhaoxin: Update hardware random number generator driver - ALSA: hda: Add support for Zhaoxin SB HDAC controller - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT - crypto: ccp: SM2 ccp encryption support Hygon model 10h - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm - mm: export split_vma for module use - crypto: ccp: Support SM4-GCM for hygon ccp - crypto: ccp: Support SM4-XTS for hygon ccp - !22935 iommu/ummu: Adapt disable DVM - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver - iommu/ummu: Adapt disable DVM - !22925 Fix hist_field_name issue - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22735 drivers/ub/sentry: support link up/down event - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: Fix fully-qualified variable reference printing in histograms - tracing: Rebuild full_name on each hist_field_name() call - !22868 tracing/probe: reject non-closed empty immediate strings - !22867 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - !22862 tracing: branch: Fix inverted check on stat tracer registration - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22543 netkit, bpf: Add bpf programmable net device - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop - !22860 ub:ubus: bugfix for QEMU'addr 8byte check - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches - !22828 sched/idle: Preserve prev task for soft quota fair repick - sched: Remove redundant rcu_read_lock() in build_soft_domain() - !22859 ub: cdma: move cleanup helper to event and remove unused include - !22244 Fix CVE-2026-31729 - !22469 LoongArch: KVM: fix vm start failed - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000 - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn() - !22800 Fix CVE-2026-43381 - !22849 pstore/ram: fix resource leak when ioremap() fails - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - !22666 Fix CVE-2026-43037 - !22627 Fix CVE-2026-43038 - !22626 Fix CVE-2026-43040 - !22638 Fix CVE-2026-43057 - sched/idle: Fix soft quota fair repick state handling - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - drivers/ub/sentry: add link down/up event detection and reporting - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - urma: zero-initialize cg_obj to prevent uninitialized memory access - !22539 mm: introduce CMA-based folio allocation - ub:ubus: bugfix for QEMU'addr 8byte check - tracing/probe: reject non-closed empty immediate strings - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: branch: Fix inverted check on stat tracer registration - x86/microcode: Add Zhaoxin cpu microcode update driver - ub:ubus: bugfix for UE probe without MUE'lock - ub:ubus: Fixing the bug of concurrent hotplug and device reset - ub: cdma: move cleanup helper to event and remove unused include - !22798 sched/fair: Do not send IPI if WFI timeout is 0 - pstore/ram: fix resource leak when ioremap() fails - !22790 v2 Fix NULL pointer dereference - !22816 Fix CVE-2026-43492 - Revert "driver core: enforce device_lock for driver_match_device()" - gpio: omap: do not register driver in probe() - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs - mm: introduce CMA-based folio allocation - ub: cdma: fix multiple code quality and potential bug issues - !22772 Fix CVE-2026-43493 - vsock/test: verify socket options after setting them - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Allow recovery for tape devices - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - nilfs2: Fix potential block overflow that cause system hang - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - driver core: enforce device_lock for driver_match_device() - !22758 bpf mainline for olk-6.6 - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support - !21806 [OLK-6.6] efi/cper: Print correctable AER information - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23 - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5 - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - !22752 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode. - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels - config: Enable NETKIT - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55 - add __GENKSYMS__ in uapi bpf.h and if_link.h - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type. - !22547 iommu/ummu: Use non mirror mem. - !22548 iommu/ummu: Introduce struct ummu_device_event - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Move AVEC interrupt injection into switch loop - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Compile switch.S directly into the kernel - LoongArch: KVM: Add DMSINTC inject msi