a0f5cbcaa5d0 Linux 6.12.28-xanmod1 b342695f3759 Merge tag 'v6.12.28' into 6.12 f08cdc6cc92e Linux 6.12.28 db6280919765 dm: fix copying after src array boundaries dd329f04dda3 drm/amd/display: Fix slab-use-after-free in hdcp 75096780a4de drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp e1eea6985828 drivers: base: handle module_kobject creation 69113bf740b2 kernel: globalize lookup_or_create_module_kobject() 3b41b5efaec0 kernel: param: rename locate_module_kobject 7509810606b0 Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" e993398cbd75 arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs aa4ea5355458 arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs 7ac0df4f35d4 ARM: dts: opos6ul: add ksz8081 phy properties a3ab5c9443d4 arm64: dts: imx95: Correct the range of PCIe app-reg region cc67657f636a firmware: arm_ffa: Skip Rx buffer ownership release if not acquired 969d8beaa2e3 firmware: arm_scmi: Balance device refcount when destroying devices 752600f1ac7e drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change 0e6325c183ab sch_ets: make est_qlen_notify() idempotent 15fa905db22c sch_qfq: make qfq_qlen_notify() idempotent d06476714d28 sch_hfsc: make hfsc_qlen_notify() idempotent 353add4cad93 sch_drr: make drr_qlen_notify() idempotent 0a188c0e1973 sch_htb: make htb_qlen_notify() idempotent bccc7df3cea0 accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW 079d2622f8c9 accel/ivpu: Fix locking order in ivpu_job_submit 3e3062be7d24 accel/ivpu: Abort all jobs after command queue unregister a39b5b6a6ea8 accel/ivpu: Update VPU FW API headers 1ebbfee88951 accel/ivpu: Fix a typo a735c9205dc9 accel/ivpu: Use xa_alloc_cyclic() instead of custom function aaba59961d43 accel/ivpu: Make DB_ID and JOB_ID allocations incremental f4ae68eae950 net: Fix the devmem sock opts and msgs for parisc 6b6cd389104c bcachefs: Remove incorrect __counted_by annotation dab2a13059a4 mm, slab: clean up slab->obj_exts always e10ec6e32b00 blk-mq: create correct map for fallback case 1e15804c0472 net: vertexcom: mse102x: Fix RX error handling 2e5b8eb6b42e net: vertexcom: mse102x: Add range check for CMD_RTS 98abf8367260 net: vertexcom: mse102x: Fix LEN_MASK 6abbffa73647 net: vertexcom: mse102x: Fix possible stuck of SPI interrupt 7f9c3e2213ad net: hns3: defer calling ptp_clock_register() 6a6d547a7f7c net: hns3: fixed debugfs tm_qset size ee2642bbae84 net: hns3: fix an interrupt residual problem d4cd7667311b net: hns3: store rx VLAN tag offload state for VF c8d788f800f8 octeon_ep: Fix host hang issue during device reboot bcb9d6a2229f net: fec: ERR007885 Workaround for conventional TX 189b05f189ca net: lan743x: Fix memleak issue when GSO enabled 8a543d825e78 ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations c0dba059b118 net: use sock_gen_put() when sk_state is TCP_TIME_WAIT a90146b73c7d bnxt_en: fix module unload sequence b41a49d5435e ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction 9b552c84cde1 nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS 15ea0b616426 nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS 60331309e738 nvme-tcp: fix premature queue removal and I/O failover 2da8fe5a1092 bnxt_en: Fix ethtool -d byte order for 32-bit values 44807af79efd bnxt_en: Fix out-of-bound memcpy() during ethtool -w 454a4450b026 bnxt_en: Fix coredump logic to free allocated buffer 626af9b8e834 bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() aa15f389fc50 bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() 808a7304b5f4 bnxt_en: Fix ethtool selftest output in one of the failure cases e039b00ddbfe bnxt_en: Fix error handling path in bnxt_init_chip() 9bc347854dfd ALSA: hda/realtek: Fix built-mic regression on other ASUS models 6effe1c0fa82 net: ipv6: fix UDPv6 GSO segmentation with NAT