[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted linux-signed-arm64 6.12.35+1 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 03 Jul 2025 21:01:19 +0200
Source: linux-signed-arm64
Architecture: source
Version: 6.12.35+1
Distribution: sid
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 linux-signed-arm64 (6.12.35+1) unstable; urgency=medium
 .
   * Sign kernel from linux 6.12.35-1
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.34
     - [x86] idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in
       mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
     - sched: Fix trace_sched_switch(.prev_state)
     - [x86] perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node'
       member
     - [x86] perf/x86/amd/uncore: Prevent UMC counters from saturating
     - gfs2: replace sd_aspace with sd_inode
     - gfs2: gfs2_create_inode error handling fix
     - perf/core: Fix broken throttling when max_samples_per_tick=1
     - [arm64] crypto: sun8i-ce-cipher - fix error handling in
       sun8i_ce_cipher_prepare()
     - [powerpc*] do not build ppc_save_regs.o always
     - [powerpc*] crash: Fix non-smp kexec preparation
     - sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed
       tasks
     - [x86] microcode/AMD: Do not return error when microcode update is not
       necessary
     - [arm64] crypto: sun8i-ce - undo runtime PM changes during driver removal
     - [x86] cpu: Sanitize CPUID(0x80000000) output
     - [x86] insn: Fix opcode map (!REX2) superscript tags
     - brd: fix aligned_sector from brd_do_discard()
     - brd: fix discard end sector
     - [arm64,armhf] crypto: marvell/cesa - Handle zero-length skcipher requests
     - [arm64,armhf] crypto: marvell/cesa - Avoid empty transfer descriptor
     - erofs: fix file handle encoding for 64-bit NIDs
     - erofs: avoid using multiple devices with different type
     - [powerpc*] pseries/iommu: Fix kmemleak in TCE table userspace view
     - btrfs: scrub: update device stats when an error is detected
     - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
     - btrfs: fix invalid data space release when truncating block in NOCOW mode
     - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
     - crypto: lrw - Only add ecb if it is not already there
     - crypto: xts - Only add ecb if it is not already there
     - crypto: api - Redo lookup on EEXIST
     - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
     - [arm64] ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
     - [amd64] EDAC/skx_common: Fix general protection fault
     - [amd64] EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo
       channel 0
     - power: reset: at91-reset: Optimize at91_reset()
     - PM: EM: Fix potential division-by-zero error in em_compute_costs()
     - [amd64] ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation
       type
     - ASoC: SOF: amd: add missing acp descriptor field
     - PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
     - ACPI: resource: fix a typo for MECHREVO in irq1_edge_low_force_override[]
     - [x86] mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
     - PM: sleep: Print PM debug messages during hibernation
     - thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure
     - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
     - spi: sh-msiof: Fix maximum DMA transfer size
     - ALSA: core: fix up bus match const issues.
     - drm/vmwgfx: Add seqno waiter for sync_files
     - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource
     - drm/vmwgfx: Fix dumb buffer leak
     - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3
     - drm/amd/pp: Fix potential NULL pointer dereference in
       atomctrl_initialize_mc_reg_table
     - media: rkvdec: Fix frame size enumeration
     - [arm64] fpsimd: Avoid RES0 bits in the SME trap handler
     - [arm64] fpsimd: Discard stale CPU state when handling SME traps
     - [arm64] fpsimd: Don't corrupt FPMR when streaming mode changes
     - [arm64] fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP
     - [arm64] fpsimd: Reset FPMR upon exec()
     - [arm64] fpsimd: Fix merging of FPSIMD state during signal return
     - [arm64] drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions
     - [arm64] drm/panthor: Update panthor_mmu::irq::mask when needed
     - [arm64] drm/bridge: lt9611uxc: Fix an error handling path in
       lt9611uxc_probe()
     - fs/ntfs3: handle hdr_first_de() return value
     - fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr
     - [arm64,armhf] firmware: psci: Fix refcount leak in psci_dt_init
     - [arm64] Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
     - [arm64] fpsimd: Avoid warning when sve_to_fpsimd() is unused
     - [arm64,armhf] drm/tegra: rgb: Fix the unbound reference count
     - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
     - [arm64] fpsimd: Do not discard modified SVE state
     - overflow: Fix direct struct member initialization in _DEFINE_FLEX()
     - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
     - [arm64] drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3
     - [arm64] drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device
       ptr
     - [arm64] drm/mediatek: Fix kobject put for component sub-drivers
     - [arm64] drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on
       err
     - [arm64,armhf] media: verisilicon: Free post processor buffers on error
     - svcrdma: Reduce the number of rdma_rw contexts per-QP
     - [x86] xen/x86: fix initial memory balloon target
     - wifi: ath11k: fix node corruption in ar->arvifs list
     - wifi: ath12k: Fix memory leak during vdev_id mismatch
     - wifi: ath12k: Fix invalid memory access while forming 802.11 header
     - IB/cm: use rwlock for MAD agent lock
     - bpf: Check link_create.flags parameter for multi_kprobe
     - bpf: fix ktls panic with sockmap
     - bpf, sockmap: fix duplicated data transmission
     - bpf, sockmap: Fix panic when calling skb_linearize
     - f2fs: zone: fix to avoid inconsistence in between SIT and SSA
     - wifi: ath12k: fix cleanup path after mhi init
     - wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
     - wifi: ath12k: Fix buffer overflow in debugfs
     - f2fs: clean up unnecessary indentation
     - f2fs: prevent the current section from being selected as a victim during
       GC
     - f2fs: fix to do sanity check on sbi->total_valid_block_count
     - page_pool: Move pp_magic check into helper functions
     - page_pool: Track DMA-mapped pages and unmap them when destroying the pool
     - net: ncsi: Fix GCPS 64-bit member variables
     - libbpf: Fix buffer overflow in bpf_object__init_prog
     - net/mlx5: Avoid using xso.real_dev unnecessarily
     - xfrm: Use xdo.dev instead of xdo.real_dev
     - wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
     - wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
     - wifi: rtw88: do not ignore hardware read error during DPK
     - wifi: ath12k: fix invalid access to memory
     - wifi: ath12k: Add MSDU length validation for TKIP MIC error
     - wifi: ath12k: Fix the QoS control field offset to build QoS header
     - wifi: ath12k: fix node corruption in ar->arvifs list
     - [arm64] RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
     - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
     - libbpf: Fix event name too long error
     - libbpf: Remove sample_period init in perf_buffer
     - Use thread-safe function pointer in libbpf_print
     - iommu: Protect against overflow in iommu_pgsize()
     - bonding: assign random address if device address is same as bond
     - f2fs: clean up w/ fscrypt_is_bounce_page()
     - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
     - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
     - libbpf: Use proper errno value in linker
     - bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps
     - netfilter: bridge: Move specific fragmented packet to slow_path instead of
       dropping it
     - netfilter: nft_quota: match correctly when the quota just depleted
     - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
     - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
     - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
     - tracing: Move histogram trigger variables from stack to per CPU structure
     - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels
     - [arm*] clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
     - wifi: iwlfiwi: mvm: Fix the rate reporting
     - efi/libstub: Describe missing 'out' parameter in efi_load_initrd
     - tracing: Rename event_trigger_alloc() to trigger_data_alloc()
     - tracing: Fix error handling in event_trigger_parse()
     - ktls, sockmap: Fix missing uncharge operation
     - libbpf: Use proper errno value in nlattr
     - bpf: Fix WARN() in get_bpf_raw_tp_regs
     - dt-bindings: soc: fsl,qman-fqd: Fix reserved-memory.yaml reference
     - [s390x] bpf: Store backchain even for leaf progs
     - wifi: rtw89: pci: enlarge retry times of RX tag to 1000
     - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
     - wifi: rtw89: fix firmware scan delay unit for WiFi 6 chips
     - iommu: remove duplicate selection of DMAR_TABLE
     - wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
     - wifi: ath9k_htc: Abort software beacon handling if disabled
     - scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
     - kernfs: Relax constraint in draining guard
     - Bluetooth: ISO: Fix not using SID from adv report
     - wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init()
     - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
     - wifi: mt76: mt7925: prevent multiple scan commands
     - wifi: mt76: mt7925: refine the sniffer commnad
     - wifi: mt76: mt7925: ensure all MCU commands wait for response
     - wifi: mt76: mt7996: set EHT max ampdu length capability
     - wifi: mt76: mt7996: fix RX buffer size of MCU event
     - bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in
       multi-uprobe attach logic"
     - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft
       only builds
     - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
     - vfio/type1: Fix error unwind in migration dirty bitmap allocation
     - Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
     - Bluetooth: btintel: Check dsbr size from EFI variable
     - bpf, sockmap: Avoid using sk_socket after free when sending
     - netfilter: nf_tables: nft_fib: consistent l3mdev handling
     - netfilter: nft_tunnel: fix geneve_opt dump
     - [riscv64] RISC-V: KVM: lock the correct mp_state during reset
     - net: usb: aqc111: fix error handling of usbnet read calls
     - vsock/virtio: fix `rx_bytes` accounting for stream sockets
     - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
     - bpf: Avoid __bpf_prog_ret0_warn when jit fails
     - net: phy: clear phydev->devlink when the link is deleted
     - net: phy: fix up const issues in to_mdio_device() and to_phy_device()
     - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
     - net: lan743x: Fix PHY reset handling during initialization and WOL
     - net: phy: mscc: Fix memory leak when using one step timestamping
     - [arm64] octeontx2-pf: QOS: Perform cache sync on send queue teardown
     - [arm64] octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
     - calipso: Don't call calipso functions for AF_INET sk.
     - net: openvswitch: Fix the dead loop of MPLS parse
     - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
     - f2fs: use d_inode(dentry) cleanup dentry->d_inode
     - f2fs: fix to correct check conditions in f2fs_cross_rename
     - [arm64] dts: qcom: x1e80100: Mark usb_2 as dma-coherent
     - [arm64] dts: qcom: sm8650: setup gpu thermal with higher temperatures
     - [arm64] dts: qcom: sm8650: add missing cpu-cfg interconnect path in the
       mdss node
     - [arm64] dts: qcom: x1e80100-romulus: Keep L12B and L15B always on
     - [arm64] dts: qcom: sdm845-starqltechn: remove wifi
     - [arm64] dts: qcom: sdm845-starqltechn: fix usb regulator mistake
     - [arm64] dts: qcom: sdm845-starqltechn: refactor node order
     - [arm64] dts: qcom: sdm845-starqltechn: remove excess reserved gpios
     - [arm64] dts: qcom: sm8350: Reenable crypto & cryptobam
     - [arm64] dts: qcom: sm8250: Fix CPU7 opp table
     - [arm64] dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
     - [arm64] dts: qcom: ipq9574: Fix USB vdd info
     - [arm64] dts: rockchip: Move SHMEM memory to reserved memory on rk3588
     - [arm64] dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
     - [arm64] dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO
     - [arm64] dts: mt8183: Add port node to mt8183.dtsi
     - [arm64] dts: imx8mm-beacon: Fix RTC capacitive load
     - [arm64] dts: imx8mn-beacon: Fix RTC capacitive load
     - [arm64] dts: imx8mp-beacon: Fix RTC capacitive load
     - [arm64] dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI
       audio
     - [arm64] dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI
       audio
     - [arm64] dts: mediatek: mt6357: Drop regulator-fixed compatibles
     - [arm64] dts: mt6359: Add missing 'compatible' property to regulators node
     - [arm64] dts: qcom: sdm660-lavender: Add missing USB phy supply
     - [arm64] dts: qcom: sda660-ifc6560: Fix dt-validate warning
     - [arm64] dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c
     - [arm64] dts: rockchip: Update eMMC for NanoPi R5 series
     - [arm64] tegra: Drop remaining serial clock-names and reset-names
