# changelog

author: Julio Faracco <jfaracco@redhat.com> [6.12.0-258.63.el10iv]
changelog:
  - i2c: core: fix adapter deregistration race (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: disable runtime PM on adapter registration failure (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix adapter debugfs creation (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix adapter probe deferral loop (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix NULL-deref on adapter registration failure (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix hang on adapter registration failure (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix irq domain leak on adapter registration failure (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix reference leak in i2c_register_adapter() (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223371] {CVE-2026-64496}
  - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-222799]
  - mfd: intel-lpss: Add Intel Nova Lake-H PCI IDs (Steve Best) [RHEL-154489]
  - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222496] {CVE-2026-64531}
  - mei: bus: access mei_device under device_lock on cleanup (Steve Best) [RHEL-222295]
  - PM: EM: Fix incorrect description of the cost field in struct em_perf_state (Steve Best) [RHEL-220528]
  - PM: EM: Fix late boot with holes in CPU topology (Steve Best) [RHEL-220528]
  - soc/tegra: fuse: Fix spurious straps warning on SMCCC platforms (Charles Mirabile) [RHEL-191743]
  - pinctrl-amd: Don't clear S4 wake bits at probe (Steve Best) [RHEL-212012]
  - tools/power/x86/intel-speed-select: Harden daemon pidfile open (Steve Best) [RHEL-214504]
  - gve: fix netdev_lock deadlock in gve_add_napi by using netif_napi_set_irq_locked (Younes Nejahi) [RHEL-218195]
  - platform/x86: intel: Add notifiers support (Steve Best) [RHEL-215232]
  - platform/x86: intel: Move debugfs register before creating devices (Steve Best) [RHEL-215232]
  - platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery (Steve Best) [RHEL-213934]
  - platform/x86/intel/vsec: Make driver_data info const (Steve Best) [RHEL-213934]
  - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179577] {CVE-2026-45991}
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213327] {CVE-2026-63807}
  - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213327]
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213327]
  - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213327]
  - cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() (Steve Best) [RHEL-212894]
  - thermal: intel: Fix dangling resources on thermal_throttle_online() failure (Steve Best) [RHEL-212369]
  - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug (Steve Best) [RHEL-212368]
  - x86/mm: Disable broadcast TLB flush when PCID is disabled (Rafael Aquini) [RHEL-179500]
  - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189572] {CVE-2025-71072}
  - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-193649]
  - mm/mempolicy: fix weighted interleave auto sysfs name (Waiman Long) [RHEL-193649]
  - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-193649]
  - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - ipmi:ssif: NULL thread on error (Dennis Chen) [RHEL-187338]
  - ipmi:si: Return state to normal if message allocation fails (Dennis Chen) [RHEL-187338]
  - ipmi: Add limits to event and receive message requests (Dennis Chen) [RHEL-187338]
  - ipmi: Check event message buffer response for bad data (Dennis Chen) [RHEL-187338]
  - docs: ipmi: fix spelling and grammar mistakes (Dennis Chen) [RHEL-187342]
  - Documentation:ipmi: Remove comments about interrupt level (Dennis Chen) [RHEL-187342]
  - dt-bindings: ipmi: Convert aspeed,ast2400-ibt-bmc to DT schema (Dennis Chen) [RHEL-187342]
  - dt-bindings: ipmi: Convert nuvoton,npcm750-kcs-bmc to DT schema (Dennis Chen) [RHEL-187342]
  - dt-bindings: ipmi: aspeed,ast2400-kcs-bmc: Add missing "clocks" property (Dennis Chen) [RHEL-187342]
  - ice: remove redundant checks from PTP init (Michal Schmidt) [RHEL-187013]
  - ice: implement E825 TX ref clock control and TXC hardware sync status (Michal Schmidt) [RHEL-187013]
  - ice: add Tx reference clock index handling to AN restart command (Michal Schmidt) [RHEL-187013]
  - ice: implement CPI support for E825C (Michal Schmidt) [RHEL-187013]
  - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Michal Schmidt) [RHEL-187013]
  - ice: fix missing priority callbacks for U.FL DPLL pins (Michal Schmidt) [RHEL-187013]
  - ice: restore PTP Rx timestamp config after ethtool set-channels (Michal Schmidt) [RHEL-187013]
  - ice: ptp: use primary NAC semaphore on E825 (Michal Schmidt) [RHEL-187013]
  - ice: ptp: serialize E825 PHY timer start with PTP lock (Michal Schmidt) [RHEL-187013]
  - ice: fix setting promisc mode while adding VID filter (Michal Schmidt) [RHEL-187013]
  - ice: fix VF queue configuration with low MTU values (Michal Schmidt) [RHEL-187013]
  - ice: fix locking around wait_event_interruptible_locked_irq (Michal Schmidt) [RHEL-187013]
  - ice: dpll: Fix compilation warning (Michal Schmidt) [RHEL-187013]
  - ice: mention fw_activate action along with devlink reload (Michal Schmidt) [RHEL-187013]
  - wifi: nl80211: re-check wiphy netns in testmode and vendor dump continuations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - dt-bindings: wireless: ath10k: Add quirk to skip host cap QMI requests (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: fix typo rx_freq_frome_ie (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: fix resource leak in probe error path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: correct drop logic for malformed AMPDU frames (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtl818x: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath6kl: rename disconnect callback (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath6kl: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: libertas_tf: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: libertas: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-52947}
  - wifi: cfg80211: enforce HE/EHT cap/oper consistency (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53257}
  - wifi: fix leak if split 6 GHz scanning fails (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53258}
  - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53182}
  - wifi: iwlwifi: pcie: simplify the resume flow if fast resume is not used (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: avoid oversized UATS command copy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: send tx power constraints before link activation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: don't support the reset handshake for old firmwares (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: wext: validate chandef in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: consume only present negotiated TTLM maps (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: wilc1000: fix dma_buffer leak on bus acquire failure (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: don't override max_amsdu_subframes (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: clear shared SRNG pointer state on restart (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix peer resolution on rx path when peer_id=0 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: disconnect only after 6 beacons without Rx (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o BSS vif (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: use correct function to read STEP_URM register (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: stop TX during firmware restart (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath10k: skip WMI and beacon transmission when device is wedged (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix error path leaks in some WMI calls (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix error path leaks in some WMI WOW calls (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: re-check wiphy netns in nl80211_prepare_wdev_dump() continuation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: require CAP_NET_ADMIN over the target netns in SET_WIPHY_NETNS (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: fix NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST usage (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: initialize RSSI dBm conversion event state (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: fix leak in some ath12k_wmi_xxx() functions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: tests: mark HT check strict (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: check ieee80211_rx_data_set_link return in pubsta MLO path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: require admin perm on SET_PMK / DEL_PMK (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-46180}
  - wifi: mac80211: skip ieee80211_verify_sta_ht_mcs_support check in non-strict mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: use lockdep_assert_in_rcu_read_lock() for RCU assertions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: fix OF node refcount imbalance in WSI graph traversal (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - net: use get_random_u{16,32,64}() where appropriate [wireless] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: Explicitly include <linux/export.h> in michael-mic.c (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath10k: Add device-tree quirk to skip host cap QMI requests (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Use michael_mic() from cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: Use michael_mic() from cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211, cfg80211: Export michael_mic() and move it to cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Enable IPQ5424 WiFi device support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Add CE remap hardware parameters for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: add ath12k_hw_regs for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: add ath12k_hw_version_map entry for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Add ath12k_hw_params for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Create symlink for each radio in a wiphy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Skip adding inactive partner vdev info (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Support channel change stats (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Rename hw_link_id to radio_idx in ath12k_ah_to_ar() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: enable MLO support for 4-address mode interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: use ap_addr for 4-address NULL frame destination (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: synchronize valid links for WDS AP_VLAN interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: remove unused variables in minstrel_ht_alloc_sta (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: brcmfmac: silence warning for non-existent, optional firmware (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: wilc1000: use kzalloc_flex (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: brcmfmac: of: defer probe for MAC address (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: brcmfmac: Fix error pointer dereference (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53093}
