[continued from previous message]

- Bluetooth: hci_conn: Fix not setting timeout for BIG Create Sync
- Bluetooth: btintel_pcie: Avoid redundant buffer allocation
- Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
- Bluetooth: btintel_pcie: Add additional to checks to clear TX/RX paths
- Bluetooth: L2CAP: copy RX timestamp to new fragments
- [arm64] net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
- bnxt_en: improve TX timestamping FIFO configuration
- [arm64] net: ethernet: mtk_eth_soc: sync mtk_clks_source_name array
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
qdisc
- net_sched: ets: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
- idpf: fix offloads support for encapsulated packets
- scsi: ufs: core: Remove redundant query_complete trace
- ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
- nvme-pci: fix queue unquiesce check on slot_reset
- [armhf] drm/mipi-dbi: Fix blanking for non-16 bit formats
- net: dlink: Correct endianness handling of led_mode
- [arm64,armhf] net: mdio: mux-meson-gxl: set reversed bit when using
internal phy
- idpf: fix potential memory leak on kcalloc() failure
- idpf: protect shutdown from reset
- igc: fix lock order in igc_ptp_reset
- [arm64] net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
- [arm64] net: dsa: felix: fix broken taprio gate states after clock jump
- net: ipv6: fix UDPv6 GSO segmentation with NAT
- ALSA: hda/realtek: Fix built-mic regression on other ASUS models
- bnxt_en: Fix error handling path in bnxt_init_chip()
- bnxt_en: Fix ethtool selftest output in one of the failure cases
- bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan()
- bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings()
- bnxt_en: Fix coredump logic to free allocated buffer
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- bnxt_en: Fix ethtool -d byte order for 32-bit values
- nvme-tcp: fix premature queue removal and I/O failover
- nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS
- nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS
- ASoC: simple-card-utils: Fix pointer check in
graph_util_parse_link_direction
- bnxt_en: fix module unload sequence
- net: use sock_gen_put() when sk_state is TCP_TIME_WAIT
- ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations
- net: lan743x: Fix memleak issue when GSO enabled
- net: fec: ERR007885 Workaround for conventional TX
- [arm64] net: hns3: store rx VLAN tag offload state for VF
- [arm64] net: hns3: fix an interrupt residual problem
- [arm64] net: hns3: fixed debugfs tm_qset size
- [arm64] net: hns3: defer calling ptp_clock_register()
- blk-mq: create correct map for fallback case (Closes: #1104669)
- mm, slab: clean up slab->obj_exts always
- bcachefs: Remove incorrect __counted_by annotation
- net: Fix the devmem sock opts and msgs for parisc
- [amd64] accel/ivpu: Make DB_ID and JOB_ID allocations incremental
- [amd64] accel/ivpu: Use xa_alloc_cyclic() instead of custom function
- [amd64] accel/ivpu: Fix a typo
- [amd64] accel/ivpu: Update VPU FW API headers
- [amd64] accel/ivpu: Abort all jobs after command queue unregister
- [amd64] accel/ivpu: Fix locking order in ivpu_job_submit
- [amd64] accel/ivpu: Add handling of
VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW
- sch_htb: make htb_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_ets: make est_qlen_notify() idempotent
- drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change
- [arm64] firmware: arm_scmi: Balance device refcount when destroying
devices
- [arm64] dts: imx95: Correct the range of PCIe app-reg region
- [arm64] dts: st: Adjust interrupt-controller for stm32mp25 SoCs
- [arm64] dts: st: Use 128kB size for aliased GIC400 register access on
stm32mp25 SoCs
- Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
- kernel: param: rename locate_module_kobject
- kernel: globalize lookup_or_create_module_kobject()
- drivers: base: handle module_kobject creation
- drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp
- drm/amd/display: Fix slab-use-after-free in hdcp
- dm: fix copying after src array boundaries
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.29
- dm: add missing unlock on in dm_keyslot_evict()
- fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio()
- Revert "btrfs: canonicalize the device path before adding it"
- [arm64] firmware: arm_scmi: Fix timeout checks on polling path
- [arm64] can: mcan: m_can_class_unregister(): fix order of unregistration
calls
- [s390] pci: Fix missing check for zpci_create_device() error return
- wifi: cfg80211: fix out-of-bounds access during multi-link element
defragmentation
- vfio/pci: Align huge faults to order
- [s390x] pci: Fix duplicate pci_dev_put() in disable_slot() when PF has
child VFs
- can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
- ksmbd: prevent rename with empty string
- ksmbd: prevent out-of-bounds stream writes by validating *pos
- ksmbd: Fix UAF in __close_file_table_ids
- openvswitch: Fix unsafe attribute parsing in output_userspace()
- ksmbd: fix memory leak in parse_lease_state()
- [s390x] entry: Fix last breaking event handling in case of stack
corruption
- sch_htb: make htb_deactivate() idempotent
- virtio_net: xsk: bind/unbind xsk for tx
- virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
- gre: Fix again IPv6 link-local address generation.
- [arm64] net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
- [arm64] net: ethernet: mtk_eth_soc: do not reset PSE when setting FE
- [arm64] can: m_can: m_can_class_allocate_dev(): initialize spin lock on
device probe
- can: gw: fix RCU/BH usage in cgw_create_job()
- wifi: mac80211: fix the type of status_code for negotiated TID to Link
Mapping
- ice: Initial support for E825C hardware in ice_adapter
- ice: use DSN instead of PCI BDF for ice_adapter index
- erofs: ensure the extra temporary copy is valid for shortened bvecs
- ipvs: fix uninit-value for saddr in do_output_route4
- netfilter: ipset: fix region locking in hash types
- bpf: Scrub packet on bpf_redirect_peer
- [armhf] net: dsa: b53: allow leaky reserved multicast
- [armhf] net: dsa: b53: keep CPU port always tagged again
- [armhf] net: dsa: b53: fix clearing PVID of a port
- [armhf] net: dsa: b53: fix flushing old pvid VLAN on pvid change
- [armhf] net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)