     - [arm64] tegra: Add uartd serial alias for Jetson TX1 module
     - [arm64] dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
     - [arm64] soc: qcom: smp2p: Fix fallback to qcom,ipc parse
     - Squashfs: check return result of sb_min_blocksize
     - ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
     - nilfs2: add pointer check for nilfs_direct_propagate()
     - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
     - bus: fsl-mc: fix double-free on mc_dev
     - dt-bindings: vendor-prefixes: Add Liontron name
     - [arm64] dts: rockchip: disable unrouted USB controllers and PHY on RK3399
       Puma with Haikou
     - [arm64] dts: qcom: qcm2290: fix (some) of QUP interconnects
     - [arm64] dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
     - [arm64] dts: mt6359: Rename RTC node to match binding expectations
     - [armhf] aspeed: Don't select SRAM
     - [armhf] soc: aspeed: lpc: Fix impossible judgment condition
     - [armhf] soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
     - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
     - randstruct: gcc-plugin: Remove bogus void member
     - randstruct: gcc-plugin: Fix attribute addition (Closes: #1104745)
     - perf build: Warn when libdebuginfod devel files are not available
     - perf ui browser hists: Set actions->thread before calling do_zoom_thread()
     - dm: don't change md if dm_table_set_restrictions() fails
     - dm: free table mempools if not used in __bind
     - backlight: pm8941: Add NULL check in wled_configure()
     - [x86] irq: Ensure initial PIR loads are performed exactly once
     - [amd64] hwmon: (asus-ec-sensors) check sensor index in read_string()
     - perf symbol-minimal: Fix double free in filename__read_build_id
     - dm: fix dm_blk_report_zones
     - dm-flakey: error all IOs when num_features is absent
     - dm-flakey: make corrupting read bios work
     - perf intel-pt: Fix PEBS-via-PT data_src
     - perf scripts python: exported-sql-viewer.py: Fix pattern matching with
       Python 3
     - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
     - remoteproc: k3-r5: Drop check performed in
       k3_r5_rproc_{mbox_callback/kick}
     - remoteproc: k3-dsp: Drop check performed in
       k3_dsp_rproc_{mbox_callback/kick}
     - [arm64] rpmsg: qcom_smd: Fix uninitialized return variable in
       __qcom_smd_send()
     - [arm64] mailbox: imx: Fix TXDB_V2 sending
     - [arm64] mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting
     - perf symbol: Fix use-after-free in filename__read_build_id
     - perf record: Fix incorrect --user-regs comments
     - perf trace: Always print return value for syscalls returning a pid
     - nfs: clear SB_RDONLY before getting superblock
     - nfs: ignore SB_RDONLY when remounting nfs
     - perf trace: Set errpid to false for rseq and set_robust_list
     - perf callchain: Always populate the addr_location map when adding IP
     - cifs: Fix validation of SMB1 query reparse point response
     - rtc: sh: assign correct interrupts with DT
     - [arm64] phy: rockchip: samsung-hdptx: Fix clock ratio setup
     - [arm64] phy: rockchip: samsung-hdptx: Do no set rk_hdptx_phy->rate in case
       of errors
     - PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
     - [arm64] PCI: cadence: Fix runtime atomic count underflow
     - [arm64] phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
     - [arm64] dmaengine: ti: Add NULL check in udma_probe()
     - PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root()
     - PCI/DPC: Initialize aer_err_info before using it
     - PCI/DPC: Log Error Source ID only when valid
     - rtc: loongson: Add missing alarm notifications for ACPI RTC events
     - PCI: endpoint: Retain fixed-size BAR size as well as aligned size
     - serial: Fix potential null-ptr-deref in mlb_usio_probe()
     - [amd64] thunderbolt: Fix a logic error in wake on connect
     - iio: adc: ad7124: Fix 3dB filter frequency reading
     - usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink()
     - [arm64,armhf] coresight: Fixes device's owner field for registered using
       coresight_init_driver()
     - [arm64,armhf] coresight: catu: Introduce refcount and spinlock for
       enabling/disabling
     - counter: interrupt-cnt: Protect enable/disable OPs with mutex
     - [arm64,armhf] coresight: prevent deactivate active config while enabling
       the config
     - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
     - mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array()
     - USB: gadget: udc: fix const issue in gadget_match_driver()
     - USB: typec: fix const issue in typec_match()
     - loop: add file_start_write() and file_end_write()
     - drm/xe: Make xe_gt_freq part of the Documentation
     - Fix sock_exceed_buf_limit not being triggered in __sk_mem_raise_allocated
     - page_pool: Fix use-after-free in page_pool_recycle_in_ring
     - net: stmmac: platform: guarantee uniqueness of bus_id
     - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
     - net: tipc: fix refcount warning in tipc_aead_encrypt
     - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
     - net/mlx4_en: Prevent potential integer overflow calculating Hz
     - net: lan966x: Make sure to insert the vlan tags also in host mode
     - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
     - ice: fix Tx scheduler error handling in XDP callback
     - ice: create new Tx scheduler nodes for new queues only
     - ice: fix rebuilding the Tx scheduler tree for large queue counts
     - idpf: fix a race in txq wakeup
     - idpf: avoid mailbox timeout delays during reset
     - [armhf] net: dsa: tag_brcm: legacy: fix pskb_may_pull length
     - net: stmmac: make sure that ptp_rate is not 0 before configuring
       timestamping
     - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
     - [amd64] drm/i915/guc: Check if expecting reply before decrementing
       outstanding_submission_g2h
     - [amd64] drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP
     - [amd64] drm/i915/guc: Handle race condition where wakeref count drops
       below 0
     - net: fix udp gso skb_segment after pull from frag_list
     - net: wwan: t7xx: Fix napi rx poll issue
     - vmxnet3: correctly report gso type for UDP tunnels
     - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
     - nvme: fix command limits status code
     - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
     - [arm64,armhf] drm/panel-simple: fix the warnings for the Evervision
       VGG644804
     - netfilter: nf_set_pipapo_avx2: fix initial map fill
     - netfilter: nf_nat: also check reverse tuple to obtain clashing entry
     - [arm64] net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces.