  - wifi: mac80211: allow add_key on NAN interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: report and drop spurious NAN Data frames (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: allow block ack agreements in NAN Data (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Accept frames on NAN DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add support for TX over NAN_DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: update NAN data path state on schedule changes (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add NAN peer schedule support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: support NAN stations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: handle reconfig for NAN DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: support open and close for NAN_DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add NAN local schedule support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: run NAN DE code only when appropriate (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: export ieee80211_calculate_rx_timestamp (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ieee80211: add more NAN definitions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add a TXQ for management frames on NAN devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: usb: fix TX flow control by tracking in-flight URBs (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Add support for Elecom WDC-XE2402TU3-B (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add PCI ID of RTL8922DE and RTL8922DE-VS (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add chip_info and chip_ops struct (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add ops related to BT coexistence mechanism (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add RF ops of init hardware and get thermal (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: configure TX/RX path assisting in BT coexistence (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set TX power callback (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add RF calibration ops (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set channel with pre-/post- helpers (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: BB hardware pre-/post-init, TX/RX path and power settings (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: fix typo "frome" -> "from" in rx_freq_frome_ie (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Fill fw_version member of struct wiphy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: Fill fw_version member of struct wiphy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: coex: Ignore BT info byte 5 from RTL8821A (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: fw: load TX power elements according to AID (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: phy: load RF parameters relying on ACV for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: phy: expand PHY page for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: mac: disable pre-load function for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: mac: add specific case to dump mac memory for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: pci: clear SER ISR when initial and leaving WoWLAN for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: wow: enable MLD address for Magic packet wakeup (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: wow: use struct style to fill WOW wakeup control H2C command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set channel of RF part (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set channel of BB part (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set channel of MAC part (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: read and configure RF by calibration data from efuse physical map (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: define efuse map and read necessary fields (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add power on/off functions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add definition of quota, registers and efuse block (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: validate RX rate to prevent out-of-bound (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Add support for Buffalo WI-U3-2400XE2 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Add support for TP-Link Archer TX50U (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: retry efuse physical map dump on transient failure (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: TX QOS Null data the same way as Null data (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: add quirks to disable PCI ASPM and deep LPS for HP P3S95EA#ACB (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - net: qrtr: fix endian handling of confirm_rx field (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: ignore reserved bits in reconfiguration status (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: allow protected action frame TX for NAN (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ieee80211: Add some missing NAN definitions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: Add a notification to notify NAN channel evacuation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: add NL80211_CMD_NAN_ULW_UPDATE notification (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: allow reporting spurious NAN Data frames (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: allow ToDS=0/FromDS=0 data frames on NAN data interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: define an API for configuring the NAN peer's schedule (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: add support for NAN stations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: separately store HT, VHT and HE capabilities for NAN (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: add support for NAN data interface (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: make sure NAN chandefs are valid (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: Add an API to configure local NAN schedule (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: cleanup error path of ieee80211_do_open (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: extract channel logic from link logic (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: set RX_FLAG_RADIOTAP_TLV_AT_END generically (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: reduce the number of prints upon firmware crash (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: fix the description of SESSION_PROTECTION_CMD (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: introduce iwl_mld_vif_fw_id_valid (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: block EMLSR during TDLS connections (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: TLC_MNG_CONFIG_CMD can use several structures (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: update the TLC when we deactivate a link (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: add a macro for max FW links (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: always assign a fw id to a vif (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: use the dedicated helper to extract a link (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: add MAC context command version 4 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: handle NULL/ERR returns from ptp_clock_register() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: add double-include guards to nan.h (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: make alloc functions not forced static (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: rename iwl_mld_phy_from_mac80211() argument (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: remove type argument from iwl_mld_add_sta() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: make iwl_mld_mac80211_iftype_to_fw() static (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: pcie: don't dump on reset handshake in dump (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: use IWL_FW_CHECK for sync timeout (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: add BIOS revision compatibility check for PPAG command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: validate the channels received in iwl_mcc_update_resp_v* (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: add CQM event support for per-link RSSI changes (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: eliminate duplicate WIDE_ID in PPAG command handling (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: fw: Add TLV support for BIOS revision of command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: support changing iftype at runtime (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: set UHR MCS in RX status (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: enable UHR in TLC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: remove SCAN_TIMEOUT_MSEC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: remove IWL_MAX_WD_TIMEOUT (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: mode the comments valid kerneldoc comments (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: support PER_CHAIN_LIMIT_OFFSET_CMD v6 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: add support for WGDS revision 4 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: validate the WGDS table (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: add support for WGDS rev4 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: open code the parsing of the WGDS table (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: support version 11 of REDUCE_TX_POWER_CMD (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: add support for EWRD rev 3 table (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: add support for WRDS rev 3 table (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: support the new WRDS and EWRD tables (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: zero iwl_geo_tx_power_profiles_cmd before sending (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: restrict TOP reset to some devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: add support for PPAG table rev5 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: add support for PPAG rev5 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: check the size of the ACPI PPAG tables (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: regulatory: support a new command for PPAG (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: add support for sta command version 3 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: bring iwl_fill_ppag_table to the iwlmvm (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: open code the PPAG table store operation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: Introduce scan command version 18 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: Refactor scan command handling (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: remove unused scan expire time constants (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: cleanup some more MLO code (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: better use ARRAY_SIZE than a define (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: decouple UEFI and firmware APIs (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: ensure we don't read SAR values past the limit (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: add support for iwl_mcc_allowed_ap_type_cmd v2 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: replace use of system_wq with system_percpu_wq (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: fw: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Destroy active sta links in mt7996_mac_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Add mcu APIs to enable/disable vif links. (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Destroy vif active links in mt7996_remove_interface() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Move mlink deallocation in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Account active links in valid_links fields (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Rely on msta_link link_id in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix frequency separation for station STR mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: host-only unwind published links on add failure (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: publish msta->link after successful link add (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: switch link STA allocation to RCU lifetime (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: move WCID teardown into link_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: drop WCID reinit after publish (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: unwind WCID setup on link STA add failure (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: make WCID cleanup unconditional in sta_remove_links() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mconf and mlink to wtbl_update_hdr_trans() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: resolve link after acquiring mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to set_link_key() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to