to vCPU - LoongArch: KVM: Add DMSINTC device support - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side - LoongArch: KVM: Add paravirt preempt feature in hypervisor side - LoongArch: KVM: Set default return value in KVM IO bus ops - LoongArch: KVM: Add FPU/LBT delay load support - LoongArch: KVM: Move LBT capability check in exception handler - LoongArch: KVM: Move LASX capability check in exception handler - LoongArch: KVM: Move LSX capability check in exception handler - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch - LoongArch: KVM: Check VM msgint feature during interrupt handling - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() - LoongArch: KVM: Move feature detection in kvm_vm_init_features() - LoongArch: KVM: Add more CPUCFG mask bits - LoongArch: Complete CPUCFG registers definition - crypto: virtio - Replace package id with numa node id - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - ACPICA: iASL: Add definitions for the IOVT table - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() - LoongArch: Add and use some macros for AVEC - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu - LoongArch: KVM: Add AVEC basic support - LoongArch: KVM: Get VM PMU capability from HW GCFG register - LoongArch: KVM: Register perf callbacks for guest - LoongArch: KVM: Implement arch-specific functions for guest perf - LoongArch: KVM: Remove PGD saving during VM context switch - LoongArch: KVM: Rework pch_pic_update_batch_irqs() - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() - LoongArch: KVM: Add IRR and ISR register read emulation - LoongArch: KVM: Set version information at initial stage - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() - LoongArch: KVM: Add address alignment check in pch_pic register access - LoongArch: KVM: Add stat information with kernel irqchip - LoongArch: KVM: sync pch_pic to upstream - LoongArch: KVM: Access mailbox directly in mail_send() - LoongArch: KVM: Add implementation with IOCSR_IPI_SET - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() - LoongArch: KVM: sync kvm_ipi to upstream - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions - LoongArch: KVM: Use 64-bit register definition for EIOINTC - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() - LoongArch: KVM: Use generic function loongarch_eiointc_write() - LoongArch: KVM: Use generic function loongarch_eiointc_read() - LoongArch: KVM: Use standard bitops API with eiointc - LoongArch: KVM: Remove never called default case statement - LoongArch: KVM: Remove unused parameter len - LoongArch: KVM: Remove unnecessary local variable - LoongArch: KVM: Disable updating of "num_cpu" and "feature" - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space - LoongArch: KVM: Check interrupt route from physical CPU - LoongArch: KVM: Fix interrupt route update with EIOINTC - LoongArch: KVM: Add address alignment check for IOCSR emulation - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu - sched/fair: Do not send IPI if WFI timeout is 0 - ub: udma: alloc jfc_id avoid the ccu/starts type. - ub: udma: optimize the remove process. - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index - LoongArch: KVM: sync eiointc to upstream - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use - LoongArch: KVM: Fix VM migration failure with PTW enabled - LoongArch: KVM: Do not flush tlb if HW PTW supported - LoongArch: KVM: Skip PMU checking on vCPU context switch - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation - LoongArch: KVM: Add sign extension with kernel MMIO read emulation - irqchip/loongson-eiointc: Add multiple interrupt pin routing support - irqchip/loongson-eiointc: Add virt extension support - irqchip/loongson-eiointc: Route interrupt parsed from bios table - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU - LoongArch: config: enable paravirt feature - x86/sev: Fix potential sign extension in amd_enc_status_change_finish() - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue - bpf: Fix tcx/netkit detach permissions when prog fd isn't given - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach - rtnetlink: add needed_{head,tail}room attributes - bpftool: Fix cgroup command to only show cgroup bpf programs - netkit: Allow for configuring needed_{head,tail}room - selftests/bpf: Extend netkit tests to validate skb meta data - tools: Sync if_link.h uapi tooling header - netkit: Simplify netkit mode over to use NLA_POLICY_MAX - netkit: Add option for scrubbing skb meta data - netkit: Disable netpoll support - bpftool: Query only cgroup-related attach types - selftests/bpf: Add netkit test for pkt_type - selftests/bpf: Add netkit tests for mac address - netkit: Fix pkt_type override upon netkit pass verdict - netkit: Fix setting mac address in l2 mode - bpf, docs: Fix bpf_redirect_peer header doc - bpf: Add missing BPF_LINK_TYPE invocations - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link - selftests/bpf: Add netkit to tc_redirect selftest - bpf, netkit: Add indirect call wrapper for fetching peer dev - netkit: Add tstats per-CPU traffic counters - netkit: Remove explicit active/peer ptr initialization - selftests/bpf: Add selftests for netkit - bpftool: Extend net dump with netkit progs - bpftool: Implement link show support for netkit - libbpf: Add link-based API for netkit - tools: Sync if_link uapi header - netkit, bpf: Add bpf programmable net device - !22738 tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22649 e1000/e1000e: Fix leak in DMA error cleanup - xSched: fix NULL pointer dereference in cfs_rq during class switch - xSched/dmem: memory allocation size must larger than 0 - xSched: prevent HBM allocation for non-AI tasks - xSched: fix incorrect error returns in vstream allocation - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility - !22546 iommu/ummu: Optimized ubmem register compatibility - !22545 iommu/ummu: Support pplb. - !22732 urma: add rate limit for modify jetty error logs - !22467 rme: add debugfs nodes for rme firmware log control - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - !22766 mfs: fix inode resource leak when cache object fd is zero - urma: add rate limit for modify error logs - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - mfs: fix inode resource leak when cache object fd is zero - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK - bpf: Fix OOB in pcpu_init_value - bpf: Fix stale offload->prog pointer after constant blinding - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Fix use-after-free in offloaded map/prog info fill - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists - !22268 vsock driver add translate cid and gpa interface - rme: add debugfs nodes for rme firmware log control - !22613 [OLK-6.6] Fix CVE-2026-31668 - rme: reorder hisi_ext_cmd enum values by numeric order - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Add missing resctrl initialization for Hygon - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper - x86/cpu/hygon: Clean up out-of-tree resctrl code - libbpf: Fix -Wdiscarded-qualifiers under C23 - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread - ub: cdma: specify log and add hardware version - ub: cdma: reconstruct the event reporting module - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: do not clear any interrupts automatically - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra: Fix a memory leak in tegra_slink_probe() - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - hwmon: (occ) Mark occ_init_attribute() as __printf - drm/mgag200: fix mgag200_bmc_stop_scanout() - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - tipc: use kfree_sensitive() for session key material - net: don't touch dev->stats in BPF redirect paths - dpaa2-switch: add bounds check for if_id in IRQ handler - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Initialize netdev pointer before queue setup - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: correctly check if CSA is active - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - wifi: mac80211: collect station statistics earlier when disconnect - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - netfilter: replace -EEXIST with -EBUSY - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - HID: playstation: Center initial joystick axes to prevent spurious events - HID: intel-ish-hid: Reset enum_devices_done before enumeration - btrfs: fix reservation leak in some error paths when inserting inline extent - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: intel-ish-hid: Update ishtp bus match to support device ID table - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - block,bfq: fix aux stat accumulation destination - net: usb: sr9700: support devices with virtual driver CD - wifi: wlcore: ensure skb headroom before skb_push - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - tracing: Fix ftrace event field alignments - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - binderfs: fix ida_alloc_max() upper bound - binder: fix BR_FROZEN_REPLY error log - ublk: fix deadlock when reading partition table - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - ARM: 9468/1: fix memset64() on