     - [armhf] net: dsa: b53: do not enable RGMII delay on bcm63xx
     - [armhf] net: dsa: b53: allow RGMII for bcm63xx RGMII ports
     - [armhf] net: dsa: b53: do not touch DLL_IQQD on bcm53115
     - wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
     - net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing
     - wireguard: device: enable threaded NAPI
     - seg6: Fix validation of nexthop addresses
     - [riscv64] misaligned: fix sleeping function called during misaligned
       access handling
     - scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
     - [amd64] ASoC: codecs: hda: Fix RPM usage count underflow
     - [amd64] ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
     - [amd64] ASoC: Intel: avs: Verify content returned by parse_int_array()
     - iov_iter: use iov_offset for length calculation in iov_iter_aligned_bvec
     - path_overmount(): avoid false negatives
     - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
     - do_change_type(): refuse to operate on unmounted/not ours mounts
     - tools/power turbostat: Fix AMD package-energy reporting
     - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315
     - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247
     - ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA
     - ALSA: hda/realtek - Support mute led function for HP platform
     - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
     - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
     - Input: synaptics-rmi - fix crash with unsupported versions of F34
     - pmdomain: core: Introduce dev_pm_genpd_rpm_always_on()
     - mmc: sdhci-of-dwcmshc: add PD workaround on RK3576
     - [arm64,armhf] pinctrl: samsung: refactor drvdata suspend & resume
       callbacks
     - [arm64,armhf] pinctrl: samsung: add dedicated SoC eint suspend/resume
       callbacks
     - [arm64,armhf] pinctrl: samsung: add gs101 specific eint suspend/resume
       callbacks
     - dt-bindings: pwm: adi,axi-pwmgen: Increase #pwm-cells to 3
     - dt-bindings: pwm: Correct indentation and style in DTS example
     - dt-bindings: pwm: adi,axi-pwmgen: Fix clocks
     - serial: sh-sci: Move runtime PM enable to sci_probe_single()
     - scsi: core: ufs: Fix a hang in the error handler
     - Bluetooth: hci_core: fix list_for_each_entry_rcu usage
     - Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers
     - Bluetooth: btintel_pcie: Increase the tx and rx descriptor count
     - Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race
       condition
     - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
     - Bluetooth: MGMT: Remove unused mgmt_pending_find_data
     - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
     - [armhf] net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0
     - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
     - ath10k: snoc: fix unbalanced IRQ enable in crash recovery
     - wifi: ath11k: convert timeouts to secs_to_jiffies()
     - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
     - wifi: ath11k: don't use static variables in
       ath11k_debugfs_fw_stats_process()
     - wifi: ath11k: don't wait when there is no vdev started
     - wifi: ath11k: move some firmware stats related functions outside of
       debugfs
     - wifi: ath11k: validate ath11k_crypto_mode on top of
       ath11k_core_qmi_firmware_ready
     - wifi: ath12k: refactor ath12k_hw_regs structure
     - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
     - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
     - [arm64,armhf] spi: omap2-mcspi: Disable multi mode when CS should be kept
       asserted after message
     - [arm64,armhf] spi: omap2-mcspi: Disable multi-mode when the previous
       message kept CS asserted
     - [arm64] pinctrl: qcom: pinctrl-qcm2290: Add missing pins
     - scsi: iscsi: Fix incorrect error path labels for flashnode operations
     - net_sched: sch_sfq: fix a potential crash on gso_skb handling
     - [powerpc*] powernv/memtrace: Fix out of bounds issue in memtrace mmap
     - [powerpc*] vas: Return -EINVAL if the offset is non-zero in mmap()
     - [arm64] drm/meson: use unsigned long long / Hz for frequency types
     - [arm64] drm/meson: fix debug log statement when setting the HDMI clocks
     - [arm64] drm/meson: use vclk_freq instead of pixel_freq in debug print
     - [arm64] drm/meson: fix more rounding issues with 59.94Hz modes
     - i40e: return false from i40e_reset_vf if reset is in progress
     - i40e: retry VFLR handling if there is ongoing VF reset
     - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
     - net: Fix TOCTOU issue in sk_is_readable()
     - macsec: MACsec SCI assignment for ES = 0
     - net/mdiobus: Fix potential out-of-bounds read/write access
     - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
     - Bluetooth: Fix NULL pointer deference on eir_get_service_data
     - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
     - Bluetooth: eir: Fix possible crashes on eir_create_adv_data
     - Bluetooth: MGMT: Fix sparse errors
     - net/mlx5: Ensure fw pages are always allocated on same NUMA
     - net/mlx5: Fix ECVF vports unload on shutdown flow
     - net/mlx5: Fix return value when searching for existing flow group
     - net/mlx5: HWS, fix missing ip_version handling in definer
     - net/mlx5e: Fix leak of Geneve TLV option object
     - net_sched: prio: fix a race in prio_tune() (CVE-2025-38083)
     - net_sched: red: fix a race in __red_change()
     - net_sched: tbf: fix a race in tbf_change()
     - net_sched: ets: fix a race in ets_qdisc_change()
     - net: drv: netdevsim: don't napi_complete() from netpoll
     - btrfs: exit after state insertion failure at btrfs_convert_extent_bit()
     - fs/filesystems: Fix potential unsigned integer underflow in fs_name()
     - gfs2: pass through holder from the VFS for freeze/thaw
     - btrfs: exit after state split error at set_extent_bit()
     - nvmet-fcloop: access fcpreq only when holding reqlock
     - perf: Ensure bpf_perf_link path is properly serialized
     - block: use q->elevator with ->elevator_lock held in elv_iosched_show()
     - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()
     - block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work
     - io_uring: consistently use rcu semantics with sqpoll thread
     - bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
     - block: Fix bvec_set_folio() for very large folios
     - Revert "wifi: mwifiex: Fix HT40 bandwidth issue."
     - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
     - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
     - posix-cpu-timers: fix race between handle_posix_cpu_timers() and
       posix_cpu_timer_del()
     - nvmem: zynqmp_nvmem: unbreak driver after cleanup
     - usb: usbtmc: Fix read_stb function and get_stb ioctl
     - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
     - tty: serial: 8250_omap: fix TX with DMA for am33xx
     - usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence
     - usb: cdnsp: Fix issue with detecting command completion event
     - usb: cdnsp: Fix issue with detecting USB 3.2 speed
     - usb: Flush altsetting 0 endpoints before reinitializating them after
       reset.
     - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
     - usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work
     - 9p: Add a migrate_folio method
     - ring-buffer: Do not trigger WARN_ON() due to a commit_overrun
     - ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
     - ring-buffer: Move cpus_read_lock() outside of buffer->mutex
     - xfs: don't assume perags are initialised when trimming AGs
     - [arm64] xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
     - [x86] iopl: Cure TIF_IO_BITMAP inconsistencies
     - [x86] fred/signal: Prevent immediate repeat of single step trap on return
       from SIGTRAP handler
     - calipso: unlock rcu before returning -EAFNOSUPPORT
     - regulator: dt-bindings: mt6357: Drop fixed compatible requirement
     - usb: misc: onboard_usb_dev: fix build warning for
       CONFIG_USB_ONBOARD_DEV_USB5744=n
     - net: usb: aqc111: debug info before sanitation
     - overflow: Introduce __DEFINE_FLEX for having no initializer
     - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add
     - [arm64] drm/meson: Use 1000ULL when operating with mode->clock
     - thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.35
     - configfs: Do not override creating attribute file failure in
       populate_attrs()
     - [arm64,armhf] crypto: marvell/cesa - Do not chain submitted requests
     - gfs2: move msleep to sleepable context
     - [amd64] crypto: qat - add shutdown handler to qat_c3xxx
     - [amd64] crypto: qat - add shutdown handler to qat_420xx
     - [amd64] crypto: qat - add shutdown handler to qat_4xxx
     - [amd64] crypto: qat - add shutdown handler to qat_c62x
     - [amd64] crypto: qat - add shutdown handler to qat_dh895xcc
     - [arm64] ASoC: qcom: sdm845: Add error handling in
       sdm845_slim_snd_hw_params()
     - [arm64,armhf] ASoC: meson: meson-card-utils: use of_property_present() for
       DT parsing
     - io_uring: account drain memory to cgroup
     - io_uring/kbuf: account ring io_buffer_list memory
     - [powerpc*] pseries/msi: Avoid reading PCI device registers in reduced
       power states
     - [s390x] pci: Remove redundant bus removal and disable from
       zpci_release_device()
     - [s390x] pci: Prevent self deletion in disable_slot()
     - [s390x] pci: Allow re-add of a reserved but not yet removed device
     - [s390x] pci: Serialize device addition and removal
     - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
     - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
     - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
     - wifi: mt76: mt7925: fix host interrupt register initialization
     - wifi: ath11k: fix rx completion meta data corruption
     - wifi: rtw88: usb: Upload the firmware in bigger chunks
     - wifi: ath11k: fix ring-buffer corruption
     - NFSD: unregister filesystem in case genl_register_family() fails
     - NFSD: fix race between nfsd registration and exports_proc
     - NFSD: Implement FATTR4_CLONE_BLKSIZE attribute
     - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
     - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
     - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
     - NFSv4: Don't check for OPEN feature support in v4.1
     - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
     - wifi: ath12k: fix ring-buffer corruption
     - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
     - svcrdma: Unregister the device if svc_rdma_accept() fails
     - wifi: rtw88: usb: Reduce control message timeout to 500 ms
     - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
     - [amd64] media: ov8856: suppress probe deferral errors
     - [arm64] media: ov5675: suppress probe deferral errors
     - media: cxusb: no longer judge rbuf when the write fails
     - media: gspca: Add error handling for stv06xx_read_sensor()
     - [amd64] media: intel/ipu6: Fix dma mask for non-secure mode
     - [amd64] media: ipu6: Remove workaround for Meteor Lake ES2
     - [arm64] media: mediatek: vcodec: Correct vsi_core framebuffer size
     - [armhf] media: omap3isp: use sgtable-based scatterlist wrappers
     - media: v4l2-dev: fix error handling in __video_register_device()
     - [arm64] media: venus: Fix probe error handling
     - media: videobuf2: use sgtable-based scatterlist wrappers
     - media: vivid: Change the siize of the composing
     - media: uvcvideo: Return the number of processed controls
     - media: uvcvideo: Send control events for partial succeeds
     - media: uvcvideo: Fix deferred probing error
     - [arm64] mm: Close theoretical race where stale TLB entry remains valid
     - [armel,armhf] 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
     - block: use plug request list tail for one-shot backmerge attempt
     - block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion
     - bus: mhi: ep: Update read pointer only after buffer is written
     - bus: mhi: host: Fix conflict between power_up and SYSERR
     - ceph: avoid kernel BUG for encrypted inode with unaligned file size
     - ceph: set superblock s_magic for IMA fsmagic matching
     - cgroup,freezer: fix incomplete freezing when attaching tasks
     - bus: firewall: Fix missing static inline annotations for stubs
     - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
     - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard
     - ata: ahci: Disallow LPM for Asus B550-F motherboard
     - [arm64] bus: fsl-mc: do not add a device-link for the UAPI used DPMCP
       device
     - [arm64] bus: fsl-mc: fix GET/SET_TAILDROP command ids
     - ext4: inline: fix len overflow in ext4_prepare_inline_data
     - ext4: fix calculation of credits for extent tree modification
     - ext4: factor out ext4_get_maxbytes()
     - ext4: ensure i_size is smaller than maxbytes
     - ext4: only dirty folios when data journaling regular files
     - [arm*] Input: gpio-keys - fix possible concurrent access in
       gpio_keys_irq_timer()
     - f2fs: fix to do sanity check on ino and xnid
     - f2fs: prevent kernel warning due to negative i_nlink from corrupted image
     - f2fs: fix to do sanity check on sit_bitmap_size
     - hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
     - NFC: nci: uart: Set tty->disc_data only in success path
     - net/sched: fix use-after-free in taprio_dev_notifier
     - net: ftgmac100: select FIXED_PHY
     - [amd64] iommu/vt-d: Restore context entry setup order for aliased devices
     - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in
       fb_videomode_to_var
     - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
     - vgacon: Add check for vc_origin address range in vgacon_scroll()
     - [arm64] clk: meson-g12a: add missing fclk_div2 to spicc
     - ipc: fix to protect IPCS lookups using RCU
     - watchdog: fix watchdog may detect false positive of softlockup
     - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
     - mm: fix ratelimit_pages update error in dirty_ratio_handler()
     - [arm64] soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events
     - configfs-tsm-report: Fix NULL dereference of tsm_ops
     - [arm64] firmware: arm_scmi: Ensure that the message-id supports
       fastchannel
     - [armhf] mtd: rawnand: sunxi: Add randomizer configuration in
       sunxi_nfc_hw_ecc_write_chunk
     - [armhf] mtd: nand: sunxi: Add randomizer configuration before randomizer
       enable
     - [amd64] KVM: SVM: Clear current_vmcb during vCPU free for all *possible*
       CPUs
     - [amd64] KVM: VMX: Flush shadow VMCS on emergency reboot
     - dm-mirror: fix a tiny race condition
     - dm-verity: fix a memory leak if some arguments are specified multiple
       times
     - ftrace: Fix UAF when lookup kallsym after ftrace disabled
     - dm: lock limits when reading them
     - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
     - net: ch9200: fix uninitialised access during mii_nway_restart
       (CVE-2025-38086)
     - [s390x] KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
     - sysfb: Fix screen_info type check for VGA
     - video: screen_info: Relocate framebuffers behind PCI bridges
     - pwm: axi-pwmgen: fix missing separate external clock
     - staging: iio: ad5933: Correct settling cycles encoding per datasheet
     - ovl: Fix nested backing file paths
     - regulator: max14577: Add error check for max14577_read_reg()
     - [arm64,armhf] remoteproc: core: Cleanup acquired resources when
       rproc_handle_resources() fails in rproc_attach()
     - [arm64,armhf] remoteproc: core: Release rproc->clean_table after
       rproc_attach() fails
     - cifs: reset connections for all channels when reconnect requested
     - cifs: update dstaddr whenever channel iface is updated
     - cifs: dns resolution is needed only for primary channel
     - smb: client: add NULL check in automount_fullpath
     - Drivers: hv: Allocate interrupt and monitor pages aligned to system page
       boundary
     - uio_hv_generic: Use correct size for interrupt and monitor pages
     - uio_hv_generic: Align ring size to system page
     - [arm64] PCI: cadence-ep: Correct PBA offset in .set_msix() callback
     - [arm64] PCI: dwc: ep: Correct PBA offset in .set_msix() callback
     - PCI: Add ACS quirk for Loongson PCIe
     - PCI: Fix lock symmetry in pci_slot_unlock()
     - [arm64] PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from
       rockchip_pcie_link_up()
     - [arm64] PCI: dw-rockchip: Fix PHY function call sequence in
       rockchip_pcie_phy_deinit()
     - iio: accel: fxls8962af: Fix temperature scan element sign
     - [amd64] accel/ivpu: Improve buffer object logging
     - [amd64] accel/ivpu: Use firmware names from upstream repo
     - [amd64] accel/ivpu: Use dma_resv_lock() instead of a custom mutex
     - [amd64] accel/ivpu: Fix warning in ivpu_gem_bo_free()
     - dummycon: Trigger redraw when switching consoles with deferred takeover
     - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
     - iio: imu: inv_icm42600: Fix temperature calculation
     - iio: adc: ad7944: mask high bits on direct read
     - iio: adc: ti-ads1298: Kconfig: add kfifo dependency to fix module build
     - iio: adc: ad7606_spi: fix reg write value mask
     - ACPICA: fix acpi operand cache leak in dswstate.c
     - [amd64] ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
     - clocksource: Fix the CPUs' choice in the watchdog per CPU verification
     - power: supply: collie: Fix wakeup source leaks on device unbind
     - mmc: Add quirk to disable DDR50 tuning
     - ACPICA: Avoid sequence overread in call to strncmp()
     - [amd64] ASoC: intel/sdw_utils: Assign initial value in
       asoc_sdw_rt_amp_spk_rtd_init()
     - ACPI: bus: Bail out if acpi_kobj registration fails
     - ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
     - ACPICA: fix acpi parse and parseext cache leaks
     - ACPICA: Apply pack(1) to union aml_resource
     - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops
     - power: supply: bq27xxx: Retrieve again when busy
     - pmdomain: core: Reset genpd->states to avoid freeing invalid data
     - ACPICA: utilities: Fix overflow check in vsnprintf()
     - platform-msi: Add msi_remove_device_irq_domain() in
       platform_device_msi_free_irqs_all()
     - Make 'cc-option' work correctly for the -Wno-xyzzy pattern
     - gpiolib: of: Add polarity quirk for s5m8767
     - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
     - power: supply: max17040: adjust thermal channel scaling
     - ACPI: battery: negate current when discharging
     - net: macb: Check return value of dma_set_mask_and_coherent()
     - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
     - tipc: use kfree_sensitive() for aead cleanup
     - f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
     - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
     - Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922
     - i2c: designware: Invoke runtime suspend on quick slave re-registration
     - wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
     - emulex/benet: correct command version selection in be_cmd_get_stats()
     - Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925
     - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
     - wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
     - wifi: mt76: mt7925: introduce thermal protection
     - wifi: mac80211: validate SCAN_FLAG_AP in scan request during MLO
     - sctp: Do not wake readers in __sctp_write_space()
     - libbpf/btf: Fix string handling to support multi-split BTF
     - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
     - [arm64,armhf] i2c: tegra: check msg length in SMBUS block read
     - [arm64] clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks
     - net: dlink: add synchronization for stats update
     - wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
     - wifi: ath12k: fix a possible dead lock caused by ab->base_lock
     - wifi: ath11k: Fix QMI memory reuse logic
     - [amd64] iommu/amd: Allow matching ACPI HID devices without matching UIDs
     - wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
     - tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
     - tcp: remove zero TCP TS samples for autotuning
     - tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
     - tcp: add receive queue awareness in tcp_rcv_space_adjust()
     - [amd64] x86/sgx: Prevent attempts to reclaim poisoned pages
     - ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
     - net: page_pool: Don't recycle into cache on PREEMPT_RT
     - xfrm: validate assignment of maximal possible SEQ number
     - net: atlantic: generate software timestamp just before the doorbell
     - [arm64] pinctrl: armada-37xx: propagate error from
       armada_37xx_pmx_set_by_name()
     - [arm64] pinctrl: armada-37xx: propagate error from
       armada_37xx_gpio_get_direction()
     - bpf: Pass the same orig_call value to trampoline functions
     - net: stmmac: generate software timestamp just before the doorbell
     - pinctrl: armada-37xx: propagate error from
       armada_37xx_pmx_gpio_set_direction()
     - libbpf: Check bpf_map_skeleton link for NULL
     - [arm64] pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
     - net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
     - wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
     - wifi: mac80211: do not offer a mesh path if forwarding is disabled
     - [armhf] clk: rockchip: rk3036: mark ddrphy as critical
     - hid-asus: check ROG Ally MCU version and warn
     - wifi: iwlwifi: mvm: fix beacon CCK flag
     - f2fs: fix to bail out in get_new_segment()
     - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
     - libbpf: Add identical pointer detection to btf_dedup_is_equiv()
     - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
     - scsi: smartpqi: Add new PCI IDs
     - [amd64] iommu/amd: Ensure GA log notifier callbacks finish running before
       module unload
     - wifi: iwlwifi: pcie: make sure to lock rxq->read
     - wifi: rtw89: 8922a: fix TX fail with wrong VCO setting
     - wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
     - net/mlx5: HWS, Fix IP version decision
     - bpf: Use proper type to calculate bpf_raw_tp_null_args.mask index
     - wifi: mac80211: VLAN traffic in multicast path
     - Revert "mac80211: Dynamically set CoDel parameters per station"
     - wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
     - net: bridge: mcast: update multicast contex when vlan state is changed
     - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port
       functions
     - vxlan: Do not treat dst cache initialization errors as fatal
     - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp
     - wifi: ath12k: using msdu end descriptor to check for rx multicast packets
     - net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
     - software node: Correct a OOB check in software_node_get_reference_args()
     - isofs: fix Y2038 and Y2156 issues in Rock Ridge TF entry
     - [armhf] pinctrl: mcp23s08: Reset all pins to input at probe
     - wifi: ath12k: fix failed to set mhi state error during reboot with
       hardware grouping
     - scsi: lpfc: Use memcpy() for BIOS version
     - sock: Correct error checking condition for (assign|release)_proto_idx()
     - i40e: fix MMIO write access to an invalid page in i40e_clear_hw
     - ixgbe: Fix unreachable retry logic in combined and byte I2C write
       functions
     - [arm64] RDMA/hns: initialize db in update_srq_db()
     - ice: fix check for existing switch rule
     - usbnet: asix AX88772: leave the carrier control to phylink
     - f2fs: fix to set atomic write status more clear
     - bpf, sockmap: Fix data lost during EAGAIN retries
     - net: ethernet: cortina: Use TOE/TSO on all TCP
     - [arm64] octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
     - wifi: ath11k: determine PM policy based on machine model
     - wifi: ath12k: fix link valid field initialization in the monitor Rx
     - wifi: ath12k: fix incorrect CE addresses
     - wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160
       MHz
     - net/mlx5: HWS, Harden IP version definer checks
     - fbcon: Make sure modelist not set on unregistered console
     - watchdog: da9052_wdt: respect TWDMIN
     - [arm64] bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
     - [armhf] OMAP2+: Fix l4ls clk domain handling in STANDBY
     - tee: Prevent size calculation wraparound on 32-bit kernels
     - Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices
       first"
     - fs/xattr.c: fix simple_xattr_list()
     - [amd64] platform/x86/amd: pmc: Clear metrics table at start of cycle
     - [amd64] platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running
       twice
     - [amd64] platform/x86: dell_rbu: Fix list usage
     - [amd64] platform/x86: dell_rbu: Stop overwriting data buffer
     - [powerpc*] vdso: Fix build of VDSO32 with pcrel
     - [powerpc*] eeh: Fix missing PE bridge reconfiguration during VFIO EEH
       recovery
     - io_uring/kbuf: don't truncate end buffer for multiple buffer peeks
     - io_uring: fix task leak issue in io_wq_create()
     - drivers/rapidio/rio_cm.c: prevent possible heap overwrite
     - jffs2: check that raw node were preallocated before writing summary
     - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
     - cifs: deal with the channel loading lag while picking channels
     - cifs: serialize other channels when query server interfaces is pending
     - cifs: do not disable interface polling on failure
     - smb: improve directory cache reuse for readdir operations
     - scsi: storvsc: Increase the timeouts to storvsc_timeout
     - scsi: s390: zfcp: Ensure synchronous unit_add
     - nvme: always punt polled uring_cmd end_io work to task_work
     - net_sched: sch_sfq: reject invalid perturb period
     - net: clear the dst when changing skb protocol
     - mm: close theoretical race where stale TLB entries could linger
     - udmabuf: use sgtable-based scatterlist wrappers
     - [amd64] x86/virt/tdx: Avoid indirect calls to TDX assembly functions
     - ksmbd: fix null pointer dereference in destroy_previous_session
     - [amd64] platform/x86: ideapad-laptop: use usleep_range() for EC polling
     - selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
     - [amd64] platform/x86/intel-uncore-freq: Fail module load when plat_info is
       NULL
     - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from
       sched_create_group()
     - atm: Revert atm_account_tx() if copy_from_iter_full() fails.