wtbl_update_hdr_trans() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: validate mlink in sta_hdr_trans_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to sta_hdr_trans_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to mac_link_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: resolve primary mlink via def_wcid (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to mcu_sta_update() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink and mconf to sta_mld_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass WCID indices to bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to sta_amsdu_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix issues with manually triggered radar detection (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: adjust timeout value for boot-up calibration commands (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: update WFSYS reset flow for MT7990 chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: support critical packet mode for MT7990 chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix RRO EMU configuration (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: add per-link beacon monitoring for MLO (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: wait for firmware TX completion of mgmt frames before channel switch (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: route nullfunc frames to PSD/ALTX queue (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: flush pending TX before channel switch (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: send nullfunc PS frames on offchannel transitions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: optimize ROC for same-channel case (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: abort ROC on chanctx changes (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: check chanctx before restoring channel after ROC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: add offchannel check to mt76_roc_complete (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: support upgrading passive scans to active (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: fix multi-radio on-channel scanning (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Decrement sta counter removing the link in mt7996_mac_reset_sta_iter() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Remove unnecessary phy filed in mt7996_vif_link struct (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Remove link pointer dependency in mt7996_mac_sta_remove_links() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Add missing CHANCTX_STA_CSA property (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: fix incorrect TLV length in CLC command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: add missing lock protection in mt76_sta_state for sta_event callback (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: fix 6GHz regulatory update on connection (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Disable Rx hdr_trans in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Add eMLSR support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53097}
  - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53098}
  - wifi: mt76: don't return TXQ when exceeding max non-AQL packets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix queue pause after scan due to wrong channel switch reason (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: avoid to set ACK for MCU command if wait_resp is not set (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix wrong DMAD length when using MAC TXP (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: add MT7902 SDIO device support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: add MT7902 PCIe device support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: add MT7902 WFDMA prefetch configuration (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: add MT7902 MCU support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: ensure MCU ready before ROM patch download (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: add PSE handling barrier for the large MCU cmd (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: connac: mark MT7902 as hw txp devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: add MT7902e DMA layout support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: handle MT7902 irq_map quirk with mutable copy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: use mt76_for_each_q_rx() in reset path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: connac: use is_connac2() to replace is_mt7921() checks (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: apply calibration-free data from OTP (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: add variant for MT7992 chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: add external EEPROM support for mt799x chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: don't consider the sband when processing capabilities (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: properly handle error in ieee80211_add_virtual_monitor (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: support UNII-9 channels in ieee80211_channel_to_freq_khz (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: make ieee80211_find_chanctx link-unaware (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211_hwsim: advertise basic UHR support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: use for_each_chanctx_user_* in one more place (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: Add support for additional 7 GHz channels (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Replace strncpy() with strscpy_pad() in drv_switch_vif_chanctx tracepoint (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: fix backoff fields and max_power calculation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: Replace deprecated PCI function (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: increase txq memory limit to 32 MiB (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: reset device after MCU message timeout (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: fix deadlock in remain-on-channel (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53100}
  - wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53101}
  - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: fix tx power setting failure after chip reset (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53102}
  - wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53103}
  - wifi: mt76: mt7925: Skip scan process during suspend. (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: drop puncturing handling from BSS change path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: Fix memory leak destroying device (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53104}
  - wifi: mt76: mt7921: fix a potential clc buffer length underflow (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-46136}
  - wifi: mt76: mt7921: Place upper limit on station AID (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53317}
  - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53105}
  - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53318}
  - wifi: mt76: fix list corruption in mt76_wcid_cleanup (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: fix incorrect length field in txpower command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: add support for ERP CTS & HT protection (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7915: fix use_cts_prot support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7615: fix use_cts_prot support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt7601u: check multiple firmware paths (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: Fix a potential deadlock in high-load situations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Reset ampdu_state state in case of failure in mt7996_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Switch to the secondary link if the default one is removed (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Reset mtxq->idx if primary link is removed in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Set mtxq->wcid just for primary link (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: introduce CSA support in non-MLO mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt76x02: wake queues after reconfig (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix iface combination for different chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: add duplicated WTBL command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: offload radar threshold initialization (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: abort CCA when CSA is starting (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: set specific BSSINFO and STAREC commands after channel switch (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix the behavior of radar detection (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: extend CSA and CCA support for MLO (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: use int for band coming from netlink (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fix STA link removal during link removal (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: usb: Rx aggregation for RTL8832CU/RTL8851BU (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Remove unused DFS Unit Test definitions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Clean up the WMI Unit Test command interface (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: debug: simulate Wi-Fi 7 SER L0/L1 without PS mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Recalculate station aggregates when AMSDU length changes for MLO links (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Drop malformed AMPDU frames with abnormal PN (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: replace RF mutex with wiphy lock assertion (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: wow: add retry for ensuring packet are processed (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: chan: recalc MLO DBCC mode based on current entity mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: chan: simplify link handling related to ROC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: tweak settings of TX power and channel for Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: move disabling dynamic mechanism functions to core (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: phy: limit AMPDU number for RA try rate (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: mac: remove A-die off setting for RTL8852C and RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: pci: update SER parameters for suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtlwifi: rtl8192d: fix typo in H2C wait counter names (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtlwifi: usb: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: fix device leak on probe failure (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-31604}