big-endian - rbd: check for EOD after exclusive lock is ensured to be held - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - e1000/e1000e: Fix leak in DMA error cleanup - iommu/ummu: Support pplb. - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - net: ipv6: fix dst ref loop on input in rpl lwt - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue - net: ipv6: fix dst ref loop on input in seg6 lwt - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue - iommu/ummu: Introduce struct ummu_device_event - iommu/ummu: Use non mirror mem. - iommu/ummu: Optimized ubmem register compatibility - iommu/ummu: Support free_bit. - iommu/ummu: Optimized stage2 bypass support - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket - LoongArch: KVM: fix vm start fail - vsock driver add translate cid and gpa interface - efi/cper: Print correctable AER information - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - KVM: x86: Add support for CPUID leaf 0x8C860000 - Loongarch: Fixed warning about legacy_boot.h when build kernel - cpufreq: Add CPU frequency policy change notification support - update kernel version to openEuler 6.6.0-28.0.0 - update kernel version to openEuler 6.6.0-53.0.0 - update Raspberry Pi patch, last commit (ff0fe12ab875d587348b6f2b9e73ae928049ebee): dtoverlay: Add a dtoverlay for pwm-gpio - fix: initial output, then the screen goes black - add support for RPi 5 - update kernel version to openEuler 6.6.0-59.0.0 - update kernel version to openEuler 6.6.0-66.0.0 - update kernel version to openEuler 6.6.0-68.0.0 - update kernel version to openEuler 6.6.0-72.0.0 - update kernel version to openEuler 6.6.0-75.0.0 - iommu: Hook up '->unmap_pages' driver callback - update kernel version to openEuler 6.6.0-84.0.0 - update Raspberry Pi patch, last commit (f1076a9d7a269d72b6707283560d0d38203cb07a): delete the comment - add sub package: raspberrypi-kernel-headers - fix file erros in raspberrypi-kernel-develchangel - upgrade to 6.6.0-152.0.0 - update kernel version to openEuler 6.6.0-28.0.0 - update kernel version to openEuler 6.6.0-53.0.0 - update Raspberry Pi patch, last commit (ff0fe12ab875d587348b6f2b9e73ae928049ebee): dtoverlay: Add a dtoverlay for pwm-gpio - fix: initial output, then the screen goes black - add support for RPi 5 - update kernel version to openEuler 6.6.0-59.0.0 - update kernel version to openEuler 6.6.0-66.0.0 - update kernel version to openEuler 6.6.0-68.0.0 - update kernel version to openEuler 6.6.0-72.0.0 - update kernel version to openEuler 6.6.0-75.0.0 - iommu: Hook up '->unmap_pages' driver callback - update kernel version to openEuler 6.6.0-84.0.0 - update Raspberry Pi patch, last commit (f1076a9d7a269d72b6707283560d0d38203cb07a): delete the comment - add sub package: raspberrypi-kernel-headers - fix file erros in raspberrypi-kernel-develchangel - upgrade to 6.6.0-152.0.0 - update kernel version to openEuler 6.6.0-28.0.0 - update kernel version to openEuler 6.6.0-53.0.0 - update Raspberry Pi patch, last commit (ff0fe12ab875d587348b6f2b9e73ae928049ebee): dtoverlay: Add a dtoverlay for pwm-gpio - fix: initial output, then the screen goes black - add support for RPi 5 - update kernel version to openEuler 6.6.0-59.0.0 - update kernel version to openEuler 6.6.0-66.0.0 - update kernel version to openEuler 6.6.0-68.0.0 - update kernel version to openEuler 6.6.0-72.0.0 - update kernel version to openEuler 6.6.0-75.0.0 - iommu: Hook up '->unmap_pages' driver callback - update kernel version to openEuler 6.6.0-84.0.0 - update Raspberry Pi patch, last commit (f1076a9d7a269d72b6707283560d0d38203cb07a): delete the comment - add sub package: raspberrypi-kernel-headers - fix file erros in raspberrypi-kernel-develchangel - upgrade to 6.6.0-152.0.0 - update kernel version to openEuler 6.6.0-28.0.0 - update kernel version to openEuler 6.6.0-53.0.0 - update Raspberry Pi patch, last commit (ff0fe12ab875d587348b6f2b9e73ae928049ebee): dtoverlay: Add a dtoverlay for pwm-gpio - fix: initial output, then the screen goes black - add support for RPi 5 - update kernel version to openEuler 6.6.0-59.0.0 - update kernel version to openEuler 6.6.0-66.0.0 - update kernel version to openEuler 6.6.0-68.0.0 - update kernel version to openEuler 6.6.0-72.0.0 - update kernel version to openEuler 6.6.0-75.0.0 - iommu: Hook up '->unmap_pages' driver callback - update kernel version to openEuler 6.6.0-84.0.0 - update Raspberry Pi patch, last commit (f1076a9d7a269d72b6707283560d0d38203cb07a): delete the comment - add sub package: raspberrypi-kernel-headers - fix file erros in raspberrypi-kernel-develchangel - upgrade to 6.6.0-152.0.0