[continued from previous message]

- [arm*] Input: gpio-keys - fix possible concurrent access in
gpio_keys_irq_timer()
- f2fs: fix to do sanity check on ino and xnid
- f2fs: prevent kernel warning due to negative i_nlink from corrupted image
- f2fs: fix to do sanity check on sit_bitmap_size
- hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
- NFC: nci: uart: Set tty->disc_data only in success path
- net/sched: fix use-after-free in taprio_dev_notifier
- net: ftgmac100: select FIXED_PHY
- [amd64] iommu/vt-d: Restore context entry setup order for aliased devices
- fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in
fb_videomode_to_var
- fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
- vgacon: Add check for vc_origin address range in vgacon_scroll()
- [arm64] clk: meson-g12a: add missing fclk_div2 to spicc
- ipc: fix to protect IPCS lookups using RCU
- watchdog: fix watchdog may detect false positive of softlockup
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- mm: fix ratelimit_pages update error in dirty_ratio_handler()
- [arm64] soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events
- configfs-tsm-report: Fix NULL dereference of tsm_ops
- [arm64] firmware: arm_scmi: Ensure that the message-id supports
fastchannel
- [armhf] mtd: rawnand: sunxi: Add randomizer configuration in
sunxi_nfc_hw_ecc_write_chunk
- [armhf] mtd: nand: sunxi: Add randomizer configuration before randomizer
enable
- [amd64] KVM: SVM: Clear current_vmcb during vCPU free for all *possible*
CPUs
- [amd64] KVM: VMX: Flush shadow VMCS on emergency reboot
- dm-mirror: fix a tiny race condition
- dm-verity: fix a memory leak if some arguments are specified multiple
times
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- dm: lock limits when reading them
- phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
- net: ch9200: fix uninitialised access during mii_nway_restart
(CVE-2025-38086)
- [s390x] KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
- sysfb: Fix screen_info type check for VGA
- video: screen_info: Relocate framebuffers behind PCI bridges
- pwm: axi-pwmgen: fix missing separate external clock
- staging: iio: ad5933: Correct settling cycles encoding per datasheet
- ovl: Fix nested backing file paths
- regulator: max14577: Add error check for max14577_read_reg()
- [arm64,armhf] remoteproc: core: Cleanup acquired resources when
rproc_handle_resources() fails in rproc_attach()
- [arm64,armhf] remoteproc: core: Release rproc->clean_table after
rproc_attach() fails
- cifs: reset connections for all channels when reconnect requested
- cifs: update dstaddr whenever channel iface is updated
- cifs: dns resolution is needed only for primary channel
- smb: client: add NULL check in automount_fullpath
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page
boundary
- uio_hv_generic: Use correct size for interrupt and monitor pages
- uio_hv_generic: Align ring size to system page
- [arm64] PCI: cadence-ep: Correct PBA offset in .set_msix() callback
- [arm64] PCI: dwc: ep: Correct PBA offset in .set_msix() callback
- PCI: Add ACS quirk for Loongson PCIe
- PCI: Fix lock symmetry in pci_slot_unlock()
- [arm64] PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from
rockchip_pcie_link_up()
- [arm64] PCI: dw-rockchip: Fix PHY function call sequence in
rockchip_pcie_phy_deinit()
- iio: accel: fxls8962af: Fix temperature scan element sign
- [amd64] accel/ivpu: Improve buffer object logging
- [amd64] accel/ivpu: Use firmware names from upstream repo
- [amd64] accel/ivpu: Use dma_resv_lock() instead of a custom mutex
- [amd64] accel/ivpu: Fix warning in ivpu_gem_bo_free()
- dummycon: Trigger redraw when switching consoles with deferred takeover
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- iio: imu: inv_icm42600: Fix temperature calculation
- iio: adc: ad7944: mask high bits on direct read
- iio: adc: ti-ads1298: Kconfig: add kfifo dependency to fix module build
- iio: adc: ad7606_spi: fix reg write value mask
- ACPICA: fix acpi operand cache leak in dswstate.c
- [amd64] ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
- clocksource: Fix the CPUs' choice in the watchdog per CPU verification
- power: supply: collie: Fix wakeup source leaks on device unbind
- mmc: Add quirk to disable DDR50 tuning
- ACPICA: Avoid sequence overread in call to strncmp()
- [amd64] ASoC: intel/sdw_utils: Assign initial value in
asoc_sdw_rt_amp_spk_rtd_init()
- ACPI: bus: Bail out if acpi_kobj registration fails
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
- ACPICA: fix acpi parse and parseext cache leaks
- ACPICA: Apply pack(1) to union aml_resource
- ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops
- power: supply: bq27xxx: Retrieve again when busy
- pmdomain: core: Reset genpd->states to avoid freeing invalid data
- ACPICA: utilities: Fix overflow check in vsnprintf()
- platform-msi: Add msi_remove_device_irq_domain() in
platform_device_msi_free_irqs_all()
- Make 'cc-option' work correctly for the -Wno-xyzzy pattern
- gpiolib: of: Add polarity quirk for s5m8767
- PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
- power: supply: max17040: adjust thermal channel scaling
- ACPI: battery: negate current when discharging
- net: macb: Check return value of dma_set_mask_and_coherent()
- net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
- tipc: use kfree_sensitive() for aead cleanup
- f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
- bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
- Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922
- i2c: designware: Invoke runtime suspend on quick slave re-registration
- wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
- emulex/benet: correct command version selection in be_cmd_get_stats()
- Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
- wifi: mt76: mt7925: introduce thermal protection
- wifi: mac80211: validate SCAN_FLAG_AP in scan request during MLO
- sctp: Do not wake readers in __sctp_write_space()
- libbpf/btf: Fix string handling to support multi-split BTF
- cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
- [arm64,armhf] i2c: tegra: check msg length in SMBUS block read
- [arm64] clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks
- net: dlink: add synchronization for stats update
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
- wifi: ath12k: fix a possible dead lock caused by ab->base_lock
- wifi: ath11k: Fix QMI memory reuse logic

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)