  - wifi: rtl8xxxu: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtl8xxxu: fix potential use of uninitialized value (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtl8xxxu: Mark RTL8188ETV (0bda:0179) as tested (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: reject S1G/60G with HT chantype (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ieee80211: fix definition of EHT-MCS 15 in MRU (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: check non-S1G width with S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: restrict cfg80211_chandef_create() to only HT-based bands (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: don't use cfg80211_chandef_create() for default chandef (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Remove deleted sta links in ieee80211_ml_reconf_work() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: split control freq check from chandef check (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: always use full chanctx compatible check (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: refactor chandef tracing macros (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: validate HE 6 GHz operation when EHT is used (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: split out UHR operation information (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Use .mbn firmware for AHB devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath10k: rename disconnect callback (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath10k: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath9k: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Fix legacy rate mapping for monitor mode capture (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Fix the assignment of logical link index (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: account TX stats only when ACK/BA status is present (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mwifiex: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rt2x00: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211_hwsim: add incumbent signal interference detection support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: Add SPDX ids to some files in the wireless subsystem (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add support for NDP ADDBA/DELBA for S1G (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ieee80211: fix UHR operation DBE vs. P-EDCA order (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: remove AID bit stripping for print (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: remove stale TODO item (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: move action code from per-type frame structs (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: UHR: define DPS/DBE/P-EDCA elements and fix size parsing (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211_hwsim: change hwsim_class to a const struct (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: give the AP more time for EPPKE as well (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53112}
  - wifi: rtw88: check for PCI upstream bridge existence (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-46092}
  - wifi: rtw89: ser: post-recover DMAC state to prevent LPS (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: ser: Wi-Fi 7 reset HALT C2H after reading it (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: debug: add SER SW counters to count simulation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: rfk: add hardware version to rtw89_fw_h2c_rf_pre_ntfy_mcc for new WiFi 7 firmware (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: add H2C command to protect TX/RX for unused PHY (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8851b: update supported firmware format to 1 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8852a: update supported firmware format to 1 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8852a: move DIG tables to rtw8852a.c (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8852b: update supported firmware format to 2 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: add general way to generate module firmware string (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: fw: recognize firmware type B by AID (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: fw: add fw_def struct to put firmware name and format version (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: coex: Solve LE-HID lag & update coex version to 26020420 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Turbo mode for RTL8851BU/RTL8852BU (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Remove the unused argument from the Rx data path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Enable monitor mode support on IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Set up MLO after SSR (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: Silence remoteproc probe deferral prints (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: support key installation on non-netdev wdevs (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: make cluster id an array (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: update outdated comment (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Advertise IEEE 802.1X authentication support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Add support for IEEE 802.1X authentication protocol in non-AP STA mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: add support for IEEE 802.1X Authentication Protocol (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Advertise EPPKE support based on driver capabilities (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211_hwsim: Advertise support for (Re)Association frame encryption (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Fix AAD/Nonce computation for management frames with MLO (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rt2x00: use generic nvmem_cell_get (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fetch unsolicited probe response template by link ID (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fetch FILS discovery template by link ID (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: don't allow DFS channels for NAN (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: refactor wiphy_suspend (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211/cfg80211: support stations of non-netdev interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: remove unneeded call to cfg80211_leave (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: refactor nl80211_parse_chandef (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: add support to handle incumbent signal detected event from mac80211/driver (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Set link ID for NULL packets sent to probe stations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: set band information only for non-MLD when probing stations using NULL frame (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-46069}
  - wifi: mac80211_hwsim: background CAC support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: events, report background radar (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: set and report chandef CAC ongoing (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: fix background CAC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix memory leaks in beacon template setup (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53113}
  - wifi: ath12k: add basic hwmon temperature reporting (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: fix indentation in ath12k_qmi_aux_uc_load() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath9k: Fix typo (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [mac80211] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [mac80211] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [mac80211] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [mac80211] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - bus: mhi: host: pci_generic: Add Telit FE912C04 modem support (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: ep: Test for non-zero return value where applicable (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: Use kzalloc_flex (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Add pm_runtime_forbid() in remove callback (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Add NMEA channels to FN920C04 and FN990A (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Enable IP_SW and IP_ETH channels for Qcom QDU100 device (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Add Qualcomm SDX35 modem (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [mhi] (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [mhi] (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [mhi] (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [mhi] (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - redhat: configs: rhel: Enable AMD ISP4 config (Kate Hsuan) [RHEL-23291]
  - Documentation: add documentation of AMD isp 4 driver (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: add DRM_AMDGPU dependency (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: isp4: drop stale list reinit before free (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: isp4 debug fs logging and more descriptive errors (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: isp4 video node and buffers handling added (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: isp4 subdev and firmware loading handling added (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: Add isp4 fw and hw interface (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: low level support for isp4 firmware (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: Introduce amd isp4 capture driver (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (Kate Hsuan) [RHEL-162129]
  - media: pci: intel: Add CVS support for IPU bridge driver (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Only do uvc_video_get_time() if needed (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Do not add samples if dev_sof has not changed (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Do not add clock samples with small sof delta (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Relax the constrains for interpolating the hw clock (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Use hw timestaming if the clock buffer is full (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix dev_sof filtering in hw timestamp (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Avoid partial metadata buffers (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Do not open code uvc_queue_get_current_buffer (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: add v4l2_fill_pixfmt_mp_aligned helper (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: add has_alpha to v4l2_format_info (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: add missing 1 and 2 byte RGB formats to v4l2_format_info (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: sort RGB formats in v4l2_format_info (Kate Hsuan) [RHEL-162129]
  - media: Use named initializers for arrays of i2c_device_data (Kate Hsuan) [RHEL-162129]
  - media: pwc: Drain fill_buf on start_streaming() failure (Kate Hsuan) [RHEL-162129]
  - media: ov13b10: Support multiple regulators (Kate Hsuan) [RHEL-162129]
  - media: cec: core: add LIP support (Kate Hsuan) [RHEL-162129]
  - media: include/uapi/linux/cec*: clarify which msgs are CEC 2.0 (Kate Hsuan) [RHEL-162129]
  - media: include/uapi/linux/cec*.h: add CEC LIP support (Kate Hsuan) [RHEL-162129]
  - media: pwc: Return queued buffers on start_streaming() failure (Kate Hsuan) [RHEL-162129]
  - media: v4l2-dev: Add range check for vdev->minor (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Introduce allow_privacy_override module parameter (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Announce deprecation intentions for UVCIOC_CTRL_MAP (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Import standard controls from uvcdynctrl (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix buffer sequence in frame gaps (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix sequence number when no EOF (Kate Hsuan) [RHEL-162129]
  - media: v4l2-subdev: Allow accessing routes with STREAMS client capability (Kate Hsuan) [RHEL-162129]
  - media: v4l2-subdev: Refactor returning routes (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: Always register clock with device-specific name (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() (Kate Hsuan) [RHEL-162129]
  - media: cx231xx: fix devres lifetime (Kate Hsuan) [RHEL-162129]
  - media: vb2: use ssize_t for vb2_read/vb2_write (Kate Hsuan) [RHEL-162129]
  - media: gspca: Fix comment in sd_init() (Kate Hsuan) [RHEL-162129]
  - media: s2255: refactor endpoint lookup (Kate Hsuan) [RHEL-162129]
  - media: gspca: refactor endpoint lookup (Kate Hsuan) [RHEL-162129]
  - media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping ranges (Kate Hsuan) [RHEL-162129]
  - media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicely (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: Add YUV24 format info (Kate Hsuan) [RHEL-162129]
  - media: v4l2-controls: Add control for background detection (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: validate HEVC active reference counts (Kate Hsuan) [RHEL-162129]
