[continued from previous message] 
  
      - smb: client: fix race condition in negotiate timeout by using more 
 precise 
        timing 
      - [arm64] drm/msm: Fix a fence leak in submit error path 
      - [arm64] drm/msm: Fix another leak in the submit error path 
      - ALSA: sb: Don't allow changing the DMA mode during operations 
      - ALSA: sb: Force to disable DMAs once when DMA mode is changed 
      - ata: libata-acpi: Do not assume 40 wire cable if no devices are 
 enabled 
      - ata: pata_cs5536: fix build on 32-bit UML 
      - [powerpc*] Fix struct termio related ioctl macros 
      - [x86] ASoC: amd: yc: update quirk data for HP Victus 
      - scsi: target: Fix NULL pointer dereference in 
        core_scsi3_decode_spec_i_port() 
      - aoe: defer rexmit timer downdev work to workqueue 
      - wifi: mac80211: drop invalid source address OCB frames 
      - wifi: ath6kl: remove WARN on bad firmware input 
      - ACPICA: Refuse to evaluate a method if arguments are missing 
      - mtd: spinand: fix memory leak of ECC engine conf 
      - rcu: Return early if callback is not specified 
      - virtio-net: ensure the received length does not exceed allocated size 
      - [arm64] drm/v3d: Disable interrupts before resetting the GPU 
      - NFSv4/flexfiles: Fix handling of NFS level errors in I/O 
      - btrfs: use btrfs_record_snapshot_destroy() during rmdir 
      - [arm64] dpaa2-eth: fix xdp_rxq_info leak 
      - [x86] platform/x86: think-lmi: Fix class device unregistration 
      - [x86] platform/x86: dell-wmi-sysman: Fix class device unregistration 
      - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect 
      - xhci: dbctty: disable ECHO flag by default 
      - xhci: dbc: Flush queued requests before stopping dbc 
      - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS 
      - usb: cdnsp: do not disable slot for disabled slot 
      - dma-buf: fix timeout handling in dma_resv_wait_timeout v2 
      - i2c/designware: Fix an initialization issue 
      - Logitech C-270 even more broken 
      - [x86] platform/x86: think-lmi: Create ksets consecutively 
      - [x86] platform/x86: think-lmi: Fix kobject cleanup 
      - usb: typec: displayport: Fix potential deadlock 
      - [amd64] Mitigations Transitive Scheduler Attacks (TSA) (CVE-2024- 
 36350, 
        CVE-2024-36357) 
        + x86/bugs: Rename MDS machinery to something more generic 
        + x86/bugs: Add a Transient Scheduler Attacks mitigation 
        + KVM: SVM: Advertise TSA CPUID bits to guests 
        + x86/process: Move the buffer clearing before MONITOR 
      https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.145 
      - [amd64] x86/CPU/AMD: Properly check the TSA microcode 
      https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.146 
      - [x86] platform/x86: ideapad-laptop: use usleep_range() for EC polling 
      - perf: Revert to requiring CAP_SYS_ADMIN for uprobes 
      - Bluetooth: hci_sync: Fix not disabling advertising instance 
      - fix proc_sys_compare() handling of in-lookup dentries 
      - netlink: Fix wraparounds of sk->sk_rmem_alloc. 
      - tipc: Fix use-after-free in tipc_conn_close(). 
      - vsock: Fix transport_{g2h,h2g} TOCTOU 
      - vsock: Fix transport_* TOCTOU 
      - vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also ` 
 ransport_local` 
      - net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap 
      - net: phy: smsc: Fix link failure in forced mode with Auto-MDIX 
      - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). 
      - atm: clip: Fix memory leak of struct clip_vcc. 
      - atm: clip: Fix infinite recursive call of clip_push(). 
      - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() 
      - net/sched: Abort __tc_modify_qdisc if parent class does not exist 
      - maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() 
      - rxrpc: Fix oops due to non-existence of prealloc backlog struct 
      - [x86] boot: Compile boot code with -std=gnu11 too 
      - ipmi:msghandler: Fix potential memory corruption in 
 ipmi_create_user() 
      - [x86] mce/amd: Fix threshold limit reset 
      - [x86] mce: Don't remove sysfs if thresholding sysfs init fails 
      - [x86] mce: Make sure CMCI banks are cleared during shutdown on Intel 
      - [x86] KVM: x86/xen: Allow 'out of range' event channel ports in IRQ 
        routing table. 
      - [x86] KVM: SVM: Reject SEV{-ES} intra host migration if vCPU 
 creation is 
        in-flight 
      - gre: Fix IPv6 multicast route creation. (Closes: #1108430) 
      - md/md-bitmap: fix GPF in bitmap_get_stats() (Closes: #1109734) 
      - [arm64] pinctrl: qcom: msm: mark certain pins as invalid for 
 interrupts 
      - wifi: prevent A-MSDU attacks in mesh networks (CVE-2025-27558) 
      - drm/sched: Increment job count before swapping tail spsc queue 
      - drm/ttm: fix error handling in ttm_buffer_object_transfer 
      - drm/gem: Fix race in drm_gem_handle_create_tail() 
      - usb: gadget: u_serial: Fix race condition in TTY wakeup 
      - Revert "ACPI: battery: negate current when discharging" 
      - kallsyms: fix build without execinfo 
      - maple_tree: fix mt_destroy_walk() on root leaf node 
      - pwm: mediatek: Ensure to disable clocks in error path 
      - smb: server: make use of rdma_destroy_qp() 
      - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() 
      - netlink: Fix rmem check in netlink_broadcast_deliver(). 
      - netlink: make sure we allow at least one dump skb 
      - fs: export anon_inode_make_secure_inode() and fix secretmem LSM 
 bypass 
      - btrfs: propagate last_unlink_trans earlier when doing a rmdir 
      - xhci: Allow RPM on the USB controller (1022:43f7) by default 
      - usb: xhci: quirk for data loss in ISOC transfers 
      - Input: xpad - support Acer NGR 200 Controller 
      - [arm64,armhf] usb: dwc3: Abort suspend on soft disconnect failure 
      - wifi: zd1211rw: Fix potential NULL pointer dereference in 
        zd_mac_tx_to_dev() 
      - [arm64,armhf] drm/tegra: nvdec: Fix dma_alloc_coherent error check 
      - md/raid1: Fix stack memory use after return in raid1_reshape 
      - raid10: cleanup memleak at raid10_make_request 
      - nbd: fix uaf in nbd_genl_connect() error path 
      - erofs: remove the member readahead from struct z_erofs_de 
 ompress_frontend 
      - erofs: clean up z_erofs_pcluster_readmore() 
      - erofs: allocate extra bvec pages directly instead of retrying 
      - erofs: avoid on-stack pagepool directly passed by arguments 
      - erofs: adapt folios for z_erofs_read_folio() 
      - erofs: fix to add missing tracepoint in erofs_read_folio() 
      - netfilter: flowtable: account for Ethernet header in nf_f 
 ow_pppoe_proto() 
      - net: appletalk: Fix device refcount leak in atrtr_create() 
      - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof 
      - net: phy: microchip: limit 100M workaround to link-down events on 
 LAN88xx 
      - can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx 
 message to 
        debug level 
      - net: ll_temac: Fix missing tx_pending check in 
 ethtools_set_ringparam() 
      - bnxt_en: Fix DCB ETS validation 
      - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT 
      - atm: idt77252: Add missing `dma_map_error()` 
      - [x86] ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic 
      - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 
      - net: usb: qmi_wwan: add SIMCom 8230C composition 
      - HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2 
  
 [continued in next message] 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)