[continued from previous message] 
  
      - drm/gem: Fix race in drm_gem_handle_create_tail() 
      - drm/xe/bmg: fix compressed VRAM handling 
      - Revert "drm/xe/xe2: Enable Indirect Ring State support for Xe2" 
      - usb: gadget: u_serial: Fix race condition in TTY wakeup 
      - Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io" 
      - drm/framebuffer: Acquire internal references on GEM handles 
      - drm/xe: Allocate PF queue size on pow2 boundary 
      - Revert "ACPI: battery: negate current when discharging" (Closes: 
 #1109344) 
      - Revert "PCI/ACPI: Fix allocated memory release on error in 
        pci_acpi_scan_root()" 
      - kallsyms: fix build without execinfo 
      - maple_tree: fix mt_destroy_walk() on root leaf node 
      - mm: fix the inaccurate memory statistics issue for users 
      - mm/vmalloc: leave lazy MMU mode on PTE mapping error 
      - lib/alloc_tag: do not acquire non-existent lock in 
 alloc_tag_top_users() 
      - [amd64] x86/rdrand: Disable RDSEED on AMD Cyan Skillfish 
      - [amd64] x86/mm: Disable hugetlb page table sharing on 32-bit 
      - [arm64] clk: scmi: Handle case where child clocks are initialized 
 before 
        their parents 
      - smb: server: make use of rdma_destroy_qp() 
      - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() 
      - erofs: fix to add missing tracepoint in erofs_read_folio() 
      - erofs: address D-cache aliasing 
      - [amd64] ASoC: Intel: sof-function-topology-lib: Print out the 
 unsupported 
        dmic count 
      - netlink: Fix rmem check in netlink_broadcast_deliver(). 
      - netlink: make sure we allow at least one dump skb 
      - netfs: Fix ref leak on inserted extra subreq in write retry 
      - wifi: cfg80211: fix S1G beacon head validation in nl80211 
      - wifi: zd1211rw: Fix potential NULL pointer dereference in 
        zd_mac_tx_to_dev() 
      - drm/tegra: nvdec: Fix dma_alloc_coherent error check 
      - md/raid1: Fix stack memory use after return in raid1_reshape 
      - raid10: cleanup memleak at raid10_make_request 
      - wifi: mac80211: correctly identify S1G short beacon 
      - wifi: mac80211: fix non-transmitted BSSID profile search 
      - wifi: rt2x00: fix remove callback type mismatch 
      - drm/nouveau/gsp: fix potential leak of memory used during acpi init 
      - wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() 
      - nbd: fix uaf in nbd_genl_connect() error path 
      - drm/xe/pf: Clear all LMTT pages on alloc 
      - erofs: free pclusters if no cached folio is attached 
      - erofs: get rid of `z_erofs_next_pcluster_t` 
      - erofs: tidy up zdata.c 
      - erofs: refine readahead tracepoint 
      - erofs: fix to add missing tracepoint in erofs_readahead() 
      - netfilter: flowtable: account for Ethernet header in nf_f 
 ow_pppoe_proto() 
      - net: appletalk: Fix device refcount leak in atrtr_create() 
      - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof 
      - net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits 
      - net: phy: microchip: limit 100M workaround to link-down events on 
 LAN88xx 
      - drm/xe/pm: Correct comment of xe_pm_set_vram_threshold() 
      - can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx 
 message to 
        debug level 
      - net/mlx5e: Fix race between DIM disable and net_dim() 
      - net/mlx5e: Add new prio for promiscuous mode 
      - net: ll_temac: Fix missing tx_pending check in 
 ethtools_set_ringparam() 
      - bnxt_en: Fix DCB ETS validation 
      - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT 
      - ublk: sanity check add_dev input for underflow 
      - atm: idt77252: Add missing `dma_map_error()` 
      - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. 
      - [amd64] ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606 
      - io_uring: make fallocate be hashed work 
      - [amd64] ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic 
      - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 
      - ALSA: hda/realtek: Add quirks for some Clevo laptops 
      - net: usb: qmi_wwan: add SIMCom 8230C composition 
      - driver: bluetooth: hci_qca:fix unable to load the BT driver 
      - HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2 
      - net: mana: Record doorbell physical address in PF mode 
      - btrfs: fix assertion when building free space tree 
      - vt: add missing notification when switching back to text mode 
      - bpf: Adjust free target to avoid global starvation of LRU map 
      - [riscv64] vdso: Exclude .rodata from the PT_DYNAMIC segment 
      - HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY 
      - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras 
      - HID: nintendo: avoid bluetooth suspend/resume stalls 
      - erofs: fix rare pcluster memory leak after unmounting 
      - net: wangxun: revert the adjustment of the IRQ vector sequence 
      - kasan: remove kasan_find_vm_area() to prevent possible deadlock 
      - ksmbd: fix potential use-after-free in oplock/lease break ack 
      - [arm64] Filter out SME hwcaps when FEAT_SME isn't implemented 
      - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() 
        (CVE-2025-37984) 
      - rseq: Fix segfault on registration when rseq_cs is non-zero 
        (CVE-2025-38067) 
      - [amd64] KVM: SVM: Set synthesized TSA CPUID flags 
      https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.40 
      - USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition 
      - USB: serial: option: add Foxconn T99W640 
      - USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI 
      - usb: musb: fix gadget state on disconnect 
      - [arm*] usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY 
      - usb: gadget: configfs: Fix OOB read on empty string write 
      - [armhf] i2c: stm32: fix the device used for the DMA map 
      - [armhf] i2c: stm32f7: unmap DMA mapped buffer 
      - [amd64] thunderbolt: Fix wake on connect at runtime 
      - [amd64] thunderbolt: Fix bit masking in tb_dp_port_set_hops() 
      - Revert "staging: vchiq_arm: Create keep-alive thread during probe" 
      - nvmem: imx-ocotp: fix MAC address byte length 
      - nvmem: layouts: u-boot-env: remove crc32 endianness conversion 
      - Input: xpad - set correct controller type for Acer NGR200 
      - pch_uart: Fix dma_sync_sg_for_device() nents value 
      - spi: Add check for 8-bit transfer with 8 IO mode support 
      - dm-bufio: fix sched in atomic context 
      - HID: core: ensure the allocated report buffer can contain the 
 reserved 
        report ID 
      - HID: core: ensure __hid_request reserves the report ID as the first 
 byte 
      - HID: core: do not bypass hid_hw_raw_request 
      - tracing/probes: Avoid using params uninitialized in parse_btf_arg() 
      - tracing: Add down_write(trace_event_sem) when adding trace event 
      - tracing/osnoise: Fix crash in timerlat_dump_stack() 
      - drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume 
      - drm/amdgpu: Increase reset counter only on success 
      - drm/amd/display: Disable CRTC degamma LUT for DCN401 
      - drm/amd/display: Free memory allocation 
      - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx 
      - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS 
      - io_uring/poll: fix POLLERR handling 
      - mptcp: make fallback action and fallback decision atomic 
      - mptcp: plug races between subflow fail and subflow creation 
  
 [continued in next message] 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)