  - Revert "media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935" (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix bug in error path of uvc_alloc_urb_buffers (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov5675: Wait for endpoint (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Add support for P010 pixel format (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Add D436 and D555 cameras metadata support (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Change comment to 'Intel RealSense' (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Add a stream backpointer in uvc_video_queue (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Allow userspace to increase the meta buffersize (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: uvc_queue_to_stream(): Support meta queues (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream (Kate Hsuan) [RHEL-162129]
  - media: subdev: Split v4l2_subdev_get_frame_desc_passthrough() into locked and unlocked (Kate Hsuan) [RHEL-162129]
  - media: subdev: Improve v4l2_subdev_get_frame_desc_passthrough() kdoc (Kate Hsuan) [RHEL-162129]
  - media: subdev: Minor v4l2_subdev_get_frame_desc_passthrough() cleanups (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov8856: parse and register V4L2 device tree properties (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov8856: free control handler on error in ov8856_init_controls() (Kate Hsuan) [RHEL-162129] {CVE-2026-53379}
  - media: v4l2-subdev: Fix error check in v4l2_subdev_get_frame_desc_passthrough() (Kate Hsuan) [RHEL-162129]
  - media: v4l2-fwnode: Return -EPROBE_DEFER on parsing NULL endpoints (Kate Hsuan) [RHEL-162129]
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Kate Hsuan) [RHEL-162129] {CVE-2026-31473}
  - media: rc: fix race between unregister and urb/irq callbacks (Kate Hsuan) [RHEL-162129]
  - media: streamzap: fix race between device disconnection and urb callback (Kate Hsuan) [RHEL-162129] {CVE-2025-22027}
  - media: cx231xx: Fix AGC levels for NTSC-M (Kate Hsuan) [RHEL-162129]
  - media: cx25840: Fix NTSC-J, PAL-N, and SECAM standards (Kate Hsuan) [RHEL-162129]
  - media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935 (Kate Hsuan) [RHEL-162129]
  - media: pulse8-cec: Handle partial deinit (Kate Hsuan) [RHEL-162129]
  - media: cx231xx: drop redundant device reference (Kate Hsuan) [RHEL-162129]
  - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (Kate Hsuan) [RHEL-162129] {CVE-2026-46312}
  - media: remove unnecessary module_init/exit functions (Kate Hsuan) [RHEL-162129]
  - media: ipu-bridge: Add OV5675 sensor config (Kate Hsuan) [RHEL-162129]
  - media: intel/ipu6: fix error pointer dereference (Kate Hsuan) [RHEL-162129] {CVE-2026-46313}
  - media: subdev: Add v4l2_subdev_get_frame_desc_passthrough helper (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Pass allocation size directly to uvc_alloc_urb_buffer (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: use usb_alloc_noncoherent/usb_free_noncoherent() (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix allocation for small frame sizes (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Return queued buffers on start_streaming() failure (Kate Hsuan) [RHEL-162129] {CVE-2026-43290}
  - media: uvcvideo: Create an ID namespace for streaming output terminals (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: Add hevc_ext_sps_[ls]t_rps controls (Kate Hsuan) [RHEL-162129]
  - media: v4l: ctrls: add a control for enabling strobe output (Kate Hsuan) [RHEL-162129]
  - media: v4l: ctrls: add a control for flash/strobe duration (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix digital gain range (Kate Hsuan) [RHEL-162129]
  - media: ov01a10: Fix indentation (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Update e-mail addresses (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Always call video_device_pipeline_alloc_start() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Drop custom functions to obtain sd state information (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Remove source_entity from struct ipu6_isys_stream (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Obtain unique source pad from remote sub-device (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Obtain remote pad using media_pad_remote_pad_unique() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Drop error argument from ipu6_isys_stream_start() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Always close firmware stream (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Close firmware streams on streaming enable failure (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Don't check pipeline in stream_start (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Remove redundant streaming start via buffer queueing (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Make symbols static (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Remove redundant driver data checks (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Drop MMU hardware initialisation in probe() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Ensure stream_mutex is acquired when dealing with node list (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Fix RPM reference leak in probe error paths (Kate Hsuan) [RHEL-162129] {CVE-2026-43177}
  - media: ipu6: Fix typo and wrong constant in ipu6-mmu.c (Kate Hsuan) [RHEL-162129]
  - media: v4l2-subdev: Extend VIDIOC_SUBDEV_S_ROUTING error codes (Kate Hsuan) [RHEL-162129]
  - media: v4l2-async: Fix error handling on steps after finding a match (Kate Hsuan) [RHEL-162129] {CVE-2026-43189}
  - media: v4l2-fwnode: Allow passing NULL fwnode to endpoint parsers (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: Set error v4l2_ctrl_new_fwnode_properties consistently (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add ov01a1b support (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Optimize setting h/vflip values (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add ov01a10_sensor_cfg struct (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Remove values set by controls from global_setting[] (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Only set register 0x0305 once (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Replace exposure->min/step with direct define use (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Remove struct ov01a10_reg_list (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add cropping support / allow arbitrary sizes (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Use native and default for pixel-array size names (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Move setting of ctrl->flags to after checking ctrl_hdlr->error (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Don't update pixel_rate and link_freq from set_fmt (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add power on/off sequencing support (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add ov01a10_check_hwcfg() function (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Store dev pointer in struct ov01a10 (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Remove overly verbose probe() error reporting (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Convert to new CCI register access helpers (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Change default vblank value to a vblank resulting in 30 fps (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix test-pattern disabling (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix analogue gain range (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix reported pixel-rate value (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix the horizontal flip control (Kate Hsuan) [RHEL-162129]
  - media: v4l2: Add description for V4L2_PIX_FMT_AV1 in v4l_fill_fmtdesc() (Kate Hsuan) [RHEL-162129]
  - media: uapi: videodev2: Add support for AV1 stateful decoder (Kate Hsuan) [RHEL-162129]
  - Revert "media: uvcvideo: Remove nodrop parameter" (Kate Hsuan) [RHEL-162129]
  - media: saa6588: Remove dprintk macro and use v4l2_info() (Kate Hsuan) [RHEL-162129]
  - media: mc: add debugfs node to keep track of requests (Kate Hsuan) [RHEL-162129]
  - media: mc: add manual request completion (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Document how to format GUIDs (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Remove nodrop parameter (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: UVC minimum relative pan/tilt/zoom speed fix. (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix support for V4L2_CTRL_FLAG_HAS_WHICH_MIN_MAX (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Replace dev_dbg() with uvc_dbg() (Kate Hsuan) [RHEL-162129]
  - media: vb2: drop wait_prepare/finish callbacks (Kate Hsuan) [RHEL-162129]
  - media: vb2: remove vb2_ops_wait_prepare/finish helpers (Kate Hsuan) [RHEL-162129]
  - media: ipu6: isys: Add support for monochrome media bus formats (Kate Hsuan) [RHEL-162129]
  - media: v4l: Add helper to get number of active lanes via a pad (Kate Hsuan) [RHEL-162129]
  - media: ipu-bridge: Add OV05C10 to the list of supported sensors (Kate Hsuan) [RHEL-162129]
  - media: ipu-bridge: Add IMX471 to the list of supported sensors (Kate Hsuan) [RHEL-162129]
  - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path (Kate Hsuan) [RHEL-162129]
  - media: ov13b10: Add ACPI ID for ASUS Z13 Flow laptop (Kate Hsuan) [RHEL-162129]
  - media: ivsc: Release csi_dev reference early in mei_ace_setup_dev_link() (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: set AV1 sequence flags for testing (Kate Hsuan) [RHEL-162129]
  - media: videobuf2: forbid remove_bufs when legacy fileio is active (Kate Hsuan) [RHEL-162129] {CVE-2025-40302}
  - media: v4l2-subdev / pdx86: int3472: Use "privacy" as con_id for the privacy LED (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: add full AV1 profile validation in validate_av1_sequence() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: isys: Use %pe format specifier (Kate Hsuan) [RHEL-162129]
  - media: ipu-bridge: Use %pe format specifier (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov5675: Use %pe format specifier (Kate Hsuan) [RHEL-162129]
  - media: cec: Fix debugfs leak on bus_register() failure (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: eUSB2 double isochronous bandwidth support (Kate Hsuan) [RHEL-162129]
  - udp: Fix wildcard bind conflict check when using hash2 (Paolo Abeni) [RHEL-152739]
  - tcp: optimize inet_use_bhash2_on_bind() (Paolo Abeni) [RHEL-152739]
  - mm/hugetlb: fix folio is still mapped when deleted (Rafael Aquini) [RHEL-145695] {CVE-2025-40006}
  - mm/filemap: fix page_cache_prev_miss() when no hole is found (Rafael Aquini) [RHEL-145695]
  - mm/kconfig: make BALLOON_COMPACTION depend on MIGRATION (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/maintainer-profile: fix a typo on mm-untable link (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: fix wrong comment of damon_call() return timing (Rafael Aquini) [RHEL-145695]
  - mm/shmem: remove unused entry_order after large swapin rework (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: clear walk_control on inactive context in damos_walk() (Rafael Aquini) [RHEL-145695] {CVE-2026-43388}
  - mm/damon/Kconfig: make DAMON_STAT_ENABLED_DEFAULT depend on DAMON_STAT (Rafael Aquini) [RHEL-145695]
  - mm/mremap: honour writable bit in mremap pte batching (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: fix incorrect error return from hugetlb_reserve_pages() (Rafael Aquini) [RHEL-145695]
  - mm/memory_hotplug: maintain N_NORMAL_MEMORY during hotplug (Rafael Aquini) [RHEL-145695]
  - mm: restore per-memcg proactive reclaim with !CONFIG_NUMA (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: remove call_control in inactive contexts (Rafael Aquini) [RHEL-145695] {CVE-2026-23012}
  - mm/damon/core: fix list_add_tail() call on damon_call() (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: fix memory leak of repeat mode damon_call_control objects (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: check contexts->nr in repeat_call_fn (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: change next_update_jiffies to a global variable (Rafael Aquini) [RHEL-145695]
  - selftests/proc: fix string literal warning in proc-maps-race.c (Rafael Aquini) [RHEL-145695]
  - mm/mseal: update VMA end correctly on merge (Rafael Aquini) [RHEL-145695]
  - init/main.c: fix boot time tracing crash (Rafael Aquini) [RHEL-145695]
  - selftests/mm: fix usage of FORCE_READ() in cow tests (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails (Rafael Aquini) [RHEL-145695] {CVE-2026-31653}