     - wifi: rtw89: phy: add dummy C2H event handler for report of TAS power
     - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update
       (CVE-2025-23137)
     - Input: sparcspkr - avoid unannotated fall-through
     - wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in
       error path
     - wifi: cfg80211: init wiphy_work before allocating rfkill fails
       (CVE-2025-22119)
     - [arm64] Restrict pagetable teardown to avoid false warning
     - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound
       card
     - ALSA: hda/intel: Add Thinkpad E15 to PM deny list
     - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP
       Victus 15-fa1xxx
     - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
     - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA
     - ALSA: hda/realtek: Add quirk for Asus GU605C
     - iio: accel: fxls8962af: Fix temperature calculation
     - mm/hugetlb: unshare page tables during VMA split, not before
       (CVE-2025-38084)
     - drm/amdgpu: read back register after written for VCN v4.0.5
     - kbuild: rust: add rustc-min-version support function
     - net: Fix checksum update for ILA adj-transport
     - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
     - erofs: remove unused trace event erofs_destroy_inode
     - nfsd: use threads array as-is in netlink interface
     - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
     - [arm64] drm/v3d: Avoid NULL pointer dereference in
       `v3d_job_update_stats()`
     - ipv6: remove leftover ip6 cookie initializer
     - ipv6: replace ipcm6_init calls with ipcm6_init_sk
     - smb: fix secondary channel creation issue with kerberos by populating
       hostname when adding channels
     - [arm64] drm/msm/disp: Correct porch timing for SDM845
     - [arm64] drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
     - [arm64] drm/msm: Fix CP_RESET_CONTEXT_STATE bitfield names
     - [arm64] drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE
     - ionic: Prevent driver/fw getting out of sync on devcmd(s)
     - drm/nouveau/bl: increase buffer size to avoid truncate warning
     - [amd64] drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled
     - [armhf] hwmon: (occ) Rework attribute registration for stack usage
     - [armhf] hwmon: (occ) fix unaligned accesses
     - aoe: clean device rq_list in aoedev_downdev()
     - io_uring/sqpoll: don't put task_struct on tctx setup failure
     - net: ice: Perform accurate aRFS flow match
     - ice: fix eswitch code memory leak in reset scenario
     - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
     - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early()
     - ksmbd: add free_transport ops in ksmbd connection
     - net: netmem: fix skb_ensure_writable with unreadable skbs
     - bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start()
     - eth: bnxt: fix out-of-range access of vnic_info array (CVE-2025-22112)
     - bnxt_en: Add a helper function to configure MRU and RSS
     - bnxt_en: Update MRU and RSS table of RSS contexts on queue reset
     - ptp: fix breakage after ptp_vclock_in_use() rework
     - ptp: allow reading of currently dialed frequency to succeed on
       free-running clocks
     - wifi: carl9170: do not ping device which has failed to load firmware
     - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
     - atm: atmtcp: Free invalid length skb in atmtcp_c_send().
     - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen()
       behavior
     - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
     - tcp: fix passive TFO socket having invalid NAPI ID
     - eth: fbnic: avoid double free when failing to DMA-map FW msg
     - net: lan743x: fix potential out-of-bounds write in
       lan743x_ptp_io_event_clock_get()
     - ublk: santizize the arguments from userspace when adding a device
     - drm/xe: Wire up device shutdown handler
     - drm/xe/gt: Update handling of xe_force_wake_get return
     - drm/xe/bmg: Update Wa_16023588340
     - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
     - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available
     - net: atm: add lec_mutex
     - net: atm: fix /proc/net/atm/lec handling
     - [amd64] EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
     - dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
     - smb: Log an error when close_all_cached_dirs fails
     - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
     - serial: sh-sci: Increment the runtime usage counter for the earlycon
       device
     - smb: client: fix first command failure during re-negotiation
     - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
     - [s390x] pci: Fix __pcilg_mio_inuser() inline assembly
     - perf: Fix sample vs do_exit()
     - perf: Fix cgroup state vs ERROR
     - perf/core: Fix WARN in perf_cgroup_switch()
     - [arm64] ptrace: Fix stack-out-of-bounds read in
       regs_get_kernel_stack_nth()
     - [riscv64] KVM: Fix the size parameter check in SBI SFENCE calls
     - [riscv64] KVM: Don't treat SBI HFENCE calls as NOPs
     - [arm64,armhf] gpio: pca953x: fix wrong error probe return value
     - cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr()
       function
     - bpftool: Fix cgroup command to only show cgroup bpf programs
 .
   [ Uwe Kleine-König ]
   * Disable CONFIG_CDROM_PKTCDVD for all archs as this driver is
     orphaned, buggy and not needed. (Closes: #1107479)
   * [armhf] Enable various kernel modules for the machines defined in the
     device-trees st/stm32mp153c-lxa-tac-gen3,
     st/stm32mp153c-lxa-fairytux2-gen1 and st/stm32mp153c-lxa-fairytux2-gen2
     (Closes: #1105865)
 .
   [ Macpaul Lin ]
   * [arm64] drivers/usb/typec/mux: Enable TYPEC_MUX_IT5205 as module
   * [arm64] sound/soc/mediatek: Enable sound for MediaTek MT8365 EVK
     - Enable SND_SOC_MT8365 as module
     - Enable SND_SOC_MT8365_MT6357 as module
   * [arm64] drivers/dma/mediatek: Enable DMA support for MediaTek peripherals
     - Enable MTK_HSDMA as module
     - Enable MTK_UART_APDMA as module
   * [arm64] drivers/net/ethernet/mediatek: Enable ethernet for MT8365
     - Enable NET_MEDIATEK_STAR_EMAC as module
   * drivers/bluetooth: set BT_HCIBTUSB_POLL_SYNC=y
   * All the above Closes: #1108597
 .
   [ наб ]
   * Don't compress perf's tips.txt (Closes: #1088747)
 .
   [ Aurelien Jarno ]
   * [riscv64] Enable BRCMFMAC_SDIO (Closes: #1108215)
 .
   [ Salvatore Bonaccorso ]
   * ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
     (Closes: #1108069)
   * Revert "mmc: sdhci: Disable SD card clock before changing parameters"
     (Closes: #1108065)
 .
   [ Bastian Blank ]
   * [cloud] Enable SATA_AHCI.
Checksums-Sha1:
 84176b6960b5ddf6ba516e6ac46344632c25a015 10193 linux-signed-arm64_6.12.35+1.dsc
 47fce8abae465c1f42b544b30748c688c9450654 800224 linux-signed-arm64_6.12.35+1.tar.xz
Checksums-Sha256:
 bce8eca512affab27c7190a4bd701ea8c5b54fcec6e0bb056731bbd7c29827c7 10193 linux-signed-arm64_6.12.35+1.dsc
 a37a3283836b7d46da64c4575260f2c8fa9a67a11b8b1d3c4bc785953cf348b7 800224 linux-signed-arm64_6.12.35+1.tar.xz
Files:
 a20f99fd599875457ddd942b11fa9ebf 10193 kernel optional linux-signed-arm64_6.12.35+1.dsc
 577b12136ee55ab8a26b0f08037849c6 800224 kernel optional linux-signed-arm64_6.12.35+1.tar.xz

-----BEGIN PGP SIGNATURE-----
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=gLAe
-----END PGP SIGNATURE-----

Attachment: pgpETXvRgCuPG.pgp
Description: PGP signature


Reply to: