Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12272)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Oracle Linux Security Advisory ELSA-2024-12272.
##

include('compat.inc');

if (description)
{
  script_id(193120);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/05/27");

  script_cve_id("CVE-2024-2201");

  script_name(english:"Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12272)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Oracle Linux host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the
ELSA-2024-12272 advisory.

    [5.15.0-205.149.5.1]
    - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201}
    - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201}
    - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201}
    - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201}
    - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201}
    - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384802]
    {CVE-2024-2201}
    - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201}
    - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384802]
    {CVE-2024-2201}
    - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384802]
    {CVE-2024-2201}
    - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug:
    36384802]  {CVE-2024-2201}
    - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384802]  {CVE-2024-2201}
    - x86/cpu: Support AMD Automatic IBRS (Kim Phillips)  [Orabug: 36384802]  {CVE-2024-2201}
    - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36384802]  {CVE-2024-2201}
    - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384802]  {CVE-2024-2201}

    [5.15.0-205.149.5]
    - uek-rpm: Bluefield 3: enable lockdown mode for secure boot (Dave Kleikamp)  [Orabug: 36318788]
    - Documentation/x86: Update split lock documentation (Tony Luck)  [Orabug: 36298291]
    - x86/split_lock: Add sysctl to control the misery mode (Guilherme G. Piccoli)  [Orabug: 36298291]
    - x86/split-lock: Remove unused TIF_SLD bit (Tony Luck)  [Orabug: 36298291]
    - x86/split_lock: Make life miserable for split lockers (Tony Luck)  [Orabug: 36298291]

    [5.15.0-205.149.4]
    - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)
    - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)
    - ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails (Fedor Pchelkin)
    - afs: Fix endless loop in directory parsing (David Howells)
    - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (Dan Carpenter)
    - Revert 'drm/bridge: lt8912b: Register and attach our DSI device at probe' (Max Krummenacher)
    - net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)
    - usb: dwc3: gadget: Don't disconnect if not started (Thinh Nguyen)
    - platform/x86: intel-vbtn: Stop calling 'VBDL' from notify_handler (Hans de Goede)
    - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587408]
    - cifs: fix mid leak during reconnection after timeout threshold (Shyam Prasad N)  [Orabug: 36123597]
    - vfio/mlx5: Activate the chunk mode functionality (Yishai Hadas)  [Orabug: 36298327]
    - vfio/mlx5: Add support for READING in chunk mode (Yishai Hadas)  [Orabug: 36298327]
    - vfio/mlx5: Add support for SAVING in chunk mode (Yishai Hadas)  [Orabug: 36298327]
    - vfio/mlx5: Pre-allocate chunks for the STOP_COPY phase (Yishai Hadas)  [Orabug: 36298327]
    - vfio/mlx5: Rename some stuff to match chunk mode (Yishai Hadas)  [Orabug: 36298327]
    - vfio/mlx5: Enable querying state size which is > 4GB (Yishai Hadas)  [Orabug: 36298327]
    - vfio/mlx5: Refactor the SAVE callback to activate a work only upon an error (Yishai Hadas)  [Orabug:
    36298327]
    - vfio/mlx5: Wake up the reader post of disabling the SAVING migration file (Yishai Hadas)  [Orabug:
    36298327]
    - net/mlx5: Introduce ifc bits for migration in a chunk mode (Yishai Hadas)  [Orabug: 36298327]
    - af_unix: Drop oob_skb ref before purging queue in GC. (Kuniyuki Iwashima)  [Orabug: 36375407]
    - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)  [Orabug: 36379479]

    [5.15.0-205.149.3]
    - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248460]
    - platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace events (Shravan Kumar Ramani)  [Orabug:
    36299543]
    - platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx TmFIFO is full (Liming Sun)  [Orabug:
    36299543]
    - platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (Jules Irenge)  [Orabug: 36299543]
    - power: reset: pwr-mlxbf: support graceful reboot instead of emergency reset (Asmaa Mnebhi)  [Orabug:
    36299543]
    - platform/mellanox: tmfifo: fix kernel-doc warnings (Randy Dunlap)  [Orabug: 36299543]
    - platform/mellanox: mlxbf-tmfifo: Convert to platform remove callback returning void (Uwe Kleine-Konig)
    [Orabug: 36299543]
    - platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (Shravan Kumar Ramani)  [Orabug: 36299543]
    - pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency (David Thompson)  [Orabug: 36299543]
    - pinctrl: mlxbf3: Remove gpio_disable_free() (Asmaa Mnebhi)  [Orabug: 36299543]
    - gpio: mlxbf3: use capital 'OR' for multiple licenses in SPDX (Krzysztof Kozlowski)  [Orabug: 36299543]
    - pinctrl: use capital 'OR' for multiple licenses in SPDX (Krzysztof Kozlowski)  [Orabug: 36299543]
    - gpio: mlxbf3: Support add_pin_ranges() (Asmaa Mnebhi)  [Orabug: 36299543]
    - uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36303821]
    - uek-rpm: Update the aarch64 kABI files for new symbol (Yifei Liu)  [Orabug: 36323808]
    - arm64: Minimize tlb flush due to vttbr writes on AmpereOne (Ganapatrao Kulkarni)  [Orabug: 36349790]

    [5.15.0-205.149.2]
    - LTS version: v5.15.149 (Vijayendra Suman)
    - usb: dwc3: gadget: Ignore End Transfer delay on teardown (Thinh Nguyen)
    - media: Revert 'media: rkisp1: Drop IRQF_SHARED' (Tomi Valkeinen)
    - usb: dwc3: gadget: Execute gadget stop after halting the controller (Wesley Cheng)
    - usb: dwc3: gadget: Don't delay End Transfer on delayed_status (Thinh Nguyen)
    - staging: fbtft: core: set smem_len before fb_deferred_io_init call (Peter Suti)
    - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Kees Cook)
    - fs/ntfs3: Add null pointer checks (Konstantin Komarov)
    - net: bcmgenet: Fix EEE implementation (Florian Fainelli)
    - drm/msm/dsi: Enable runtime PM (Konrad Dybcio)
    - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson)
    - dm: limit the number of targets and parameter size area (Mikulas Patocka)
    - nilfs2: replace WARN_ONs for invalid DAT metadata block requests (Ryusuke Konishi)
    - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi)
    - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds)
    - netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)
    - net: prevent mss overflow in skb_segment() (Eric Dumazet)
    - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range() (Davidlohr Bueso)
    - netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)
    - scripts/decode_stacktrace.sh: optionally use LLVM utilities (Carlos Llamas)
    - scripts: decode_stacktrace: demangle Rust symbols (Miguel Ojeda)
    - scripts/decode_stacktrace.sh: support old bash version (Schspa Shi)
    - fbdev: flush deferred IO before closing (Nam Cao)
    - fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() (Takashi Iwai)
    - fbdev: Fix invalid page access after closing deferred I/O devices (Takashi Iwai)
    - fbdev: Rename pagelist to pagereflist for deferred I/O (Thomas Zimmermann)
    - fbdev: Track deferred-I/O pages in pageref struct (Thomas Zimmermann)
    - fbdev: defio: fix the pagelist corruption (Chuansheng Liu)
    - fbdev: Don't sort deferred-I/O pages by default (Thomas Zimmermann)
    - fbdev/defio: Early-out if page is already enlisted (Thomas Zimmermann)
    - serial: 8250_exar: Set missing rs485_supported flag (Lino Sanfilippo)
    - serial: 8250_exar: Fill in rs485_supported (Ilpo Jarvinen)
    - usb: dwc3: gadget: Queue PM runtime idle on disconnect event (Wesley Cheng)
    - usb: dwc3: gadget: Handle EP0 request dequeuing properly (Wesley Cheng)
    - usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API (Wesley Cheng)
    - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (Wesley Cheng)
    - usb: dwc3: gadget: Submit endxfer command if delayed during disconnect (Wesley Cheng)
    - usb: dwc3: gadget: Force sending delayed status during soft disconnect (Wesley Cheng)
    - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (Mayank Rana)
    - usb: dwc3: gadget: Delay issuing End Transfer (Thinh Nguyen)
    - usb: dwc3: gadget: Only End Transfer for ep0 data phase (Thinh Nguyen)
    - usb: dwc3: ep0: Don't prepare beyond Setup stage (Thinh Nguyen)
    - usb: dwc3: gadget: Wait for ep0 xfers to complete during dequeue (Thinh Nguyen)
    - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init (Tianjia Zhang)
    - bus: moxtet: Add spi device table (Sjoerd Simons)
    - dma-buf: add dma_fence_timestamp helper (Christian Konig)
    - af_unix: Fix task hung while purging oob_skb in GC. (Kuniyuki Iwashima)
    - tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google))
    - pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio)
    - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel)
    - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Ziqi Zhao)
    - of: property: fix typo in io-channels (Nuno Sa)
    - mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE (Prakash Sangappa)
    - ceph: prevent use-after-free in encode_cap_msg() (Rishabh Dave)
    - net: ethernet: ti: cpsw_new: enable mac_managed_pm to fix mdio (Sinthu Raja)
    - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Alexandra Winter)
    - net: ethernet: ti: cpsw: enable mac_managed_pm to fix mdio (Sinthu Raja)
    - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update (Marc Zyngier)
    - irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger)
    - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() (Johannes Berg)
    - nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers)
    - nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio)
    - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked (Kim Phillips)
    - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)
    - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi)
    - ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu)
    - mmc: slot-gpio: Allow non-sleeping GPIO ro (Alexander Stein)
    - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl)
    - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (Aleksander Mazur)
    - powerpc/64: Set task pt_regs->link to the LR value on scv entry (Naveen N Rao)
    - serial: max310x: fail probe if clock crystal is unstable (Hugo Villeneuve)
    - serial: max310x: improve crystal stable clock detection (Hugo Villeneuve)
    - serial: max310x: set default value when reading clock ready bit (Hugo Villeneuve)
    - ring-buffer: Clean ring_buffer_poll_wait() error return (Vincent Donnefort)
    - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Souradeep Chakrabarti)
    - drm/prime: Support page array >= 4GB (Philip Yang)
    - media: rc: bpf attach/detach requires write permission (Sean Young)
    - iio: accel: bma400: Fix a compilation problem (Mario Limonciello)
    - iio: core: fix memleak in iio_device_register_sysfs (Dinghao Liu)
    - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (zhili.liu)
    - staging: iio: ad5933: fix type mismatch regression (David Schiller)
    - tracing: Fix wasted memory in saved_cmdlines logic (Steven Rostedt (Google))
    - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)
    - misc: fastrpc: Mark all sessions as invalid in cb_remove (Ekansh Gupta)
    - binder: signal epoll threads of self-work (Carlos Llamas)
    - ALSA: hda/cs8409: Suppress vmaster control for Dolphin models (Vitaly Rodionov)
    - ASoC: codecs: wcd938x: handle deferred probe (Krzysztof Kozlowski)
    - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (Edson Juliano Drosdeck)
    - xen-netback: properly sync TX responses (Jan Beulich)
    - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() (Nikita Zhandarovich)
    - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin)
    - kbuild: Fix changing ELF file type for output of gen_btf for big endian (Nathan Chancellor)
    - firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto)
    - lsm: fix the logic in security_inode_getsecctx() (Ondrej Mosnacek)
    - Revert 'drm/amd: flush any delayed gfxoff on suspend entry' (Mario Limonciello)
    - scsi: Revert 'scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock' (Lee Duncan)
    - mptcp: fix data re-injection from stale subflow (Paolo Abeni)
    - modpost: trim leading spaces when processing source files list (Radek Krejci)
    - i2c: i801: Fix block process call transactions (Jean Delvare)
    - i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit)
    - powerpc/kasan: Fix addr error caused by page alignment (Jiangfeng Xiao)
    - media: ir_toy: fix a memleak in irtoy_tx (Zhipeng Lu)
    - usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend (Uttkarsh Aggarwal)
    - usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu)
    - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum)
    - usb: ucsi_acpi: Fix command completion handling (Christian A. Ehrhardt)
    - iio: hid-sensor-als: Return 0 for HID_USAGE_SENSOR_TIME_TIMESTAMP (Srinivas Pandruvada)
    - HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke)
    - HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita)
    - HID: i2c-hid-of: fix NULL-deref on failed power up (Johan Hovold)
    - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx (Luka Guzenko)
    - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 (David Senoner)
    - scsi: storvsc: Fix ring buffer size calculation (Michael Kelley)
    - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe)
    - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google))
    - scs: add CONFIG_MMU dependency for vfree_atomic() (Samuel Holland)
    - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera)
    - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck)
    path for statistics (Breno Leitao)
    - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov)
    - spi: ppc4xx: Drop write-only variable (Uwe Kleine-Konig)
    - net: openvswitch: limit the number of recursions from action sets (Aaron Conole)
    - wifi: iwlwifi: Fix some error codes (Dan Carpenter)
    - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt)
    - btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba)
    - btrfs: forbid deleting live subvol qgroup (Boris Burkov)
    - btrfs: do not ASSERT() if the newly created subvolume already got read (Qu Wenruo)
    - btrfs: forbid creating subvol qgroups (Boris Burkov)
    - netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)
    - net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Furong Xu)
    - net: stmmac: xgmac: use #define for string constants (Simon Horman)
    - clocksource: Skip watchdog check for large watchdog intervals (Jiri Wiesner)
    - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede)
    - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (Werner Sembach)
    - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK (Prashanth K)
    - usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (Prashanth K)
    - USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr)
    - USB: serial: option: add Fibocom FM101-GL variant (Puliang Lu)
    - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu)
    - ALSA: usb-audio: Add a quirk for Yamaha YIT-W12TX transmitter (Julian Sikorski)
    - drivers: lkdtm: fix clang -Wformat warning (Justin Stitt)
    - blk-iocost: Fix an UBSAN shift-out-of-bounds warning (Tejun Heo)
    - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei)
    - fs/ntfs3: Fix an NULL dereference bug (Dan Carpenter)
    - netfilter: nft_set_pipapo: remove scratch_aligned pointer (Florian Westphal)
    - netfilter: nft_set_pipapo: add helper to release pcpu scratch area (Florian Westphal)
    - netfilter: nft_set_pipapo: store index in scratch maps (Florian Westphal)
    - netfilter: nft_ct: reject direction for ct id (Pablo Neira Ayuso)
    - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Srinivasan Shanmugam)
    - drm/amd/display: Fix multiple memory leaks reported by coverity (Anson Jacob)
    - netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso)
    - netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso)
    - ppp_async: limit MRU to 64K (Eric Dumazet)
    - af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. (Kuniyuki Iwashima)
    - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida)
    - rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells)
    - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet)
    - hwmon: (coretemp) Fix bogus core_id to attr name mapping (Zhang Rui)
    - hwmon: (coretemp) Fix out-of-bounds memory access (Zhang Rui)
    - hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli)
    - octeontx2-pf: Fix a memleak otx2_sq_init (Zhipeng Lu)
    - atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu)
    - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart)
    - selftests: net: avoid just another constant wait (Paolo Abeni)
    - selftests: net: cut more slack for gro fwd tests. (Paolo Abeni)
    - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Furong Xu)
    - drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case (Kuogee Hsieh)
    - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren)
    - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li)
    - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (Yoshihiro Shimoda)
    - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Christophe JAILLET)
    - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (Christophe JAILLET)
    - dmaengine: ti: k3-udma: Report short packet errors (Jai Luthra)
    - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools (Guanhua Gao)
    - ASoC: codecs: lpass-wsa-macro: fix compander volume hack (Johan Hovold)
    - bonding: remove print in bond_verify_device_path (Zhengchao Shao)
    - HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg)
    - HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie)
    - gve: Fix use-after-free vulnerability (Praveen Kaligineedi)
    - arm64: irq: set the correct node for shadow call stack (Huang Shijie)
    path (Breno Leitao)
    - selftests: net: fix available tunnels detection (Paolo Abeni)
    - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet)
    - net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu)
    - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Pablo Neira Ayuso)
    - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso)
    - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV (Pablo Neira Ayuso)
    - bridge: mcast: fix disabled snooping after long uptime (Linus Lussing)
    - llc: call sock_orphan() at release time (Eric Dumazet)
    - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller)
    - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET)
    - ixgbe: Refactor overtemp event handling (Jedrzej Jagielski)
    - ixgbe: Refactor returning internal error codes (Jedrzej Jagielski)
    - ixgbe: Remove non-inclusive language (Piotr Skajewski)
    - tcp: add sanity checks to rx zerocopy (Eric Dumazet)
    - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (Eric Dumazet)
    - ip6_tunnel: use dev_sw_netstats_rx_add() (Eric Dumazet)
    - selftests: net: give more time for GRO aggregation (Paolo Abeni)
    - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei)
    - scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui)
    - drm: using mul_u32_u32() requires linux/math64.h (Stephen Rothwell)
    - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis)
    - perf: Fix the nr_addr_filters fix (Peter Zijlstra)
    - drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' (Srinivasan Shanmugam)
    - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam)
    - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in
    'get_platform_power_management_table()' (Srinivasan Shanmugam)
    - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li)
    - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
    - virtio_net: Fix ''%d' directive writing between 1 and 11 bytes into a region of size 10' warnings (Zhu
    Yanjun)
    - drm/amdkfd: Fix lock dependency warning (Felix Kuehling)
    - libsubcmd: Fix memory leak in uniq() (Ian Rogers)
    - PCI/AER: Decode Requester ID when no error info found (Bjorn Helgaas)
    - PCI: Fix 64GT/s effective data rate calculation (Ilpo Jarvinen)
    - fs/kernfs/dir: obey S_ISGID (Max Kellermann)
    - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE (Adrian Reber)
    - selftests/sgx: Fix linker script asserts (Jo Van Bulck)
    - usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar)
    - perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present (James Clark)
    - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden)
    - PCI: Only override AMD USB controller if required (Guilherme G. Piccoli)
    - mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt (Xiaowu.ding)
    - mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson)
    - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import (Oleksandr Tyshchenko)
    - i3c: master: cdns: Update maximum prescaler value for i2c clock (Harshit Shah)
    - um: time-travel: fix time corruption (Johannes Berg)
    - um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor)
    - um: Don't use vfprintf() for os_info() (Benjamin Berg)
    - um: Fix naming clash between UML and scheduler (Anton Ivanov)
    - leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit)
    - ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 (bo liu)
    - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (Srinivasan Shanmugam)
    - drm/amdgpu: Let KFD sync with VM fences (Felix Kuehling)
    - clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks (Alexander Stein)
    - clk: imx: scu: Fix memory leak in __imx_clk_gpr_scu() (Kuan-Wei Chiu)
    - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 (Werner Fischer)
    - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu)
    - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu)
    - drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap (Wang, Beyond)
    - drm/msm/dpu: Ratelimit framedone timeout msgs (Rob Clark)
    - media: i2c: imx335: Fix hblank min/max values (Kieran Bingham)
    - media: ddbridge: fix an error code problem in ddb_probe (Su Hui)
    - IB/ipoib: Fix mcast list locking (Daniel Vacek)
    - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson)
    - f2fs: fix to tag gcing flag on page during block migration (Chao Yu)
    - media: rkisp1: Drop IRQF_SHARED (Tomi Valkeinen)
    - ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL (Pierre-Louis Bossart)
    - ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart)
    - PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart)
    - media: rockchip: rga: fix swizzling for RGB formats (Michael Tretter)
    - media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal)
    - drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen)
    - drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen)
    - drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen)
    - f2fs: fix write pointers on zoned device after roll forward (Jaegeuk Kim)
    - drm/amd/display: Fix tiled display misalignment (Meenakshikumar Somasundaram)
    - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang)
    - fast_dput(): handle underflows gracefully (Al Viro)
    - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea)
    - ALSA: hda: Refer to correct stream index at loops (Takashi Iwai)
    - f2fs: fix to check return value of f2fs_reserve_new_block() (Chao Yu)
    - octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry (Suman Ghosh)
    - i40e: Fix VF disable behavior to block all traffic (Andrii Staikov)
    - bridge: cfm: fix enum typo in br_cc_ccm_tx_parse (Lin Ma)
    - Bluetooth: L2CAP: Fix possible multiple reject send (Frederic Danis)
    - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 (Zijun Hu)
    - wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg)
    - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui)
    - ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision (Alexander Tsoy)
    - libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos (Mingyi Zhang)
    - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen)
    - arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property (Mao Jinlong)
    - arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property (Mao Jinlong)
    - md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas)
    - block: prevent an integer overflow in bvec_try_merge_hw_page (Christoph Hellwig)
    - net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path (Tobias Waldekranz)
    - ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam)
    - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam)
    - ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam)
    - ARM: dts: imx25/27: Pass timing0 (Fabio Estevam)
    - ARM: dts: imx25: Fix the iim compatible string (Fabio Estevam)
    - block/rnbd-srv: Check for unlikely string overflow (Kees Cook)
    - ionic: pass opcode to devcmd_wait (Shannon Nelson)
    - ARM: dts: imx1: Fix sram node (Fabio Estevam)
    - ARM: dts: imx27: Fix sram node (Fabio Estevam)
    - ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam)
    - ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam)
    - ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker)
    - bpf: Set uattr->batch.count as zero before batched update or deletion (Hou Tao)
    - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke)
    - scsi: libfc: Don't schedule abort twice (Hannes Reinecke)
    - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao)
    - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)
    - ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein)
    - ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein)
    - ARM: dts: imx7d: Fix coresight funnel ports (Alexander Stein)
    - scsi: arcmsr: Support new PCI device IDs 1883 and 1886 (ching Huang)
    - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao)
    - PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel)
    - scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee)
    - selftests/bpf: Fix issues in setup_classid_environment() (Yafang Shao)
    - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Yonghong Song)
    - selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko)
    - wifi: rt2x00: restart beacon queue when hardware reset (Shiji Yang)
    - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li)
    - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li)
    - ext4: unify the type of flexbg_size to unsigned int (Baokun Li)
    - ext4: fix inconsistent between segment fstrim and full fstrim (Ye Bin)
    - ecryptfs: Reject casefold directory inodes (Gabriel Krisman Bertazi)
    - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker)
    - KVM: s390: fix setting of fpc register (Heiko Carstens)
    - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens)
    - arch: consolidate arch_irq_work_raise prototypes (Arnd Bergmann)
    - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis)
    - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov)
    - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (Oleg Nesterov)
    - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() (Oleg Nesterov)
    - crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin)
    - crypto: octeontx2 - Fix cptvf driver cleanup (Bharat Bhushan)
    - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen)
    - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis)
    - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat)
    - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat)
    - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad)
    - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad)
    - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events (Shuai Xue)
    - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Mukesh Ojha)
    - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava)
    - PNP: ACPI: fix fortify warning (Dmitry Antipov)
    - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu)
    - audit: Send netlink ACK before setting connection in auditd_set (Chris Riches)
    - regulator: core: Only increment use_count when enable_count changes (Rui Zhang)
    - debugobjects: Stop accessing objects after releasing hash bucket lock (Andrzej Hajda)
    - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Greg KH)
    - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (Zhiquan Li)
    - powerpc/lib: Validate size for vector operations (Naveen N Rao)
    - powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (Stephen Rothwell)
    - x86/boot: Ignore NMIs during very early boot (Jun'ichi Nomura)
    - powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() (Michael Ellerman)
    - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman)
    - powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman)
    - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs (Mark Rutland)
    - arm64: irq: set the correct node for VMAP stack (Huang Shijie)
    - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan)
    - x86/entry/ia32: Ensure s32 is sign extended to s64 (Richard Palethorpe)
    - tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen)
    - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao)
    - mtd: cfi: allow building spi-intel standalone (Arnd Bergmann)
    - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read (Kamal Dasu)
    - block: Move checking GENHD_FL_NO_PART to bdev_add_partition() (Li Lingfeng)
    - gpio: eic-sprd: Clear interrupt after set the interrupt type (Wenhua Lin)
    - drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (Fedor Pchelkin)
    - drm/exynos: fix accidental on-stack copy of exynos_drm_plane (Arnd Bergmann)
    - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] (Markus Niebel)
    - cpufreq: intel_pstate: Refine computation of P-state for given frequency (Rafael J. Wysocki)
    - cpufreq: intel_pstate: Drop redundant intel_pstate_get_hwp_cap() call (Rafael J. Wysocki)
    - ksmbd: fix global oob in ksmbd_nl_policy (Lin Ma)
    - btrfs: add definition for EXTENT_TREE_V2 (Josef Bacik)
    - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi)
    - mm/sparsemem: fix race in accessing memory_section->usage (Charan Teja Kalla)
    - mm: use __pfn_to_section() instead of open coding it (Rolf Eike Beer)
    - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Zheng
    Wang)
    - ARM: dts: qcom: sdx55: fix USB SS wakeup (Johan Hovold)
    - ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts (Johan Hovold)
    - ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells' (Johan Hovold)
    - ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 (Paul Cercueil)
    - ARM: dts: qcom: sdx55: fix USB wakeup interrupt types (Johan Hovold)
    - pipe: wakeup wr_wait after setting max_usage (Lukas Schauer)
    - fs/pipe: move check to pipe_has_watch_queue() (Max Kellermann)
    - bus: mhi: host: Add alignment check for event ring read pointer (Krishna chaitanya chundru)
    - bus: mhi: host: Rename 'struct mhi_tre' to 'struct mhi_ring_element' (Manivannan Sadhasivam)
    - PM: sleep: Fix possible deadlocks in core system-wide PM code (Rafael J. Wysocki)
    - PM: core: Remove unnecessary (void *) conversions (Li zeming)
    - drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter)
    - drm/tidss: Fix atomic_flush check (Tomi Valkeinen)
    - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter)
    - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjala)
    - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello)
    - xfs: read only mounts with fsopen mount API are busted (Dave Chinner)
    - firmware: arm_scmi: Check mailbox/SMT channel for consistency (Cristian Marussi)
    - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)
    - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Pablo Neira Ayuso)
    - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Michael Kelley)
    - wifi: iwlwifi: fix a memory corruption (Emmanuel Grumbach)
    - exec: Fix error handling in begin_new_exec() (Bernd Edlinger)
    - rbd: don't move requests to the running list on errors (Ilya Dryomov)
    - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval)
    - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo)
    - btrfs: don't warn if discard range is not aligned to sector (David Sterba)
    - btrfs: tree-checker: fix inline ref size in error messages (Chung-Chiang Cheng)
    - btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin)
    - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted (Omar Sandoval)
    - btrfs: fix race between reading a directory and adding entries to it (Filipe Manana)
    - btrfs: refresh dir last index during a rewinddir(3) call (Filipe Manana)
    - btrfs: set last dir index to the current last index when opening dir (Filipe Manana)
    - btrfs: fix infinite directory reads (Filipe Manana)
    - net: fec: fix the unhandled context fault from smmu (Shenwei Wang)
    - fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu)
    - selftests: netdevsim: fix the udp_tunnel_nic test (Jakub Kicinski)
    - net: mvpp2: clear BM pool before initialization (Jenishkumar Maheshbhai Patel)
    - net: stmmac: Wait a bit for the reset to take effect (Bernd Edlinger)
    - netfilter: nf_tables: validate NFPROTO_* family (Pablo Neira Ayuso)
    - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal)
    - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal)
    - overflow: Allow mixed type arguments (Kees Cook)
    - net/mlx5e: fix a potential double-free in fs_any_create_groups (Dinghao Liu)
    - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu)
    - net/mlx5: DR, Can't go to uplink vport on RX rule (Yevgeny Kliteynik)
    - net/mlx5: DR, Use the right GVMI number for drop action (Yevgeny Kliteynik)
    - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao)
    - netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao)
    - tcp: Add memory barrier to tcp_push() (Salvatore Dipietro)
    - afs: Hide silly-rename files from userspace (David Howells)
    - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu)
    - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan)
    - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)
    - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet)
    - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma)
    - bnxt_en: Wait for FLR to complete during probe (Michael Chan)
    - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao)
    - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu)
    - ksmbd: Add missing set_freezable() for freezable kthread (Namjae Jeon)
    - ksmbd: send lease break notification on FILE_RENAME_INFORMATION (Namjae Jeon)
    - ksmbd: don't increment epoch if current state and request state are same (Namjae Jeon)
    - ksmbd: fix potential circular locking issue in smb2_set_ea() (Namjae Jeon)
    - ksmbd: set v2 lease version on lease upgrade (Namjae Jeon)
    - rename(): fix the locking of subdirectories (Al Viro)
    - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Zhihao Cheng)
    - nouveau/vmm: don't set addr on the fail path to avoid warning (Dave Airlie)
    - rtc: Adjust failure return code for cmos_set_alarm() (Mario Limonciello)
    - mmc: mmc_spi: remove custom DMA mapped buffers (Andy Shevchenko)
    - mmc: core: Use mrq.sbc in close-ended ffu (Avri Altman)
    - scripts/get_abi: fix source path leak (Vegard Nossum)
    - lsm: new security_file_ioctl_compat() hook (Alfred Piccioni)
    - arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold)
    - arm64: dts: qcom: sm8150: fix USB wakeup interrupt types (Johan Hovold)
    - arm64: dts: qcom: sdm845: fix USB wakeup interrupt types (Johan Hovold)
    - arm64: dts: qcom: sc7180: fix USB wakeup interrupt types (Johan Hovold)
    - async: Introduce async_schedule_dev_nocall() (Rafael J. Wysocki)
    - async: Split async_schedule_node_domain() (Rafael J. Wysocki)
    - parisc/firmware: Fix F-extend for PDC addresses (Helge Deller)
    - bus: mhi: host: Add spinlock to protect WP access when queueing TREs (Bhaumik Bhatt)
    - bus: mhi: host: Drop chan lock before queuing buffers (Qiang Yu)
    - mips: Fix max_mapnr being uninitialized on early stages (Serge Semin)
    - media: ov9734: Enable runtime PM before registering async sub-device (Bingbu Cao)
    - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang)
    - media: imx355: Enable runtime PM before registering async sub-device (Bingbu Cao)
    - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu)
    - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)
    - PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang)
    - crypto: api - Disallow identical driver names (Herbert Xu)
    - btrfs: sysfs: validate scrub_speed_max value (David Disseldorp)
    - ext4: allow for the last group to be marked as trimmed (Suraj Jitindar Singh)
    - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace. (Jonathan Cameron)
    - scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() (Bart Van Assche)
    - scsi: ufs: core: Simplify power management during async scan (Bart Van Assche)
    - dmaengine: fix NULL pointer in channel unregistration function (Amelie Delaunay)
    - iio: adc: ad7091r: Enable internal vref if external vref is not supplied (Marcelo Schmitt)
    - iio: adc: ad7091r: Allow users to configure device events (Marcelo Schmitt)
    - iio: adc: ad7091r: Set alert bit in config register (Marcelo Schmitt)
    - ksmbd: only v2 leases handle the directory (Namjae Jeon)
    - ksmbd: fix UAF issue in ksmbd_tcp_new_connection() (Namjae Jeon)
    - ksmbd: validate mech token in session setup (Namjae Jeon)
    - ksmbd: don't allow O_TRUNC open on read-only share (Namjae Jeon)
    - ksmbd: free ppace array on error in parse_dacl (Fedor Pchelkin)
    - LTS version: v5.15.148 (Vijayendra Suman)
    - Revert 'Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d'' (Song Liu)
    - arm64: dts: armada-3720-turris-mox: set irq type for RTC (Sjoerd Simons)
    - netfilter: nft_quota: copy content when cloning expression (Pablo Neira Ayuso)
    - netfilter: nft_last: copy content when cloning expression (Pablo Neira Ayuso)
    - netfilter: nft_limit: Clone packet limits' cost value (Phil Sutter)
    - netfilter: nft_limit: fix stateful object memory leak (Florian Westphal)
    - netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails (Pablo Neira Ayuso)
    - netfilter: nf_tables: typo NULL check in _clone() function (Pablo Neira Ayuso)
    - block: Remove special-casing of compound pages (Matthew Wilcox (Oracle))
    - i2c: s3c24xx: fix transferring more than one message in polling mode (Marek Szyprowski)
    - i2c: s3c24xx: fix read transfers in polling mode (Marek Szyprowski)
    - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (Nikita Zhandarovich)
    - selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes (Amit Cohen)
    - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ido Schimmel)
    - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure (Amit Cohen)
    - ethtool: netlink: Add missing ethnl_ops_begin/complete (Ludvig Parsson)
    - kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET)
    - ipvs: avoid stat macros calls from preemptible context (Fedor Pchelkin)
    - netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description (Pablo Neira Ayuso)
    - netfilter: nf_tables: skip dead set elements in netlink dump (Pablo Neira Ayuso)
    - netfilter: nf_tables: do not allow mismatch field size and set key length (Pablo Neira Ayuso)
    - netfilter: nft_limit: do not ignore unsupported flags (Pablo Neira Ayuso)
    - netfilter: nf_tables: memcg accounting for dynamically allocated objects (Vasily Averin)
    - netfilter: nft_limit: move stateful fields out of expression data (Pablo Neira Ayuso)
    - netfilter: nft_limit: rename stateful structure (Pablo Neira Ayuso)
    - netfilter: nft_quota: move stateful fields out of expression data (Pablo Neira Ayuso)
    - netfilter: nft_last: move stateful fields out of expression data (Pablo Neira Ayuso)
    - netfilter: nft_connlimit: move stateful fields out of expression data (Pablo Neira Ayuso)
    - netfilter: nf_tables: reject invalid set policy (Pablo Neira Ayuso)
    - net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe (Kunwu Chan)
    - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Hao Sun)
    - net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls (Qiang Ma)
    - net: ravb: Fix dma_addr_t truncation in error case (Nikita Yushchenko)
    - mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() (Eric Dumazet)
    - mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (Eric Dumazet)
    - mptcp: strict validation before using mp_opt->hmac (Eric Dumazet)
    - mptcp: drop unused sk in mptcp_get_options (Geliang Tang)
    - mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN (Eric Dumazet)
    - net: phy: micrel: populate .soft_reset for KSZ9131 (Claudiu Beznea)
    - net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames (Sanjuan Garcia, Jorge)
    - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma)
    - s390/pci: fix max size calculation in zpci_memcpy_toio() (Niklas Schnelle)
    - PCI: keystone: Fix race condition when initializing PHYs (Siddharth Vadapalli)
    - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi)
    - nvmet: re-fix tracing strncpy() warning (Arnd Bergmann)
    - serial: imx: Correct clock error message in function probe() (Christoph Niedermaier)
    - usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer (Chunfeng Yun)
    - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin)
    - perf env: Avoid recursively taking env->bpf_progs.lock (Ian Rogers)
    - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi)
    - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi)
    - usb: cdc-acm: return correct error code on unsupported break (Oliver Neukum)
    - tty: use 'if' in send_break() instead of 'goto' (Jiri Slaby (SUSE))
    - tty: don't check for signal_pending() in send_break() (Jiri Slaby (SUSE))
    - tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK (Jiri Slaby (SUSE))
    - tty: change tty_write_lock()'s ndelay parameter to bool (Jiri Slaby (SUSE))
    - perf genelf: Set ELF program header addresses properly (Namhyung Kim)
    - iio: adc: ad9467: fix scale setting (Nuno Sa)
    - iio: adc: ad9467: don't ignore error codes (Nuno Sa)
    - iio: adc: ad9467: fix reset gpio handling (Nuno Sa)
    - iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify (Uwe Kleine-Konig)
    - selftests/sgx: Skip non X86_64 platform (Zhao Mengmeng)
    - selftests/sgx: Fix uninitialized pointer dereference in error path (Jo Van Bulck)
    - serial: imx: fix tx statemachine deadlock (Paul Geurts)
    - software node: Let args be NULL in software_node_get_reference_args (Sakari Ailus)
    - libapi: Add missing linux/types.h header to get the __u64 type on io.h (Arnaldo Carvalho de Melo)
    - serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed (Uwe Kleine-Konig)
    - power: supply: bq256xx: fix some problem in bq256xx_hw_init (Su Hui)
    - power: supply: cw2015: correct time_to_empty units in sysfs (Jan Palus)
    - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() (Christophe JAILLET)
    - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() (Christophe JAILLET)
    - riscv: Fix module_alloc() that did not reset the linear mapping permissions (Alexandre Ghiti)
    - riscv: Check if the code to patch lies in the exit section (Alexandre Ghiti)
    - mips: Fix incorrect max_low_pfn adjustment (Serge Semin)
    - mips: dmi: Fix early remap on MIPS32 (Serge Semin)
    - mfd: intel-lpss: Fix the fractional clock divider flags (Andy Shevchenko)
    - leds: aw2013: Select missing dependency REGMAP_I2C (Dang Huynh)
    - mfd: syscon: Fix null pointer dereference in of_syscon_register() (Kunwu Chan)
    - ARM: 9330/1: davinci: also select PINCTRL (Randy Dunlap)
    - iommu/dma: Trace bounce buffer usage when mapping buffers (Isaac J. Manjarres)
    - serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve)
    - serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve)
    - HID: wacom: Correct behavior when processing some confidence == false touches (Jason Gerecke)
    - iio: adc: ad7091r: Pass iio_dev to event handler (Marcelo Schmitt)
    - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton)
    - KVM: arm64: vgic-v4: Restore pending state on host userspace write (Marc Zyngier)
    - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov)
    - PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)
    - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support (Niklas Cassel)
    - wifi: mwifiex: configure BSSID consistently when starting AP (David Lin)
    - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Ilpo Jarvinen)
    - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Ilpo Jarvinen)
    - wifi: mt76: fix broken precal loading from MTD for mt7915 (Christian Marangi)
    - iommu/arm-smmu-qcom: Add missing GMU entry to match table (Rob Clark)
    - bpf: Fix re-attachment branch in bpf_tracing_prog_attach (Jiri Olsa)
    - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han)
    - rootfs: Fix support for rootfstype= when root= is given (Stefan Berger)
    - io_uring/rw: ensure io->bytes_done is always initialized (Jens Axboe)
    - pwm: jz4740: Don't use dev_err_probe() in .request() (Uwe Kleine-Konig)
    - block: add check that partition length needs to be aligned with block size (Min Li)
    - scsi: mpi3mr: Refresh sdev queue depth after controller reset (Chandrakanth patil)
    - fbdev: flush deferred work in fb_deferred_io_fsync() (Nam Cao)
    - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx (Caghan Demir)
    - ALSA: oxygen: Fix right channel of capture volume mixer (Takashi Iwai)
    - serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock (Christoph Niedermaier)
    - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han)
    - usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera)
    - Revert 'usb: typec: class: fix typec_altmode_put_partner to put plugs' (Heikki Krogerus)
    - usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled (Frank Li)
    - usb: cdns3: fix iso transfer error when mult is not zero (Frank Li)
    - usb: cdns3: fix uvc failure work since sg support enabled (Frank Li)
    - usb: chipidea: wait controller resume finished for wakeup irq (Xu Yang)
    - Revert 'usb: dwc3: don't reset device side if dwc3 was configured as host-only' (Thinh Nguyen)
    - Revert 'usb: dwc3: Soft reset phy on probe for host' (Thinh Nguyen)
    - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Uttkarsh Aggarwal)
    - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (Xu Yang)
    - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug (Heiko Carstens)
    - binder: fix race between mmput() and do_exit() (Carlos Llamas)
    - xen-netback: don't produce zero-size SKB frags (Jan Beulich)
    - virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() (Wei Yongjun)
    - dma-mapping: Fix build error unused-value (Ren Zhijie)
    - Input: atkbd - use ab83 as id when skipping the getid command (Hans de Goede)
    - binder: fix unused alloc->free_async_space (Carlos Llamas)
    - binder: fix async space check for 0-sized buffers (Carlos Llamas)
    - selftests/bpf: Add assert for user stacks in test_task_stack (Jordan Rome)
    - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven)
    - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt)
    - ksmbd: validate the zero field of packet header (Li Nan)
    - drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init (Zhipeng Lu)
    - IB/iser: Prevent invalidating wrong MR (Sergey Gorenko)
    - mmc: sdhci_omap: Fix TI SoC dependencies (Peter Robinson)
    - mmc: sdhci_am654: Fix TI SoC dependencies (Peter Robinson)
    - ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() (Geoffrey D. Bennett)
    - ALSA: scarlett2: Add missing error checks to *_ctl_get() (Geoffrey D. Bennett)
    - ALSA: scarlett2: Allow passing any output to line_out_remap() (Geoffrey D. Bennett)
    - ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() (Geoffrey D. Bennett)
    - ALSA: scarlett2: Add missing error check to scarlett2_config_save() (Geoffrey D. Bennett)
    - ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] (Hans de Goede)
    - pwm: stm32: Fix enable count for clk in .probe() (Philipp Zabel)
    - pwm: stm32: Use hweight32 in stm32_pwm_detect_channels (Philipp Zabel)
    - pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable (Uwe Kleine-Konig)
    - clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw (Theo Lebrun)
    - clk: fixed-rate: add devm_clk_hw_register_fixed_rate (Dmitry Baryshkov)
    - clk: asm9260: use parent index to link the reference clock (Dmitry Baryshkov)
    - clk: si5341: fix an error code problem in si5341_output_clk_set_rate (Su Hui)
    - watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused (Vignesh Raghavendra)
    - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (Stefan Wahren)
    - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Jerry Hoemann)
    - watchdog: set cdev owner before adding (Curtis Klein)
    - drivers: clk: zynqmp: update divider round rate logic (Jay Buddhabhatti)
    - clk: zynqmp: Add a check for NULL pointer (Shubhrajyoti Datta)
    - clk: zynqmp: make bestdiv unsigned (Shubhrajyoti Datta)
    - drivers: clk: zynqmp: calculate closest mux rate (Jay Buddhabhatti)
    - clk: qcom: videocc-sm8150: Add missing PLL config property (Satya Priya Kakitapalli)
    - clk: qcom: videocc-sm8150: Update the videocc resets (Satya Priya Kakitapalli)
    - dt-bindings: clock: Update the videocc resets for sm8150 (Satya Priya Kakitapalli)
    - gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu)
    - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu)
    - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu)
    - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher)
    - media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
    (Christophe JAILLET)
    - media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter)
    - f2fs: fix the f2fs_file_write_iter tracepoint (Eric Biggers)
    - f2fs: fix to update iostat correctly in f2fs_filemap_fault() (Chao Yu)
    - f2fs: fix to check compress file in f2fs_move_file_range() (Chao Yu)
    - media: rkisp1: Disable runtime PM in probe error path (Laurent Pinchart)
    - clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config (Satya Priya Kakitapalli)
    - media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu)
    - drm/bridge: tc358767: Fix return value on error case (Tomi Valkeinen)
    - drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable (Tomi Valkeinen)
    - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu)
    - drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu)
    - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Yang Yingliang)
    - drm/drv: propagate errors from drm_modeset_register_all() (Dmitry Baryshkov)
    - drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (Konrad Dybcio)
    - drm/msm/mdp4: flush vblank event on disable (Dmitry Baryshkov)
    - ASoC: cs35l34: Fix GPIO name and drop legacy include (Linus Walleij)
    - ASoC: cs35l33: Fix GPIO name and drop legacy include (Linus Walleij)
    - drm/radeon: check return value of radeon_ring_lock() (Nikita Zhandarovich)
    - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (Nikita Zhandarovich)
    - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (Nikita Zhandarovich)
    - f2fs: fix to avoid dirent corruption (Chao Yu)
    - drm/bridge: Fix typo in post_disable() description (Dario Binacchi)
    - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)
    - drm/tilcdc: Fix irq free on unload (Tomi Valkeinen)
    - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function (Uwe Kleine-Konig)
    - drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer (Abhinav Singh)
    - drm/panel-elida-kd35t133: hold panel in reset for unprepare (Chris Morgan)
    - RDMA/hns: Fix inappropriate err code for unsupported operations (Junxian Huang)
    - RDMA/usnic: Silence uninitialized symbol smatch warnings (Leon Romanovsky)
    - Revert 'drm/omapdrm: Annotate dma-fence critical section in commit path' (Tomi Valkeinen)
    - Revert 'drm/tidss: Annotate dma-fence critical section in commit path' (Tomi Valkeinen)
    - ARM: davinci: always select CONFIG_CPU_ARM926T (Arnd Bergmann)
    - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)
    - mlxbf_gige: Enable the GigE port in mlxbf_gige_open (Asmaa Mnebhi)
    - mlxbf_gige: Fix intermittent no ip issue (Asmaa Mnebhi)
    - net/sched: act_ct: fix skb leak and crash on ooo frags (Tao Liu)
    - null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS (Christoph Hellwig)
    - block: make BLK_DEF_MAX_SECTORS unsigned (Keith Busch)
    - Bluetooth: btmtkuart: fix recv_buf() return value (Francesco Dolcini)
    - Bluetooth: Fix bogus check for re-auth no supported with non-ssp (Luiz Augusto von Dentz)
    - netfilter: nf_tables: mark newset as dead on transaction abort (Florian Westphal)
    - wifi: iwlwifi: mvm: send TX path flush in rfkill (Johannes Berg)
    - wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request (Johannes Berg)
    - wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Su Hui)
    - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Su Hui)
    - wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Su Hui)
    - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Su Hui)
    - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Su Hui)
    - wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Su Hui)
    - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Su Hui)
    - wifi: rtlwifi: add calculate_bit_shift() (Su Hui)
    - arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent (Konrad Dybcio)
    - block: add check of 'minors' and 'first_minor' in device_add_disk() (Li Nan)
    - arm64: dts: qcom: sm8150-hdk: fix SS USB regulators (Dmitry Baryshkov)
    - soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration (Atul Dhudase)
    - dma-mapping: clear dev->dma_mem to NULL after freeing it (Joakim Zhang)
    - dma-mapping: Add dma_release_coherent_memory to DMA API (Mark-PK Tsai)
    - virtio/vsock: fix logic which reduces credit update messages (Arseniy Krasnov)
    - selftests/net: fix grep checking for fib_nexthop_multiprefix (Hangbin Liu)
    - scsi: hisi_sas: Correct the number of global debugfs registers (Yihang Li)
    - scsi: hisi_sas: Rollback some operations if FLR failed (Yihang Li)
    - scsi: hisi_sas: Replace with standard error code return value (Yihang Li)
    - scsi: hisi_sas: Prevent parallel FLR and controller reset (Qi Liu)
    - scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT (Luo Jiaxing)
    - block: Set memalloc_noio to false on device_add_disk() error path (Li Nan)
    - bpf: Fix verification of indirect var-off stack access (Andrei Matei)
    - arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types (Johan Hovold)
    - arm64: dts: qcom: sdm845-db845c: correct LED panic indicator (Krzysztof Kozlowski)
    - arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator (Krzysztof Kozlowski)
    - scsi: fnic: Return error if vmalloc() failed (Artem Chernyshev)
    - bpf: fix check for attempt to corrupt spilled pointer (Andrii Nakryiko)
    - arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered (Douglas Anderson)
    - arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered (Douglas Anderson)
    - arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered (Douglas Anderson)
    - arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered (Douglas Anderson)
    - arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered (Douglas Anderson)
    - ARM: dts: qcom: sdx65: correct SPMI node name (Krzysztof Kozlowski)
    - bpf: enforce precision of R0 on callback return (Andrii Nakryiko)
    - arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type (Tomi Valkeinen)
    - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Su Hui)
    - firmware: meson_sm: populate platform devices from sm device tree data (Dmitry Rokosov)
    - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (Christophe JAILLET)
    - net/ncsi: Fix netlink major/minor version numbers (Peter Delevoryas)
    - ARM: dts: qcom: apq8064: correct XOADC register address (Dmitry Baryshkov)
    - wifi: libertas: stop selecting wext (Arnd Bergmann)
    - wifi: ath11k: Defer on rproc_get failure (Luca Weiss)
    - bpf: Add crosstask check to __bpf_get_stack (Jordan Rome)
    - bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)
    - wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (Chih-Kang Chang)
    - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Trond Myklebust)
    - blocklayoutdriver: Fix reference leak of pnfs_device_node (Benjamin Coddington)
    - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou)
    - crypto: sahara - do not resize req->src when doing hash operations (Ovidiu Panait)
    - crypto: sahara - fix processing hash requests with req->nbytes < sg->length (Ovidiu Panait)
    - crypto: sahara - improve error handling in sahara_sha_process() (Ovidiu Panait)
    - crypto: sahara - fix wait_for_completion_timeout() error handling (Ovidiu Panait)
    - crypto: sahara - fix ahash reqsize (Ovidiu Panait)
    - crypto: sahara - handle zero-length aes requests (Ovidiu Panait)
    - crypto: sahara - avoid skcipher fallback code duplication (Ovidiu Panait)
    - crypto: virtio - Wait for tasklet to complete on device remove (wangyangxin)
    - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Osama Muhammad)
    - fs: indicate request originates from old mount API (Christian Brauner)
    - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov)
    - crypto: sahara - fix error handling in sahara_hw_descriptor_create() (Ovidiu Panait)
    - crypto: sahara - fix processing requests with cryptlen < sg->length (Ovidiu Panait)
    - crypto: sahara - fix ahash selftest failure (Ovidiu Panait)
    - crypto: sahara - fix cbc selftest failure (Ovidiu Panait)
    - crypto: sahara - remove FLAGS_NEW_KEY logic (Ovidiu Panait)
    - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu)
    - crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu)
    - crypto: sa2ul - Return crypto_aead_setkey to transfer the error (Chen Ni)
    - crypto: virtio - Handle dataq logic with tasklet (Gonglei (Arei))
    - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Mickael Salaun)
    - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang)
    - kunit: debugfs: Fix unchecked dereference in debugfs_print_results() (Richard Fitzgerald)
    - ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error (Tony Luck)
    - ACPI: LPSS: Fix the fractional clock divider flags (Andy Shevchenko)
    - spi: sh-msiof: Enforce fixed DTDL for R-Car H3 (Wolfram Sang)
    - efivarfs: force RO when remounting if SetVariable is not supported (Ilias Apalodimas)
    - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia)
    - cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() (Alexandra Diupina)
    - cpufreq: Use of_property_present() for testing DT property presence (Rob Herring)
    - of: Add of_property_present() helper (Rob Herring)
    - of: property: define of_property_read_u{8,16,32,64}_array() unconditionally (Michael Walle)
    - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin)
    - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin)
    - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (Ronald Monthero)
    - spi: spi-zynqmp-gqspi: fix driver kconfig dependencies (Amit Kumar Mahapatra)
    - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan)
    - powerpc/powernv: Add a null pointer check in opal_powercap_init() (Kunwu Chan)
    - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan)
    - powerpc/powernv: Add a null pointer check to scom_debug_init_one() (Kunwu Chan)
    - selftests/powerpc: Fix error handling in FPU/VMX preemption tests (Michael Ellerman)
    - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch)
    - powerpc/44x: select I2C for CURRITUCK (Randy Dunlap)
    - powerpc: add crtsavres.o to always-y instead of extra-y (Masahiro Yamada)
    - powerpc: remove checks for binutils older than 2.25 (Masahiro Yamada)
    - powerpc/toc: Future proof kernel toc (Alan Modra)
    - powerpc: Mark .opd section read-only (Christophe Leroy)
    - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann)
    - x86/lib: Fix overflow when counting digits (Colin Ian King)
    - coresight: etm4x: Fix width of CCITMIN field (James Clark)
    - PCI: Add ACS quirk for more Zhaoxin Root Ports (LeoLiuoc)
    - leds: ledtrig-tty: Free allocated ttyname buffer on deactivate (Florian Eckert)
    - parport: parport_serial: Add Brainboxes device IDs and geometry (Cameron Williams)
    - parport: parport_serial: Add Brainboxes BAR details (Cameron Williams)
    - uio: Fix use-after-free in uio_open (Guanghui Feng)
    - binder: fix comment on binder_alloc_new_buf() return value (Carlos Llamas)
    - binder: fix trivial typo of binder_free_buf_locked() (Carlos Llamas)
    - binder: fix use-after-free in shinker's callback (Carlos Llamas)
    - binder: use EPOLLERR from eventpoll.h (Carlos Llamas)
    - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (Masami Hiramatsu (Google))
    - bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 (Alan
    Maguire)
    - Revert 'ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek' (Greg Kroah-Hartman)
    - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Hans de Goede)
    - drm/crtc: fix uninitialized variable use (Jani Nikula)
    - ARM: sun9i: smp: fix return code check of of_property_match_string (Stefan Wahren)
    - net: qrtr: ns: Return 0 if server port is not present (Sarannya S)
    - ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle))
    - i2c: rk3x: fix potential spinlock recursion on poll (Jensen Huang)
    - ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 (Hans de Goede)
    - Input: xpad - add Razer Wolverine V2 support (Luca Weiss)
    - wifi: iwlwifi: pcie: avoid a NULL pointer dereference (Avraham Stern)
    - ARC: fix spare error (Vineet Gupta)
    - s390/scm: fix virtual vs physical address confusion (Vineeth Vijayan)
    - Input: i8042 - add nomux quirk for Acer P459-G2-M (Esther Shimanovich)
    - Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Hans de Goede)
    - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)
    - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (Steven Rostedt (Google))
    - tracing: Fix uaf issue when open the hist or hist_debug file (Zheng Yejian)
    - MIPS: dts: loongson: drop incorrect dwmac fallback compatible (Krzysztof Kozlowski)
    - stmmac: dwmac-loongson: drop useless check for compatible fallback (Krzysztof Kozlowski)
    - tracing: Add size check when printing trace_marker output (Steven Rostedt (Google))
    - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (Steven Rostedt (Google))
    - jbd2: fix soft lockup in journal_finish_inode_data_buffers() (Ye Bin)
    - platform/x86: intel-vbtn: Fix missing tablet-mode-switch events (Hans de Goede)
    - neighbour: Don't let neigh_forced_gc() disable preemption for long (Judy Hsiao)
    - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao)
    - jbd2: correct the printing of write_flags in jbd2_write_superblock() (Zhang Yi)
    - clk: rockchip: rk3128: Fix HCLK_OTG gate register (Weihao Li)
    - hwmon: (corsair-psu) Fix probe when built-in (Armin Wolf)
    - drm/exynos: fix a wrong error checking (Inki Dae)
    - drm/exynos: fix a potential error pointer dereference (Xiang Yang)
    - drm/amdgpu: Add NULL checks for function pointers (Lijo Lazar)
    - nvme: introduce helper function to get ctrl state (Keith Busch)
    - ASoC: ops: add correct range check for limiting volume (Srinivas Kandagatla)
    - ASoC: da7219: Support low DC impedance headset (David Rau)
    - net/tg3: fix race condition in tg3_reset_task() (Thinh Tran)
    - nouveau/tu102: flush all pdbs on vmm flush (Dave Airlie)
    - ASoC: rt5650: add mutex to avoid the jack detection failure (Shuming Fan)
    - ASoC: cs43130: Fix incorrect frame delay configuration (Maciej Strozek)
    - ASoC: cs43130: Fix the position of const qualifier (Maciej Strozek)
    - ASoC: Intel: Skylake: mem leak in skl register function (Kamil Duljas)
    - ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (David Lin)
    - ASoC: Intel: Skylake: Fix mem leak in few functions (Kamil Duljas)
    - ASoC: wm8974: Correct boost mixer inputs (Charles Keepax)
    - nvme-core: check for too small lba shift (Keith Busch)
    - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (Lu Yao)
    - debugfs: fix automount d_fsdata usage (Johannes Berg)
    - wifi: cfg80211: lock wiphy mutex for rfkill poll (Johannes Berg)
    - mptcp: fix uninit-value in mptcp_incoming_options (Edward Adam Davis)
    - ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (Vasiliy Kovalev)
    - pinctrl: lochnagar: Don't build on MIPS (Charles Keepax)
    - f2fs: explicitly null-terminate the xattr list (Eric Biggers)