  - kmsan: fix out-of-bounds access to shadow memory (Rafael Aquini) [RHEL-145695] {CVE-2025-40008}
  - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: use dynamically allocated repeat mode damon_call_control (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: introduce damon_call_control->dealloc_on_cancel (Rafael Aquini) [RHEL-145695]
  - mm: folio_may_be_lru_cached() unless folio_test_large() (Rafael Aquini) [RHEL-145695]
  - mm: revert "mm: vmscan.c: fix OOM on swap stress test" (Rafael Aquini) [RHEL-145695]
  - mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" (Rafael Aquini) [RHEL-145695]
  - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: fix use-after-free in state_show() (Rafael Aquini) [RHEL-145695] {CVE-2025-39877}
  - mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() (Rafael Aquini) [RHEL-145695] {CVE-2025-39910}
  - mm/mremap: fix regression in vrm->new_addr check (Rafael Aquini) [RHEL-145695]
  - percpu: fix race on alloc failed warning limit (Rafael Aquini) [RHEL-145695]
  - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() (Rafael Aquini) [RHEL-145695] {CVE-2025-39916}
  - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() (Rafael Aquini) [RHEL-145695] {CVE-2025-39909}
  - mm/damon/core: set quota->charged_from to jiffies at first charge window (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-145695]
  - mm/memory_hotplug: fix hwpoisoned large folio handling in do_migrate_range() (Rafael Aquini) [RHEL-145695]
  - mm/khugepaged: fix the address passed to notifier on testing young (Rafael Aquini) [RHEL-145695]
  - mm: fix possible deadlock in kmemleak (Rafael Aquini) [RHEL-145695]
  - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-145695] {CVE-2025-39845}
  - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-145695]
  - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-145695] {CVE-2025-39844}
  - mm: fix accounting of memmap pages (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: prevent unnecessary overflow in damos_set_effective_quota() (Rafael Aquini) [RHEL-145695]
  - mm/kasan: avoid lazy MMU mode hazards (Rafael Aquini) [RHEL-145695]
  - mm/kasan: fix vmalloc shadow memory (de-)population races (Rafael Aquini) [RHEL-145695]
  - kunit: kasan_test: disable fortify string checker on kasan_strings() test (Rafael Aquini) [RHEL-145695]
  - selftests/mm: fix FORCE_READ to read input value correctly (Rafael Aquini) [RHEL-145695]
  - mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE (Rafael Aquini) [RHEL-145695] {CVE-2025-39899}
  - s390/mm: Prevent possible preempt_count overflow (Rafael Aquini) [RHEL-145695]
  - memblock: fix kernel-doc for MEMBLOCK_RSRV_NOINIT (Rafael Aquini) [RHEL-145695]
  - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Rafael Aquini) [RHEL-145695] {CVE-2025-39902}
  - mm: numa,memblock: Use SZ_1M macro to denote bytes to MB conversion (Rafael Aquini) [RHEL-145695]
  - mm/mremap: fix WARN with uffd that has remap events disabled (Rafael Aquini) [RHEL-145695] {CVE-2025-39775}
  - mm/damon/sysfs-schemes: put damos dests dir after removing its files (Rafael Aquini) [RHEL-145695]
  - mm/migrate: fix NULL movable_ops if CONFIG_ZSMALLOC=m (Rafael Aquini) [RHEL-145695]
  - selftests/mm: add test for invalid multi VMA operations (Rafael Aquini) [RHEL-145695]
  - mm/mremap: catch invalid multi VMA moves earlier (Rafael Aquini) [RHEL-145695]
  - mm/mremap: allow multi-VMA move when filesystem uses thp_get_unmapped_area (Rafael Aquini) [RHEL-145695]
  - mm/numa_memblks: Use pr_debug instead of printk(KERN_DEBUG) (Rafael Aquini) [RHEL-145695]
  - mm/mremap: avoid expensive folio lookup on mremap folio pte batch (Rafael Aquini) [RHEL-145695]
  - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (Rafael Aquini) [RHEL-145695] {CVE-2025-38686}
  - mm: pass page directly instead of using folio_page (Rafael Aquini) [RHEL-145695]
  - mm/vmscan: fix inverted polarity in lru_gen_seq_show() (Rafael Aquini) [RHEL-145695]
  - mm: fix the race between collapse and PT_RECLAIM under per-vma lock (Rafael Aquini) [RHEL-145695]
  - s390/mm: Allocate page table with PAGE_SIZE granularity (Rafael Aquini) [RHEL-145695]
  - mm: mempool: fix crash in mempool_free() for zero-minimum pools (Rafael Aquini) [RHEL-145695]
  - mm: correct type for vmalloc vm_flags fields (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: fix major fault counting (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: rework swap entry and index calculation for large swapin (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: simplify swapin path and result handling (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: never use swap cache and readahead for SWP_SYNCHRONOUS_IO (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: tidy up swap entry splitting (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: tidy up THP swapin checks (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: avoid redundant Xarray lookup during swapin (Rafael Aquini) [RHEL-145695]
  - x86/ftrace: enable EXECMEM_ROX_CACHE for ftrace allocations (Rafael Aquini) [RHEL-145695]
  - x86/kprobes: enable EXECMEM_ROX_CACHE for kprobes allocations (Rafael Aquini) [RHEL-145695]
  - execmem: drop writable parameter from execmem_fill_trapping_insns() (Rafael Aquini) [RHEL-145695]
  - execmem: add fallback for failures in vmalloc(VM_ALLOW_HUGE_VMAP) (Rafael Aquini) [RHEL-145695]
  - execmem: move execmem_force_rw() and execmem_restore_rox() before use (Rafael Aquini) [RHEL-145695]
  - execmem: rework execmem_cache_free() (Rafael Aquini) [RHEL-145695]
  - execmem: introduce execmem_alloc_rw() (Rafael Aquini) [RHEL-145695]
  - execmem: drop unused execmem_update_copy() (Rafael Aquini) [RHEL-145695]
  - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (Rafael Aquini) [RHEL-145695] {CVE-2025-38554}
  - mm/rmap: add anon_vma lifetime debug check (Rafael Aquini) [RHEL-145695]
  - mm: remove mm/io-mapping.c (Rafael Aquini) [RHEL-145695]
  - khugepaged: optimize collapse_pte_mapped_thp() by PTE batching (Rafael Aquini) [RHEL-145695]
  - khugepaged: optimize __collapse_huge_page_copy_succeeded() by PTE batching (Rafael Aquini) [RHEL-145695]
  - mm: add get_and_clear_ptes() and clear_ptes() (Rafael Aquini) [RHEL-145695]
  - mm/mincore: hold PTL in mincore_hugetlb (Rafael Aquini) [RHEL-145695]
  - mm/memory-failure: hold PTL in hwpoison_hugetlb_range (Rafael Aquini) [RHEL-145695]
  - mm/mseal: rework mseal apply logic (Rafael Aquini) [RHEL-145695]
  - mm/mseal: simplify and rename VMA gap check (Rafael Aquini) [RHEL-145695]
  - mm/mseal: small cleanups (Rafael Aquini) [RHEL-145695]
  - mm/mseal: update madvise() logic (Rafael Aquini) [RHEL-145695]
  - mm/mseal: always define VM_SEALED (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: skip isolating folios already in destination nid (Rafael Aquini) [RHEL-145695]
  - kasan: skip quarantine if object is still accessible under RCU (Rafael Aquini) [RHEL-145695]
  - mm/page-flags: remove folio_start_writeback_keepwrite() (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: improve cached mTHP handling and fix potential hang (Rafael Aquini) [RHEL-145695]
  - mm/page_alloc: remove trace_mm_alloc_contig_migrate_range_info() (Rafael Aquini) [RHEL-145695]
  - mm: remove grab_cache_page() (Rafael Aquini) [RHEL-145695]
  - mm/damon/ops-common: ignore migration request to invalid nodes (Rafael Aquini) [RHEL-145695] {CVE-2025-39700}
  - tools/testing/selftests: explicitly test split multi VMA mremap move (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: test MREMAP_DONTUNMAP on multiple VMA move (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: add mremap() shrink test for multiple VMAs (Rafael Aquini) [RHEL-145695]
  - selftests/mm: guard-regions: Use SKIP() instead of ksft_exit_skip() (Rafael Aquini) [RHEL-145695]
  - selftests/mm: reuse FORCE_READ to replace "asm volatile("" : "+r" (XXX));" (Rafael Aquini) [RHEL-145695]
  - arm64: add batched versions of ptep_modify_prot_start/commit (Rafael Aquini) [RHEL-145695]
  - mm: optimize mprotect() by PTE batching (Rafael Aquini) [RHEL-145695]
  - mm: split can_change_pte_writable() into private and shared parts (Rafael Aquini) [RHEL-145695]
  - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure (Rafael Aquini) [RHEL-145695]
  - mm: add batched versions of ptep_modify_prot_start/commit (Rafael Aquini) [RHEL-145695]
  - mm: optimize mprotect() for MM_CP_PROT_NUMA by batch-skipping PTEs (Rafael Aquini) [RHEL-145695]
  - mm: refactor MM_CP_PROT_NUMA skipping case into new function (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: refactor after-split (page) cache code (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: get frozen folio refcount with folio_expected_ref_count() (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: convert VM_BUG* to VM_WARN* in __folio_split (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: deduplicate code in __folio_split() (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: remove after_split label in __split_unmapped_folio() (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: move unrelated code out of __split_unmapped_folio() (Rafael Aquini) [RHEL-145695]
  - mm: mempool: fix wake-up edge case bug for zero-minimum pools (Rafael Aquini) [RHEL-145695]
  - fs/proc/task_mmu: read proc/pid/maps under per-vma lock (Rafael Aquini) [RHEL-145695]
  - fs/proc/task_mmu: remove conversion of seq_file position to unsigned (Rafael Aquini) [RHEL-145695]
  - selftests/proc: add verbose mode for /proc/pid/maps tearing tests (Rafael Aquini) [RHEL-145695]
  - selftests/proc: extend /proc/pid/maps tearing test to include vma remapping (Rafael Aquini) [RHEL-145695]
  - selftests/proc: extend /proc/pid/maps tearing test to include vma resizing (Rafael Aquini) [RHEL-145695]
  - selftests/proc: add /proc/pid/maps tearing from vma split test (Rafael Aquini) [RHEL-145695]
  - mm: cma: simplify cma_maxchunk_get() (Rafael Aquini) [RHEL-145695]
  - mm: cma: simplify cma_debug_show_areas() (Rafael Aquini) [RHEL-145695]
  - fs: stable_page_flags(): use snapshot_page() (Rafael Aquini) [RHEL-145695]
  - proc: kpagecount: use snapshot_page() (Rafael Aquini) [RHEL-145695]
  - mm/util: introduce snapshot_page() (Rafael Aquini) [RHEL-145695]
  - mm/memory: introduce is_huge_zero_pfn() and use it in vm_normal_page_pmd() (Rafael Aquini) [RHEL-145695]
  - Docs/ABI/damon: update for refresh_ms (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: document refresh_ms file (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: implement refresh_ms file internal work (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: implement refresh_ms file under kdamond directory (Rafael Aquini) [RHEL-145695]
  - memcg: convert memcg->socket_pressure to u64 (Rafael Aquini) [RHEL-145695]
  - mm: remove arch_flush_tlb_batched_pending() arch helper (Rafael Aquini) [RHEL-145695]
  - mm: drop hugetlb_free_pgd_range() (Rafael Aquini) [RHEL-145695]
  - mm: remove call to hugetlb_free_pgd_range() (Rafael Aquini) [RHEL-145695]
  - sparc64: remove hugetlb_free_pgd_range() (Rafael Aquini) [RHEL-145695]
  - mm/shmem: writeout free swap if swap_writeout() reactivates (Rafael Aquini) [RHEL-145695]
  - mm/shmem: hold shmem_swaplist spinlock (not mutex) much less (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: extend mremap_test to test multi-VMA mremap (Rafael Aquini) [RHEL-145695]
  - mm/mremap: permit mremap() move of multiple VMAs (Rafael Aquini) [RHEL-145695]
  - mm/mremap: clean up mlock populate behaviour (Rafael Aquini) [RHEL-145695]
  - mm/mremap: move remap_is_valid() into check_prep_vma() (Rafael Aquini) [RHEL-145695]
  - mm/mremap: check remap conditions earlier (Rafael Aquini) [RHEL-145695]
  - mm/mremap: use an explicit uffd failure path for mremap (Rafael Aquini) [RHEL-145695]
  - mm/mremap: cleanup post-processing stage of mremap (Rafael Aquini) [RHEL-145695]
  - mm/mremap: put VMA check and prep logic into helper function (Rafael Aquini) [RHEL-145695]
  - mm/mremap: refactor initial parameter sanity checks (Rafael Aquini) [RHEL-145695]
  - mm/mremap: perform some simple cleanups (Rafael Aquini) [RHEL-145695]
  - mm/vma: refactor vma_modify_flags_name() to vma_modify_name() (Rafael Aquini) [RHEL-145695]
  - mm: optimize lru_note_cost() by adding lru_note_cost_unlock_irq() (Rafael Aquini) [RHEL-145695]
  - mm/mglru: stop try_to_inc_min_seq() if min_seq[type] has not increased (Rafael Aquini) [RHEL-145695]
  - s390/mm: Remove possible false-positive warning in pte_free_defer() (Rafael Aquini) [RHEL-145695]
  - memcg_slabinfo: Fix use of PG_slab (Rafael Aquini) [RHEL-145695]
  - kfence: Remove mention of PG_slab (Rafael Aquini) [RHEL-145695]
  - mm: move randomize_va_space into memory.c (Rafael Aquini) [RHEL-145695]
  - x86: implement crashkernel cma reservation (Rafael Aquini) [RHEL-145695]
  - kdump: wait for DMA to finish when using CMA (Rafael Aquini) [RHEL-145695]
  - kdump, documentation: describe craskernel CMA reservation (Rafael Aquini) [RHEL-145695]
  - kdump: implement reserve_crashkernel_cma (Rafael Aquini) [RHEL-145695]
  - Add a new optional ",cma" suffix to the crashkernel= command line option (Rafael Aquini) [RHEL-145695]
  - mm/page_owner: convert set_page_owner_migrate_reason() to folios (Rafael Aquini) [RHEL-145695]
  - mm/memfd: replace deprecated strcpy() with memcpy() in alloc_name() (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: remove damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: remove damon_sysfs_before_terminate() (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: destroy targets when kdamond_fn() finish (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: remove damon_sysfs_destroy_targets() (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: put pid in cleanup_target() (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: add cleanup_target() ops callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: do not call ops.cleanup() when destroying targets (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/lru_sort: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/reclaim: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/stat: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: introduce repeat mode damon_call() (Rafael Aquini) [RHEL-145695]
  - mm/damon: accept parallel damon_call() requests (Rafael Aquini) [RHEL-145695]
  - mm: simplify min_brk handling in brk() (Rafael Aquini) [RHEL-145695]
  - readahead: use folio_nr_pages() instead of shift operation (Rafael Aquini) [RHEL-145695]
  - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (Rafael Aquini) [RHEL-145695]
  - mm: introduce per-node proactive reclaim interface (Rafael Aquini) [RHEL-145695]
  - mm/vmscan: make __node_reclaim() more generic (Rafael Aquini) [RHEL-145695]
  - mm/memcg: make memory.reclaim interface generic (Rafael Aquini) [RHEL-145695]
  - mm/vmscan: respect psi_memstall region in node reclaim (Rafael Aquini) [RHEL-145695]
  - mm: remove unmap_and_put_page() (Rafael Aquini) [RHEL-145695]
  - mm/memory.c: use folios in __access_remote_vm() (Rafael Aquini) [RHEL-145695]
  - mm/memory.c: use folios in __copy_remote_vm_str() (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: apply filters in migrate_{hot/cold} (Rafael Aquini) [RHEL-145695]
  - mm/damon: move folio filtering from paddr to ops-common (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: use damos->migrate_dests in migrate_{hot,cold} (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: document vaddr support for migrate_{hot,cold} (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: add vaddr versions of migrate_{hot,cold} (Rafael Aquini) [RHEL-145695]
  - mm/damon: move migration helpers from paddr to ops-common (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: commit damos->migrate_dests (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: document dests directory (Rafael Aquini) [RHEL-145695]
  - Docs/ABI/damon: document schemes dests directory (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: set damos->migrate_dests (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: implement DAMOS action destinations directory (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: add damos->migrate_dests field (Rafael Aquini) [RHEL-145695]
  - mm/damon: add struct damos_migrate_dests (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: commit damos->target_nid (Rafael Aquini) [RHEL-145695]
  - mm, vmstat: remove the NR_WRITEBACK_TEMP node_stat_item counter (Rafael Aquini) [RHEL-145695]
  - mm/vmstat: utilize designated initializers for the vmstat_text array (Rafael Aquini) [RHEL-145695]
  - mm: strictly check vmstat_text array size (Rafael Aquini) [RHEL-145695]
  - mm/vmstat: make MEMCG select VM_EVENT_COUNTERS (Rafael Aquini) [RHEL-145695]
  - mm: remove boolean output parameters from folio_pte_batch_ext() (Rafael Aquini) [RHEL-145695]
  - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() (Rafael Aquini) [RHEL-145695]
  - mm: smaller folio_pte_batch() improvements (Rafael Aquini) [RHEL-145695]
  - mm: convert FPB_IGNORE_* into FPB_RESPECT_* (Rafael Aquini) [RHEL-145695]
  - mm/migrate: remove the -EEXIST conversion for move_pages() (Rafael Aquini) [RHEL-145695]
  - selftests/mm: pagemap_scan ioctl: add PFN ZERO test cases (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/maintainer-profile: update for mm-new tree (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: don't hold kdamond_lock in before_terminate() (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: use DAMON core API damon_is_running() (Rafael Aquini) [RHEL-145695]
  - samples/damon/mtier: rename to have damon_sample_ prefix (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: rename to have damon_sample_ prefix (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: rename to have damon_sample_ prefix (Rafael Aquini) [RHEL-145695]
  - ext4: support uncached buffered I/O (Rafael Aquini) [RHEL-145695]
  - mm/pagemap: add write_begin_get_folio() helper function (Rafael Aquini) [RHEL-145695]
  - fs: change write_begin/write_end interface to take struct kiocb * (Rafael Aquini) [RHEL-145695]
  - mm/damon/reclaim: use parameter context correctly (Rafael Aquini) [RHEL-145695]
  - mm/damon/lru_sort: reset enabled when DAMON start failed (Rafael Aquini) [RHEL-145695]
  - mm/damon/reclaim: reset enabled when DAMON start failed (Rafael Aquini) [RHEL-145695]
  - samples/damon/mtier: support boot time enable setup (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: fix boot time enable crash (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: fix boot time enable handling (Rafael Aquini) [RHEL-145695]
  - mm/damon: add trace event for effective size quota (Rafael Aquini) [RHEL-145695]
  - mm/damon: add trace event for auto-tuned monitoring intervals (Rafael Aquini) [RHEL-145695]
  - khugepaged: reduce race probability between migration and khugepaged (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: provide single balloon_page_insert() and balloon_mapping_gfp_mask() (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: "movable_ops" doc updates (Rafael Aquini) [RHEL-145695]
  - docs/mm: convert from "Non-LRU page migration" to "movable_ops page migration" (Rafael Aquini) [RHEL-145695]
  - mm: rename PAGE_MAPPING_* to FOLIO_MAPPING_* (Rafael Aquini) [RHEL-145695]
  - mm: simplify folio_expected_ref_count() (Rafael Aquini) [RHEL-145695]
  - mm/page-flags: remove folio_mapping_flags() (Rafael Aquini) [RHEL-145695]
  - mm/page-alloc: remove PageMappingFlags() (Rafael Aquini) [RHEL-145695]
  - mm/page-flags: rename PAGE_MAPPING_MOVABLE to PAGE_MAPPING_ANON_KSM (Rafael Aquini) [RHEL-145695]
  - mm: rename PG_isolated to PG_movable_ops_isolated (Rafael Aquini) [RHEL-145695]
  - mm: convert "movable" flag in page->mapping to a page flag (Rafael Aquini) [RHEL-145695]
  - mm: stop storing migration_ops in page->mapping (Rafael Aquini) [RHEL-145695]
  - mm: remove __folio_test_movable() (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: drop __folio_test_movable() check for large folios (Rafael Aquini) [RHEL-145695]
  - mm: rename __PageMovable() to page_has_movable_ops() (Rafael Aquini) [RHEL-145695]
  - mm/migration: remove PageMovable() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: remove __ClearPageMovable() (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: stop using __ClearPageMovable() (Rafael Aquini) [RHEL-145695]
  - mm/zsmalloc: stop using __ClearPageMovable() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: move movable_ops page handling out of move_to_new_folio() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: remove folio_test_movable() and folio_movable_ops() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: factor out movable_ops page handling into migrate_movable_ops_page() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: rename putback_movable_folio() to putback_movable_ops_page() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: rename isolate_movable_page() to isolate_movable_ops_page() (Rafael Aquini) [RHEL-145695]
  - mm/zsmalloc: make PageZsmalloc() sticky until the page is freed (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: make PageOffline sticky until the page is freed (Rafael Aquini) [RHEL-145695]
  - mm/page_alloc: let page freeing clear any set page type (Rafael Aquini) [RHEL-145695]
  - mm/zsmalloc: drop PageIsolated() related VM_BUG_ONs (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: we cannot have isolated pages in the balloon list (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: add mremap() unfaulted/faulted test cases (Rafael Aquini) [RHEL-145695]
  - cma: move memory allocation to a helper function (Rafael Aquini) [RHEL-145695]
  - cma: split reservation of fixed area into a helper function (Rafael Aquini) [RHEL-145695]
  - cma: move __cma_declare_contiguous_nid() before its usage (Rafael Aquini) [RHEL-145695]
  - mm: remove outdated filename comment in percpu-stats.c (Rafael Aquini) [RHEL-145695]
  - mm: fix spelling issue in swap.h (Rafael Aquini) [RHEL-145695]
  - mm/cma: use str_plural() in cma_declare_contiguous_multi() (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: drop unlikelys from hugetlb_fault (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: drop obsolete comment about non-present pte and second faults (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: rename anon_rmap to new_anon_folio and make it boolean (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: sort out folio locking in the faulting path (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: change mechanism to detect a COW on private mapping (Rafael Aquini) [RHEL-145695]
  - mm/debug_vm_pgtable: use a swp_entry_t input value for swap tests (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: use str_plural() in report_hugepages() (Rafael Aquini) [RHEL-145695]
  - mm/percpu: prevent concurrency problem for pcpu_nr_populated read with spin lock (Rafael Aquini) [RHEL-145695]
  - mm: deduplicate mm_get_unmapped_area() (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: remove prepare_hugepage_range() (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: remove migratetype parameter from more functions (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: remove migratetype from undo_isolate_page_range() (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: remove migratetype from move_freepages_block_isolate() (Rafael Aquini) [RHEL-145695]
  - mm/page_alloc: add support for initializing pageblock as isolated (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: make page isolation a standalone bit (Rafael Aquini) [RHEL-145695]
  - mm/page_alloc: pageblock flags functions clean up (Rafael Aquini) [RHEL-145695]
  - mm,memory_hotplug: drop status_change_nid parameter from memory_notify (Rafael Aquini) [RHEL-145695]
  - mm,page_ext: derive the node from the pfn (Rafael Aquini) [RHEL-145695]
  - mm,mempolicy: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - kernel,cpuset: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - drivers,hmat: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - drivers,cxl: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - mm,memory-tiers: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - mm,slub: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - mm,memory_hotplug: implement numa node notifier (Rafael Aquini) [RHEL-145695]
  - mm,memory_hotplug: remove status_change_nid_normal and update documentation (Rafael Aquini) [RHEL-145695]
  - mm,slub: do not special case N_NORMAL nodes for slab_nodes (Rafael Aquini) [RHEL-145695]
  - mm, madvise: use standard madvise locking in madvise_set_anon_name() (Rafael Aquini) [RHEL-145695]
  - mm, madvise: move madvise_set_anon_name() down the file (Rafael Aquini) [RHEL-145695]
  - mm, madvise: extract mm code from prctl_set_vma() to mm/madvise.c (Rafael Aquini) [RHEL-145695]
  - mm, madvise: simplify anon_name handling (Rafael Aquini) [RHEL-145695]
  - mm/madvise: eliminate very confusing manipulation of prev VMA (Rafael Aquini) [RHEL-145695]
  - mm/madvise: thread all madvise state through madv_behavior (Rafael Aquini) [RHEL-145695]
  - mm/madvise: thread VMA range state through madvise_behavior (Rafael Aquini) [RHEL-145695]
  - mm/madvise: thread mm_struct through madvise_behavior (Rafael Aquini) [RHEL-145695]
  - mm/madvise: remove the visitor pattern and thread anon_vma state (Rafael Aquini) [RHEL-145695]
  - selftests/mm: remove duplicate .gitignore entries (Rafael Aquini) [RHEL-145695]
  - mm: unexport globally copy_to_kernel_nofault (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: decouple from damon_ops_id (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: decouple from damos_filter_type (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: decouple from damos_wmark_metric (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: decouple from damos_action (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: decouple from damos_quota_goal_metric (Rafael Aquini) [RHEL-145695]
  - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (Rafael Aquini) [RHEL-145695] {CVE-2025-38681}
  - selftests/mm: reduce uffd-unit-test poison test to minimum (Rafael Aquini) [RHEL-145695]
  - mm/percpu: conditionally define _shared_alloc_tag via CONFIG_ARCH_MODULE_NEEDS_WEAK_PER_CPU (Rafael Aquini) [RHEL-145695]
  - mm/memfd: reserve hugetlb folios before allocation (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: make hugetlb_reserve_pages() return nr of entries updated (Rafael Aquini) [RHEL-145695]
  - mm: update architecture and driver code to use vm_flags_t (Rafael Aquini) [RHEL-145695]
  - mm: update core kernel code to use vm_flags_t consistently (Rafael Aquini) [RHEL-145695]
  - mm: change vm_get_page_prot() to accept vm_flags_t argument (Rafael Aquini) [RHEL-145695]
  - Revert "mm: make alloc_demote_folio externally invokable for migration" (Rafael Aquini) [RHEL-145695]
  - Revert "mm: rename alloc_demote_folio to alloc_migrate_folio" (Rafael Aquini) [RHEL-145695]
  - mm/damon/paddr: use alloc_migartion_target() with no migration fallback nodemask (Rafael Aquini) [RHEL-145695]
  - mm: huge_memory: fix the check for allowed huge orders in shmem (Rafael Aquini) [RHEL-145695]
  - selftest/mm: skip if fallocate() is unsupported in gup_longterm (Rafael Aquini) [RHEL-145695]
  - highmem: remove a use of folio->page (Rafael Aquini) [RHEL-145695]
  - secretmem: remove uses of struct page (Rafael Aquini) [RHEL-145695]
  - selftests: mm: add shmem collapse as a default test item (Rafael Aquini) [RHEL-145695]
  - selftests: khugepaged: fix the shmem collapse failure (Rafael Aquini) [RHEL-145695]
  - mm: use folio_expected_ref_count() helper for reference counting (Rafael Aquini) [RHEL-145695]
  - mm: madvise: use per_vma lock for MADV_FREE (Rafael Aquini) [RHEL-145695]
  - mm: optimize mremap() by PTE batching (Rafael Aquini) [RHEL-145695]
  - mm: call pointers to ptes as ptep (Rafael Aquini) [RHEL-145695]
  - gup: optimize longterm pin_user_pages() for large folio (Rafael Aquini) [RHEL-145695]
  - mm/pagewalk: split walk_page_range_novma() into kernel/user parts (Rafael Aquini) [RHEL-145695]
  - mm/memfd: clarify error handling labels in memfd_create() (Rafael Aquini) [RHEL-145695]
  - selftests/mm: check for YAMA ptrace_scope configuraiton before modifying it (Rafael Aquini) [RHEL-145695]
  - selftests/mm: add messages about test errors to the cow tests (Rafael Aquini) [RHEL-145695]
  - selftests/mm: don't compare return values to in cow (Rafael Aquini) [RHEL-145695]
  - selftests/mm: convert some cow error reports to ksft_perror() (Rafael Aquini) [RHEL-145695]
  - kselftest/mm: clarify errors for pipe() (Rafael Aquini) [RHEL-145695]
  - mm/filemap: allow arch to request folio size for exec memory (Rafael Aquini) [RHEL-145695]
  - mm/readahead: store folio order in struct file_ra_state (Rafael Aquini) [RHEL-145695]
  - mm/readahead: make space in struct file_ra_state (Rafael Aquini) [RHEL-145695]
  - mm/readahead: terminate async readahead on natural boundary (Rafael Aquini) [RHEL-145695]
  - mm/readahead: honour new_order in page_cache_ra_order() (Rafael Aquini) [RHEL-145695]
  - mm/mempolicy: skip unnecessary synchronize_rcu() (Rafael Aquini) [RHEL-145695]
  - mm: use per_vma lock for MADV_DONTNEED (Rafael Aquini) [RHEL-145695]
  - userfaultfd: remove UFFD_CLOEXEC, UFFD_NONBLOCK, and UFFD_FLAGS_SET (Rafael Aquini) [RHEL-145695]
  - userfaultfd: remove (VM_)BUG_ON()s (Rafael Aquini) [RHEL-145695]
  - userfaultfd: prevent unregistering VMAs through a different userfaultfd (Rafael Aquini) [RHEL-145695]
  - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-145695]
  - drivers/base/node: rename __register_one_node() to register_one_node() (Rafael Aquini) [RHEL-145695]
  - drivers/base/node: rename register_memory_blocks_under_node() and remove context argument (Rafael Aquini) [RHEL-145695]
  - drivers/base/node: remove register_memory_blocks_under_node() function call from register_one_node (Rafael Aquini) [RHEL-145695]
  - drivers/base/node: remove register_mem_block_under_node_early() (Rafael Aquini) [RHEL-145695]
  - readahead: fix return value of page_cache_next_miss() when no hole is found (Rafael Aquini) [RHEL-145695]
  - mm/cma: pair the trace_cma_alloc_start/finish (Rafael Aquini) [RHEL-145695]
  - mm: madvise: use walk_page_range_vma() instead of walk_page_range() (Rafael Aquini) [RHEL-145695]
  - mm: stop passing a writeback_control structure to swap_writeout (Rafael Aquini) [RHEL-145695]
  - mm: stop passing a writeback_control structure to __swap_writepage (Rafael Aquini) [RHEL-145695]
  - mm: tidy up swap_writeout (Rafael Aquini) [RHEL-145695]
  - mm: stop passing a writeback_control structure to shmem_writeout (Rafael Aquini) [RHEL-145695]
  - mm: split out a writeout helper from pageout (Rafael Aquini) [RHEL-145695]
  - mm, list_lru: refactor the locking code (Rafael Aquini) [RHEL-145695]
  - mm: rename CONFIG_PAGE_BLOCK_ORDER to CONFIG_PAGE_BLOCK_MAX_ORDER (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon: add DAMON_STAT usage document (Rafael Aquini) [RHEL-145695]
  - mm/damon/stat: calculate and expose idle time percentiles (Rafael Aquini) [RHEL-145695]
  - mm/damon/stat: calculate and expose estimated memory bandwidth (Rafael Aquini) [RHEL-145695]
  - mm/damon: introduce DAMON_STAT module (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: convert hugetlb_change_protection() to folios (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: add VMA merge tests for KSM merge (Rafael Aquini) [RHEL-145695]
  - mm: prevent KSM from breaking VMA merging for new VMAs (Rafael Aquini) [RHEL-145695]
  - mm: ksm: refer to special VMAs via VM_SPECIAL in ksm_compatible() (Rafael Aquini) [RHEL-145695]
  - mm: ksm: have KSM VMA checks not require a VMA pointer (Rafael Aquini) [RHEL-145695]
  - mm: vmscan: apply proportional reclaim pressure for memcg when MGLRU is enabled (Rafael Aquini) [RHEL-145695]
  - samples/damon: fix damon sample mtier for start failure (Rafael Aquini) [RHEL-145695]
  - samples/damon: fix damon sample wsse for start failure (Rafael Aquini) [RHEL-145695]
  - samples/damon: fix damon sample prcl for start failure (Rafael Aquini) [RHEL-145695]
  - vmscan: don't bother with debugfs_real_fops() (Rafael Aquini) [RHEL-145695]
  - docs: dma-api: remove remnants of PCI DMA API (Rafael Aquini) [RHEL-145695]
  - docs: dma-api: replace consistent with coherent (Rafael Aquini) [RHEL-145695]
  - docs: dma-api: use "DMA API" consistently throughout the document (Rafael Aquini) [RHEL-145695]
  - fs: Remove three arguments from block_write_end() (Rafael Aquini) [RHEL-145695]
  - book3s64/radix : Optimize vmemmap start alignment (Rafael Aquini) [RHEL-145695]
  - book3s64/radix : Handle error conditions properly in radix_vmemmap_populate (Rafael Aquini) [RHEL-145695]
  - slub: Fix a documentation build error for krealloc() (Rafael Aquini) [RHEL-145695]
  - slab: Add SL_pfmemalloc flag (Rafael Aquini) [RHEL-145695]
  - slab: Add SL_partial flag (Rafael Aquini) [RHEL-145695]
  - slab: Rename slab->__page_flags to slab->flags (Rafael Aquini) [RHEL-145695]
  - doc: Move SLUB documentation to the admin guide (Rafael Aquini) [RHEL-145695]
  - memcg: cgroup: call css_rstat_updated irrespective of in_nmi() (Rafael Aquini) [RHEL-145695]
  - fs: convert simple use of generic_file_*_mmap() to .mmap_prepare() (Rafael Aquini) [RHEL-145695]
  - mm/filemap: introduce generic_file_*_mmap_prepare() helpers (Rafael Aquini) [RHEL-145695]
  - fs/xfs: transition from deprecated .mmap hook to .mmap_prepare (Rafael Aquini) [RHEL-145695]
  - fs/ext4: transition from deprecated .mmap hook to .mmap_prepare (Rafael Aquini) [RHEL-145695]
  - fs/dax: make it possible to check dev dax support without a VMA (Rafael Aquini) [RHEL-145695]
  - fs: consistently use can_mmap_file() helper (Rafael Aquini) [RHEL-145695]
  - mm/nommu: use file_has_valid_mmap_hooks() helper (Rafael Aquini) [RHEL-145695]
  - sysfs: constify internal references to 'struct bin_attribute' (Rafael Aquini) [RHEL-145695]
  - const_structs.checkpatch: add bin_attribute (Rafael Aquini) [RHEL-145695]
  - slab: Decouple slab_debug and no_hash_pointers (Rafael Aquini) [RHEL-145695]
  - arm64/mm: Close theoretical race where stale TLB entry remains valid (Rafael Aquini) [RHEL-145695]
  - mm: shmem: only remove inode from swaplist when it's swapped page count is 0 (Rafael Aquini) [RHEL-145695]
  - samples/damon: implement a DAMON module for memory tiering (Rafael Aquini) [RHEL-145695]
  - Docs/ABI/damon: document nid file (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: document 'nid' file (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: fix a comment typo (Rafael Aquini) [RHEL-145695]
  - docs/mm: Physical Memory: Populate the "Zones" section (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: update for {core,ops}_filters directories (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: add intervals_goal directory on the hierarchy (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: document for intervals auto-tuning (Rafael Aquini) [RHEL-145695]
  - samples/damon: a typo in the kconfig - sameple (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: categorize DAMOS filter types based on handling layer (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: clarify handling layer based filters evaluation sequence (Rafael Aquini) [RHEL-145695]
  - Docs/damon: move DAMOS filter type names and meaning to design doc (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: document hugepage_size filter (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: fix typo on DAMOS filters usage doc link (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: document hugepage_size filter type (Rafael Aquini) [RHEL-145695]
  - mm/damon: explain "effective quota" on kernel-doc comment (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/start: update snapshot example (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: fix and add missing DAMOS filter sysfs files on files hierarchy (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon: add an example monitoring intervals tuning (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: add monitoring parameters tuning guide (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: implement schemes setup (Rafael Aquini) [RHEL-145695]
  - samples/damon: introduce a skeleton of a smaple DAMON module for proactive reclamation (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: implement working set size estimation and logging (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: start and stop DAMON as the user requests (Rafael Aquini) [RHEL-145695]
  - samples: add a skeleton of a sample DAMON module for working set size estimation (Rafael Aquini) [RHEL-145695]
  - cxgb4: flower: add support for fragmentation (CKI Backport Bot) [RHEL-128835]


author: Ian Mullins <imullins@redhat.com> - 0.1.16-1
changelog:
  - Bump version to 0.1.16
  - Add org.osbuild-auto.unzboot stage
  - Add org.osbuild-auto.dtb.set-node stage


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


