- Linux 6.6.28 (bsc#1218260).
    
    - smb3: fix Open files on server counter going negative
      (bsc#1218260).
    - ata: libata-core: Allow command duration limits detection for
      ACS-4 drives (bsc#1218260).
    - ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
      (bsc#1218260).
    - batman-adv: Avoid infinite loop trying to resize local TT
      (bsc#1218260).
    - ARM: dts: imx7s-warp: Pass OV2680 link-frequencies
      (bsc#1218260).
    - raid1: fix use-after-free for original bio in
      raid1_write_request() (bsc#1218260).
    - ring-buffer: Only update pages_touched when a new page is
      touched (bsc#1218260).
    - Bluetooth: Fix memory leak in hci_req_sync_complete()
      (bsc#1218260).
    - drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
      (bsc#1218260).
    - platform/chrome: cros_ec_uart: properly fix race condition
      (bsc#1218260).
    - ACPI: scan: Do not increase dep_unmet for already met
      dependencies (bsc#1218260).
    - PM: s2idle: Make sure CPUs will wakeup directly on resume
      (bsc#1218260).
    - media: cec: core: remove length check of Timer Status
      (bsc#1218260).
    - ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0
      (bsc#1218260).
    - ARM: OMAP2+: fix N810 MMC gpiod table (bsc#1218260).
    - mmc: omap: fix broken slot switch lookup (bsc#1218260).
    - mmc: omap: fix deferred probe (bsc#1218260).
    - mmc: omap: restore original power up/down steps (bsc#1218260).
    - ARM: OMAP2+: fix USB regression on Nokia N8x0 (bsc#1218260).
    - firmware: arm_scmi: Make raw debugfs entries non-seekable
      (bsc#1218260).
    - cxl/mem: Fix for the index of Clear Event Record Handle
      (bsc#1218260).
    - cxl/core/regs: Fix usage of map->reg_type in
      cxl_decode_regblock() before assigned (bsc#1218260).
    - drm/msm/dpu: don't allow overriding data from catalog
      (bsc#1218260).
    - arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
      (bsc#1218260).
    - cxl/core: Fix initialization of mbox_cmd.size_out in get event
      (bsc#1218260).
    - Revert "drm/qxl: simplify qxl_fence_wait" (bsc#1218260).
    - nouveau: fix function cast warning (bsc#1218260).
    - scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
      (bsc#1218260).
    - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
      (bsc#1218260).
    - net: openvswitch: fix unwanted error log on timeout policy
      probing (bsc#1218260).
    - u64_stats: fix u64_stats_init() for lockdep when used repeatedly
      in one file (bsc#1218260).
    - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
      (bsc#1218260).
    - octeontx2-pf: Fix transmit scheduler resource leak
      (bsc#1218260).
    - block: fix q->blkg_list corruption during disk rebind
      (bsc#1218260).
    - geneve: fix header validation in geneve[6]_xmit_skb
      (bsc#1218260).
    - s390/ism: fix receive message buffer allocation (bsc#1218260).
    - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()
      (bsc#1218260).
    - bnxt_en: Fix error recovery for RoCE ulp client (bsc#1218260).
    - bnxt_en: Reset PTP tx_avail after possible firmware reset
      (bsc#1218260).
    - net: ks8851: Inline ks8851_rx_skb() (bsc#1218260).
    - net: ks8851: Handle softirqs at the end of IRQ thread to fix
      hang (bsc#1218260).
    - af_unix: Clear stale u->oob_skb (bsc#1218260).
    - octeontx2-af: Fix NIX SQ mode and BP config (bsc#1218260).
    - ipv6: fib: hide unused 'pn' variable (bsc#1218260).
    - ipv4/route: avoid unused-but-set-variable warning (bsc#1218260).
    - ipv6: fix race condition between ipv6_get_ifaddr and
      ipv6_del_addr (bsc#1218260).
    - Bluetooth: ISO: Align broadcast sync_timeout with connection
      timeout (bsc#1218260).
    - Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset
      (bsc#1218260).
    - Bluetooth: hci_sync: Use QoS to determine which PHY to scan
      (bsc#1218260).
    - Bluetooth: hci_sync: Fix using the same interval and window
      for Coded PHY (bsc#1218260).
    - Bluetooth: SCO: Fix not validating setsockopt user input
      (bsc#1218260).
    - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED
      bit (bsc#1218260).
    - net/mlx5: SF, Stop waiting for FW as teardown was called
      (bsc#1218260).
    - net/mlx5: Register devlink first under devlink lock
      (bsc#1218260).
    - net/mlx5: offset comp irq index in name by one (bsc#1218260).
    - net/mlx5: Properly link new fs rules into the tree
      (bsc#1218260).
    - net/mlx5: Correctly compare pkt reformat ids (bsc#1218260).
    - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (bsc#1218260).
    - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
      (bsc#1218260).
    - net/mlx5e: Do not produce metadata freelist entries in Tx port
      ts WQE xmit (bsc#1218260).
    - net: sparx5: fix wrong config being used when reconfiguring PCS
      (bsc#1218260).
    - Revert "s390/ism: fix receive message buffer allocation"
      (bsc#1218260).
    - net: dsa: mt7530: trap link-local frames regardless of ST Port
      State (bsc#1218260).
    - af_unix: Do not use atomic ops for unix_sk(sk)->inflight
      (bsc#1218260).
    - af_unix: Fix garbage collector racing against connect()
      (bsc#1218260).
    - net: ena: Fix potential sign extension issue (bsc#1218260).
    - net: ena: Wrong missing IO completions check order
      (bsc#1218260).
    - net: ena: Fix incorrect descriptor free behavior (bsc#1218260).
    - net: ena: Move XDP code to its new files (bsc#1218260).
    - net: ena: Pass ena_adapter instead of net_device to
      ena_xmit_common() (bsc#1218260).
    - net: ena: Use tx_ring instead of xdp_ring for XDP channel TX
      (bsc#1218260).
    - net: ena: Set tx_info->xdpf value to NULL (bsc#1218260).
    - tracing: hide unused ftrace_event_id_fops (bsc#1218260).
    - iommu/vt-d: Fix wrong use of pasid config (bsc#1218260).
    - iommu/vt-d: Allocate local memory for page request queue
      (bsc#1218260).
    - selftests: mptcp: use += operator to append strings
      (bsc#1218260).
    - btrfs: qgroup: correctly model root qgroup rsv in convert
      (bsc#1218260).
    - btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume
      operations (bsc#1218260).
    - btrfs: record delayed inode root in transaction (bsc#1218260).
    - btrfs: qgroup: convert PREALLOC to PERTRANS after
      record_root_in_trans (bsc#1218260).
    - io_uring/net: restore msg_control on sendzc retry (bsc#1218260).
    - kprobes: Fix possible use-after-free issue on kprobe
      registration (bsc#1218260).
    - scsi: sg: Avoid sg device teardown race (bsc#1218260).
    - scsi: sg: Avoid race in error handling & drop bogus warn
      (bsc#1218260).
    - accel/ivpu: Fix deadlock in context_xa (bsc#1218260).
    - drm/vmwgfx: Enable DMA mappings with SEV (bsc#1218260).
    - drm/i915/vrr: Disable VRR when using bigjoiner (bsc#1218260).
    - drm/amdkfd: Reset GPU on queue preemption failure (bsc#1218260).
    - drm/ast: Fix soft lockup (bsc#1218260).
    - drm/panfrost: Fix the error path in
      panfrost_mmu_map_fault_addr() (bsc#1218260).
    - drm/client: Fully protect modes[] with dev->mode_config.mutex
      (bsc#1218260).
    - arm64: dts: imx8qm-ss-dma: fix can lpcg indices (bsc#1218260).
    - arm64: dts: imx8-ss-dma: fix can lpcg indices (bsc#1218260).
    - arm64: dts: imx8-ss-dma: fix adc lpcg indices (bsc#1218260).
    - arm64: dts: imx8-ss-conn: fix usb lpcg indices (bsc#1218260).
    - arm64: dts: imx8-ss-lsio: fix pwm lpcg indices (bsc#1218260).
    - arm64: dts: imx8-ss-dma: fix spi lpcg indices (bsc#1218260).
    - vhost: Add smp_rmb() in vhost_vq_avail_empty() (bsc#1218260).
    - vhost: Add smp_rmb() in vhost_enable_notify() (bsc#1218260).
    - perf/x86: Fix out of range data (bsc#1218260).
    - x86/cpu: Actually turn off mitigations by default for
      SPECULATION_MITIGATIONS=n (bsc#1218260).
    - selftests: timers: Fix abs() warning in posix_timers test
      (bsc#1218260).
    - x86/apic: Force native_apic_mem_read() to use the MOV
      instruction (bsc#1218260).
    - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
      (bsc#1218260).
    - x86/bugs: Fix return type of spectre_bhi_state() (bsc#1218260).
    - x86/bugs: Fix BHI documentation (bsc#1218260).
    - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
      (bsc#1218260).
    - x86/bugs: Rename various 'ia32_cap' variables to
      'x86_arch_cap_msr' (bsc#1218260).
    - x86/bugs: Fix BHI handling of RRSBA (bsc#1218260).
    - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
      (bsc#1218260).
    - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
      (bsc#1218260).
    - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with
      CONFIG_MITIGATION_SPECTRE_BHI (bsc#1218260).
    - drm/i915/cdclk: Fix CDCLK programming order when pipes are
      active (bsc#1218260).
    - drm/i915: Disable port sync when bigjoiner is used
      (bsc#1218260).
    - drm/amdgpu: Reset dGPU if suspend got aborted (bsc#1218260).
    - drm/amdgpu: always force full reset for SOC21 (bsc#1218260).
    - drm/amdgpu: fix incorrect number of active RBs for gfx11
      (bsc#1218260).
    - drm/amd/display: Program VSC SDP colorimetry for all DP sinks >=
      1.4 (bsc#1218260).
    - drm/amd/display: Set VSC SDP Colorimetry same way for MST and
      SST (bsc#1218260).
    - drm/amd/display: fix disable otg wa logic in DCN316
      (bsc#1218260).
    - Rename to
      patches.kernel.org/6.6.28-053-netfilter-complete-validation-of-user-input.patch.