dcb5a2b96113 net: dsa: felix: fix broken taprio gate states after clock jump 317013d1ad13 net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM 56b958a5b559 igc: fix lock order in igc_ptp_reset df1ff481fa0e idpf: protect shutdown from reset bf0ec3aac109 idpf: fix potential memory leak on kcalloc() failure d206ea768142 net: mdio: mux-meson-gxl: set reversed bit when using internal phy e9b65c95610a net: dlink: Correct endianness handling of led_mode 7fc2c784dd95 drm/mipi-dbi: Fix blanking for non-16 bit formats d0d7c93b4b67 drm/tests: shmem: Fix memleak 5ad0b1b55428 nvme-pci: fix queue unquiesce check on slot_reset 226beac5605a ALSA: ump: Fix buffer overflow at UMP SysEx message conversion 6b1355860da3 scsi: ufs: core: Remove redundant query_complete trace d14f88bd0f75 idpf: fix offloads support for encapsulated packets 073791e9cfe6 ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() 53bc0b55178b net_sched: qfq: Fix double list add in class with netem as child qdisc 1f01e9f96160 net_sched: ets: Fix double list add in class with netem as child qdisc 2e7093c7a8ab net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc 26e75716b94d net_sched: drr: Fix double list add in class with netem as child qdisc c649b9653ed0 pds_core: remove write-after-free of client_id f41e27b74624 pds_core: specify auxiliary_device to be created 1d69ab85030b pds_core: make pdsc_auxbus_dev_del() void aea3ca60fafb net: ethernet: mtk_eth_soc: sync mtk_clks_source_name array 5257a0f1ec5e net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised 8d40bf73fa7f net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll 950832771e59 rtase: Modify the condition used to detect overflow in rtase_calc_time_mitigation 4911412efda5 bnxt_en: improve TX timestamping FIFO configuration ddc1e64c290a octeon_ep_vf: Resolve netdevice usage count issue 6e6325d4878c net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID 432572d53602 Bluetooth: L2CAP: copy RX timestamp to new fragments cfe006c8a61e Bluetooth: btintel_pcie: Add additional to checks to clear TX/RX paths b70b41591ec4 Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() c7bd5c9ba13d Bluetooth: btintel_pcie: Avoid redundant buffer allocation 620810ac1f7f Bluetooth: hci_conn: Fix not setting timeout for BIG Create Sync eb8b860e87b2 Bluetooth: hci_conn: Fix not setting conn_timeout for Broadcast Receiver fe81c26d2dac Bluetooth: hci_conn: Remove alloc from critical section 3104b7d559ff ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot 92d812df3b21 accel/ivpu: Correct DCT interrupt handling 174161d6f030 net/mlx5: E-switch, Fix error handling for enabling roce 488ab6d41fd9 net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover c022830c2aca net/mlx5e: TC, Continue the attr process even if encap entry is invalid 51599d07c7de net/mlx5: E-Switch, Initialize MAC Address for Default GID b67fee583794 net/mlx5e: Use custom tunnel header for vxlan gbp 65d3c570614b xsk: Fix race condition in AF_XDP generic RX path 5cb9e07f84e5 vxlan: vnifilter: Fix unlocked deletion of default FDB entry ec1643d1bad1 powerpc/boot: Fix dash warning 791a2d9e87c4 wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release 50d1982dba7b wifi: iwlwifi: fix the check for the SCRATCH register upon resume 33bf99208825 wifi: iwlwifi: don't warn if the NIC is gone in resume bb0d60289965 drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions' f7dc50604cdf ALSA: hda/realtek - Enable speaker for HP platform 7867992c3e25 ASoC: Intel: sof_sdw: Add NULL check in asoc_sdw_rt_dmic_rtd_init() ae462ead8983 powerpc/boot: Check for ld-option support fcf36f6ed429 pinctrl: imx: Return NULL if no group is matched and found 7f5476d80f2c book3s64/radix : Align section vmemmap start address to PAGE_SIZE 29a4a29112c1 ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence 2029a38b6c50 ASoC: cs-amp-lib-test: Don't select SND_SOC_CS_AMP_LIB 220395054c24 ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties b93e1cad05a0 drm/amd/display: Default IPS to RCG_IN_ACTIVE_IPS2_IN_OFF 1f27a3e93b8d tracing: Fix oob write in trace_seq_to_buffer() 962d88304c3c cpufreq: Fix setting policy limits when frequency tables are used 573b04722907 cpufreq: Avoid using inconsistent policy->min and policy->max 553d723e1acb smb: client: fix zero length for mkdir POSIX create context d5ec1d79509b ksmbd: fix use-after-free in session logoff e18c61671801 ksmbd: fix use-after-free in kerberos authentication 8fb3b6c85b7e ksmbd: fix use-after-free in ksmbd_session_rpc_open d21175791886 platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug 2fcb183768e7 platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles 2e303d010722 iommu: Fix two issues in iommu_copy_struct_from_user() 677714d779ed iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) ccc50fcba362 iommu/arm-smmu-v3: Fix pgsize_bit for sva domains 98e634aa4b5d iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids 10d901a95f8e iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid 43eb647e847d drm: Select DRM_KMS_HELPER from DRM_DEBUG_DP_MST_TOPOLOGY_REFS 989f9c6a619b drm/amdgpu: Fix offset for HDP remap in nbio v7.11 510aea4ef0f8 dm: always update the array size in realloc_argv on success af2a88817f76 dm-integrity: fix a warning on invalid table line f45108257280 dm-bufio: don't schedule in atomic context efebca597086 x86/boot/sev: Support memory acceptance in the EFI stub under SVSM bdb435ef9815 wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() 0988dd0263ad tracing: Do not take trace_event_sem in print_event_fields() da77a7594fe5 spi: tegra114: Don't fail set_cs_timing when delays are zero 20a28e0ece5a mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe 9c4ddea4973f mm/memblock: repeat setting reserved region nid if array is doubled eb9b72e4fe51 mm/memblock: pass size instead of end to memblock_set_node() f10234236095 irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs 6569501c7092 amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload 44ee0afc9d1e perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. 6dcf83f50418 perf/x86/intel: Only check the group flag for X86 leader cf21e890f56b parisc: Fix double SIGFPE crash 090c8714efe1 arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays 4f4388a55019 i2c: imx-lpi2c: Fix clock count when probe defers 833ef30f0196 EDAC/altera: Set DDR and SDMMC interrupt mask before registration 349dac405240 EDAC/altera: Test the correct error reg offset b771b2017260 drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() f1dfc945847c drm/fdinfo: Protect against driver unbind d31806f14cc1 cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode f46fd2f0249f btrfs: fix COW handling in run_delalloc_nocow() b80db09b614c btrfs: adjust subpage bit start based on sectorsize 38d9ca740503 binder: fix offset calculation in debug log fdf0ae5e9e1e ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset 0aaae77be5bd ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface() 222b6685efe0 Revert "rndis_host: Flag RNDIS modems as WWAN devices" 351378ae7bd7 Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x 78945de256ac Bluetooth: btusb: Add new VID/PID for WCN785x 5ab19c342f80 Bluetooth: btusb: Add ID 0x2c7c:0x0130 for Qualcomm WCN785x c6e1913e76fb Bluetooth: btusb: Add one more ID 0x13d3:0x3623 for Qualcomm WCN785x 8ee592df659a Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x a9bfc823d057 Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x b801eaa96a5a Linux 6.12.27 92c6f8c577a0 bpf: Fix BPF_INTERNAL namespace import