- License compliance rectification - Update to 2.7.1 stable - Update to 2.9.1 - Fix CVE-2022-47022 - License compliance rectification - Update to 2.7.1 stable - Update to 2.9.1 - Fix CVE-2022-47022 - License compliance rectification - Update to 2.7.1 stable - Update to 2.9.1 - Fix CVE-2022-47022 - License compliance rectification - Update to 2.7.1 stable - Update to 2.9.1 - Fix CVE-2022-47022 - License compliance rectification - Update to 2.7.1 stable - Update to 2.9.1 - Fix CVE-2022-47022 - License compliance rectification - Update to 2.7.1 stable - Update to 2.9.1 - Fix CVE-2022-47022 - fix: fix memory leaks when run with -H - libnuma: Fix incorrect print and exit of numa_preferred/_many APIs - numademo: Fix the using of the uninitialized value - backport patches from upstream - libnuma: Make numa_available respect EPERM - libnuma: fix nodemask allocation size for get_mempolicy - delete macros in changelog - backport patches from upstream - fix: fix memory leaks when run with -H - libnuma: Fix incorrect print and exit of numa_preferred/_many APIs - numademo: Fix the using of the uninitialized value - backport patches from upstream - libnuma: Make numa_available respect EPERM - libnuma: fix nodemask allocation size for get_mempolicy - delete macros in changelog - backport patches from upstream - fix: fix memory leaks when run with -H - libnuma: Fix incorrect print and exit of numa_preferred/_many APIs - numademo: Fix the using of the uninitialized value - backport patches from upstream - libnuma: Make numa_available respect EPERM - libnuma: fix nodemask allocation size for get_mempolicy - delete macros in changelog - backport patches from upstream - fix: fix memory leaks when run with -H - libnuma: Fix incorrect print and exit of numa_preferred/_many APIs - numademo: Fix the using of the uninitialized value - backport patches from upstream - libnuma: Make numa_available respect EPERM - libnuma: fix nodemask allocation size for get_mempolicy - delete macros in changelog - backport patches from upstream - fix: fix memory leaks when run with -H - libnuma: Fix incorrect print and exit of numa_preferred/_many APIs - numademo: Fix the using of the uninitialized value - backport patches from upstream - libnuma: Make numa_available respect EPERM - libnuma: fix nodemask allocation size for get_mempolicy - delete macros in changelog - backport patches from upstream - fix: fix memory leaks when run with -H - libnuma: Fix incorrect print and exit of numa_preferred/_many APIs - numademo: Fix the using of the uninitialized value - backport patches from upstream - libnuma: Make numa_available respect EPERM - libnuma: fix nodemask allocation size for get_mempolicy - delete macros in changelog - backport patches from upstream - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel - chardev/char-pty: Do not ignore chr_write() failures - hw/display/exynos4210_fimd: Remove duplicated definition - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value - hw/vfio/hct: fix ci check_code issues - hw/vfio/hct: support abort migration when hct exception - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed. - hw/vfio/hct: support live migration function for virtual machines. - hw/vfio/hct: support vfio-pci multiple processes. - hw/vfio/hct: support start with ccp.ko driver - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu. - hw/vfio/hct: fix ccp index error caused by uninitialized buf - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier. - hw/vfio/hct: sharing CCP resources between host and virtual machines. - aio-posix: fix spurious return from ->wait() due to signals - tests/unit: skip test-nested-aio-poll with io_uring - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle - target/arm/cpu64: remove duplicate include - cxl/cdat: Fix header sum value in CDAT checksum - hw/virtio: Fix packed virtqueue flush used_idx - arm/cpu: fix werrors if CONFIG_USER_ONLY was set - crypto/hash-gcrypt: Correct undeclared parameter - config/targets: update aarch64_be-linux-user gdb XML list - ub: add more check for arry to prevent mem overrun - backends: fix node id out of range when set proportion - ub: check kvm_usi_via_irqfd when set kvm interrupt - ub: fix some mem leak in handle_enum_query_request - ub: remove unused param in enum_query_get_max_num_ports - ub: fix possible mem overrun in fill_rq - ub: do size check for alloc idev ers addr - ub: dma memory read wirte with memory flag - ub: ummu mcmdq null cmd fix mem leak and enhace safe - ub: limits ummu kvtbl max entries to 1024 - ub: fix some mem leak - ub: correct ub cfg setting and values - ub: support different versions of the UMMU chips - ub: fix compiling error if target is not aarch64 - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464) - io: release active GSource in TLS channel finalizer - io: move websock resource release to close method - io: fix use after free in websocket handshake code(CVE-2025-11234) - ub: correct cfg write access - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665) - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations. - cxl/cdat: Handle cdat table build errors - hw/virtio: Fix the de-initialization of vhost-user devices - ub: fix memory leak in double pointer - ub: fix memory leak after vfio get region info - ub: fix buf overflow while read - ubmem_vmmu: Introduce new device for UBM request bridging - Migration/urma:reduce plflash update time - Migration/urma:avoid clearing remote dirty bitmap after migration completes - Migration/urma:add detailed downtime statistics for live migration - Migration/urma:support jfr post list mode over URMA - Migration/urma:move registration and unregistration ram to thread - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM - target/i386: csv: Remove all nodes within dma unmapping addr range - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container() - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest - target/i386: csv: Introduce host-data=str option - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines. - Migration/urma:fix memory leak caused by hashmap in urma migration - bugfix: add PAS_EXPANSION config to support mmcd device - ub: fix ub ers map failed - ub: fix vm reset core when config vfio-ub device - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region" - arm/kvm-rme: Add support for hisi-cca huge page mapping method - arm/kvm-rme: Add device assignment method for cca realm vm - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value - ub: don't check ers addr size is power of 2 - ub: support process msg code exch - ub: replace malloc with g_malloc0 - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP - MAINTAINERS: add me as maintainer to virtio-snd - virtio-snd: remove TODO comments - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196) - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195) - virtio-snd: tighten read amount in in_cb(CVE-2026-3195) - hw/arm: Close unreleased out_fault_fd - pci: avoid the info qtree crash caused by arm-smmuv3-accel