    [5.15.0-205.147.1]
    - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334308]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://linux.oracle.com/errata/ELSA-2024-12272.html");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:H/Au:N/C:C/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-2201");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/04/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/04/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/04/09");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:linux:8::UEKR7");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:linux:9::UEKR7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:9");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:9:3:baseos_patch");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:9::baseos_latest");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:bpftool");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-container");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-container-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules-extra");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Oracle Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("linux_alt_patch_detect.nasl", "ssh_get_info.nasl");
  script_require_keys("Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/local_checks_enabled");

  exit(0);
}


include('ksplice.inc');
include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item('Host/OracleLinux')) audit(AUDIT_OS_NOT, 'Oracle Linux');
var os_release = get_kb_item("Host/RedHat/release");
if (isnull(os_release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:os_release)) audit(AUDIT_OS_NOT, 'Oracle Linux');
var os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:os_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Oracle Linux');
os_ver = os_ver[1];
if (! preg(pattern:"^(8|9)([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, 'Oracle Linux 8 / 9', 'Oracle Linux ' + os_ver);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Oracle Linux', cpu);

var machine_uptrack_level = get_one_kb_item('Host/uptrack-uname-r');
if (machine_uptrack_level)
{
  var trimmed_uptrack_level = ereg_replace(string:machine_uptrack_level, pattern:"\.(x86_64|i[3-6]86|aarch64)$", replace:'');
  var fixed_uptrack_levels = ['5.15.0-205.149.5.1.el8uek', '5.15.0-205.149.5.1.el9uek'];
  foreach var fixed_uptrack_level ( fixed_uptrack_levels ) {
    if (rpm_spec_vers_cmp(a:trimmed_uptrack_level, b:fixed_uptrack_level) >= 0)
    {
      audit(AUDIT_PATCH_INSTALLED, 'KSplice hotfix for ELSA-2024-12272');
    }
  }
  __rpm_report = 'Running KSplice level of ' + trimmed_uptrack_level + ' does not meet the minimum fixed level of ' + join(fixed_uptrack_levels, sep:' / ') + ' for this advisory.\n\n';
}

var kernel_major_minor = get_kb_item('Host/uname/major_minor');
if (empty_or_null(kernel_major_minor)) exit(1, 'Unable to determine kernel major-minor level.');
var expected_kernel_major_minor = '5.15';
if (kernel_major_minor != expected_kernel_major_minor)
  audit(AUDIT_OS_NOT, 'running kernel level ' + expected_kernel_major_minor + ', it is running kernel level ' + kernel_major_minor);

var pkgs = [
    {'reference':'bpftool-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'bpftool-5.15.0'},
    {'reference':'kernel-uek-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-5.15.0'},
    {'reference':'kernel-uek-container-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-container-5.15.0'},
    {'reference':'kernel-uek-container-debug-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-container-debug-5.15.0'},
    {'reference':'kernel-uek-core-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-core-5.15.0'},
    {'reference':'kernel-uek-debug-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-5.15.0'},
    {'reference':'kernel-uek-debug-core-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-core-5.15.0'},
    {'reference':'kernel-uek-debug-devel-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-devel-5.15.0'},
    {'reference':'kernel-uek-debug-modules-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-5.15.0'},
    {'reference':'kernel-uek-debug-modules-extra-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-extra-5.15.0'},
    {'reference':'kernel-uek-devel-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-devel-5.15.0'},
    {'reference':'kernel-uek-doc-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-doc-5.15.0'},
    {'reference':'kernel-uek-modules-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-5.15.0'},
    {'reference':'kernel-uek-modules-extra-5.15.0-205.149.5.1.el8uek', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-extra-5.15.0'},
    {'reference':'bpftool-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'bpftool-5.15.0'},
    {'reference':'kernel-uek-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-5.15.0'},
    {'reference':'kernel-uek-container-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-container-5.15.0'},
    {'reference':'kernel-uek-container-debug-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-container-debug-5.15.0'},
    {'reference':'kernel-uek-core-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-core-5.15.0'},
    {'reference':'kernel-uek-debug-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-5.15.0'},
    {'reference':'kernel-uek-debug-core-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-core-5.15.0'},
    {'reference':'kernel-uek-debug-devel-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-devel-5.15.0'},
    {'reference':'kernel-uek-debug-modules-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-5.15.0'},
    {'reference':'kernel-uek-debug-modules-extra-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-extra-5.15.0'},
    {'reference':'kernel-uek-devel-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-devel-5.15.0'},
    {'reference':'kernel-uek-doc-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-doc-5.15.0'},
    {'reference':'kernel-uek-modules-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-5.15.0'},
    {'reference':'kernel-uek-modules-extra-5.15.0-205.149.5.1.el8uek', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-extra-5.15.0'},
    {'reference':'bpftool-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'bpftool-5.15.0'},
    {'reference':'kernel-uek-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-5.15.0'},
    {'reference':'kernel-uek-container-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-container-5.15.0'},
    {'reference':'kernel-uek-container-debug-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-container-debug-5.15.0'},
    {'reference':'kernel-uek-core-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-core-5.15.0'},
    {'reference':'kernel-uek-debug-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-5.15.0'},
    {'reference':'kernel-uek-debug-core-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-core-5.15.0'},
    {'reference':'kernel-uek-debug-devel-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-devel-5.15.0'},
    {'reference':'kernel-uek-debug-modules-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-5.15.0'},
    {'reference':'kernel-uek-debug-modules-extra-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-extra-5.15.0'},
    {'reference':'kernel-uek-devel-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-devel-5.15.0'},
    {'reference':'kernel-uek-doc-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-doc-5.15.0'},
    {'reference':'kernel-uek-modules-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-5.15.0'},
    {'reference':'kernel-uek-modules-extra-5.15.0-205.149.5.1.el9uek', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-extra-5.15.0'},
    {'reference':'bpftool-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'bpftool-5.15.0'},
    {'reference':'kernel-uek-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-5.15.0'},
    {'reference':'kernel-uek-container-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-container-5.15.0'},
    {'reference':'kernel-uek-container-debug-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-container-debug-5.15.0'},
    {'reference':'kernel-uek-core-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-core-5.15.0'},
    {'reference':'kernel-uek-debug-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-5.15.0'},
    {'reference':'kernel-uek-debug-core-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-core-5.15.0'},
    {'reference':'kernel-uek-debug-devel-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-devel-5.15.0'},
    {'reference':'kernel-uek-debug-modules-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-5.15.0'},
    {'reference':'kernel-uek-debug-modules-extra-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-extra-5.15.0'},
    {'reference':'kernel-uek-devel-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-devel-5.15.0'},
    {'reference':'kernel-uek-doc-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-doc-5.15.0'},
    {'reference':'kernel-uek-modules-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-5.15.0'},
    {'reference':'kernel-uek-modules-extra-5.15.0-205.149.5.1.el9uek', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-extra-5.15.0'}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = 'EL' + package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (reference && _release) {
    if (exists_check) {
        if (rpm_exists(release:_release, rpm:exists_check) && rpm_check(release:_release, sp:sp, cpu:cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
    } else {
        if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
    }
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'bpftool / kernel-uek / kernel-uek-container / etc');
}