diff --git a/debian.nvidia/changelog b/debian.nvidia/changelog
index d86527b9d310b..52c076830172e 100644
--- a/debian.nvidia/changelog
+++ b/debian.nvidia/changelog
@@ -1,10 +1,867 @@
-linux-nvidia (6.8.0-1009.9) UNRELEASED; urgency=medium
-
-  CHANGELOG: Do not edit directly. Autogenerated at release.
-  CHANGELOG: Use the printchanges target to see the curent changes.
-  CHANGELOG: Use the insertchanges target to create the final log.
+linux-nvidia (6.8.0-1009.9) noble; urgency=medium
+
+  * noble/linux-nvidia: 6.8.0-1009.9 -proposed tracker (LP: #2068306)
+
+  * mlxbf_gige: bring in latest 6.x upstream commits (LP: #2068067)
+    - mlxbf_gige: add support to display pause frame counters
+
+  * Export kernel symbols required for NVIDIA GDS (LP: #2068544)
+    - NVIDIA: SAUCE: NFS: Export nvfs register and unregister functions as GPL
+    - NVIDIA: SAUCE: NVMe/NVMeoF: Export nvfs register and unregister functions as
+      GPL
+
+  [ Ubuntu: 6.8.0-38.38 ]
+
+  * noble/linux: 6.8.0-38.38 -proposed tracker (LP: #2068318)
+  * race_sched in ubuntu_stress_smoke_test will cause kernel panic on 6.8 with
+    Azure Standard_A2_v2 instance (LP: #2068024)
+    - sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf()
+  * Noble: btrfs: re-introduce 'norecovery' mount option (LP: #2068591)
+    - btrfs: re-introduce 'norecovery' mount option
+  * Fix system hang while entering suspend with AMD Navi3x graphics
+    (LP: #2063417)
+    - drm/amdgpu/mes: fix use-after-free issue
+  * Noble update: v6.8.8 upstream stable release (LP: #2068087)
+    - io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64()
+      failure
+    - drm/i915/cdclk: Fix voltage_level programming edge case
+    - Revert "vmgenid: emit uevent when VMGENID updates"
+    - SUNRPC: Fix rpcgss_context trace event acceptor field
+    - selftests/ftrace: Limit length in subsystem-enable tests
+    - random: handle creditable entropy from atomic process context
+    - scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING
+    - net: usb: ax88179_178a: avoid writing the mac address before first reading
+    - btrfs: do not wait for short bulk allocation
+    - btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer
+    - r8169: fix LED-related deadlock on module removal
+    - r8169: add missing conditional compiling for call to r8169_remove_leds
+    - scsi: ufs: qcom: Add missing interconnect bandwidth values for Gear 5
+    - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
+    - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
+    - netfilter: br_netfilter: skip conntrack input hook for promisc packets
+    - netfilter: nft_set_pipapo: constify lookup fn args where possible
+    - netfilter: nft_set_pipapo: walk over current view on netlink dump
+    - netfilter: flowtable: validate pppoe header
+    - netfilter: flowtable: incorrect pppoe tuple
+    - af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
+    - af_unix: Don't peek OOB data without MSG_OOB.
+    - net: sparx5: flower: fix fragment flags handling
+    - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation
+    - net/mlx5: Restore mistakenly dropped parts in register devlink flow
+    - net/mlx5e: Prevent deadlock while disabling aRFS
+    - net: change maximum number of UDP segments to 128
+    - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation
+    - selftests/tcp_ao: Make RST tests less flaky
+    - selftests/tcp_ao: Zero-init tcp_ao_info_opt
+    - selftests/tcp_ao: Fix fscanf() call for format-security
+    - selftests/tcp_ao: Printing fixes to confirm with format-security
+    - net: stmmac: Apply half-duplex-less constraint for DW QoS Eth only
+    - net: stmmac: Fix max-speed being ignored on queue re-init
+    - net: stmmac: Fix IP-cores specific MAC capabilities
+    - ice: tc: check src_vsi in case of traffic from VF
+    - ice: tc: allow zero flags in parsing tc flower
+    - ice: Fix checking for unsupported keys on non-tunnel device
+    - tun: limit printing rate when illegal packet received by tun dev
+    - net: dsa: mt7530: fix mirroring frames received on local port
+    - net: dsa: mt7530: fix port mirroring for MT7988 SoC switch
+    - s390/ism: Properly fix receive message buffer allocation
+    - netfilter: nf_tables: missing iterator type in lookup walk
+    - netfilter: nf_tables: restore set elements when delete set fails
+    - gpiolib: swnode: Remove wrong header inclusion
+    - netfilter: nf_tables: fix memleak in map from abort path
+    - net/sched: Fix mirred deadlock on device recursion
+    - net: ethernet: mtk_eth_soc: fix WED + wifi reset
+    - ravb: Group descriptor types used in Rx ring
+    - net: ravb: Count packets instead of descriptors in R-Car RX path
+    - net: ravb: Allow RX loop to move past DMA mapping errors
+    - net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
+    - NFSD: fix endianness issue in nfsd4_encode_fattr4
+    - RDMA/rxe: Fix the problem "mutex_destroy missing"
+    - RDMA/cm: Print the old state when cm_destroy_id gets timeout
+    - RDMA/mlx5: Fix port number for counter query in multi-port configuration
+    - perf annotate: Make sure to call symbol__annotate2() in TUI
+    - perf lock contention: Add a missing NULL check
+    - s390/qdio: handle deferred cc1
+    - s390/cio: fix race condition during online processing
+    - iommufd: Add missing IOMMUFD_DRIVER kconfig for the selftest
+    - iommufd: Add config needed for iommufd_fail_nth
+    - drm: nv04: Fix out of bounds access
+    - drm/v3d: Don't increment `enabled_ns` twice
+    - userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE
+    - thunderbolt: Introduce tb_port_reset()
+    - thunderbolt: Introduce tb_path_deactivate_hop()
+    - thunderbolt: Make tb_switch_reset() support Thunderbolt 2, 3 and USB4
+      routers
+    - thunderbolt: Reset topology created by the boot firmware
+    - drm/panel: visionox-rm69299: don't unregister DSI device
+    - drm/radeon: make -fstrict-flex-arrays=3 happy
+    - ALSA: hda/realtek: Fix volumn control of ThinkBook 16P Gen4
+    - thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up()
+    - platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes
+    - interconnect: qcom: x1e80100: Remove inexistent ACV_PERF BCM
+    - interconnect: Don't access req_list while it's being manipulated
+    - clk: Remove prepare_lock hold assertion in __clk_release()
+    - clk: Initialize struct clk_core kref earlier
+    - clk: Get runtime PM before walking tree during disable_unused
+    - clk: Get runtime PM before walking tree for clk_summary
+    - clk: mediatek: Do a runtime PM get on controllers during probe
+    - clk: mediatek: mt7988-infracfg: fix clocks for 2nd PCIe port
+    - selftests/powerpc/papr-vpd: Fix missing variable initialization
+    - x86/bugs: Fix BHI retpoline check
+    - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
+    - block: propagate partition scanning errors to the BLKRRPART ioctl
+    - net/mlx5: E-switch, store eswitch pointer before registering devlink_param
+    - ALSA: seq: ump: Fix conversion from MIDI2 to MIDI1 UMP messages
+    - ALSA: hda/tas2781: correct the register for pow calibrated data
+    - ALSA: hda/realtek: Add quirks for Huawei Matebook D14 NBLB-WAX9N
+    - ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC
+    - usb: misc: onboard_usb_hub: Disable the USB hub clock on failure
+    - misc: rtsx: Fix rts5264 driver status incorrect when card removed
+    - thunderbolt: Avoid notify PM core about runtime PM resume
+    - thunderbolt: Fix wake configurations after device unplug
+    - thunderbolt: Do not create DisplayPort tunnels on adapters of the same
+      router
+    - comedi: vmk80xx: fix incomplete endpoint checking
+    - serial: mxs-auart: add spinlock around changing cts state
+    - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
+    - serial: 8250_dw: Revert: Do not reclock if already at correct rate
+    - serial: stm32: Return IRQ_NONE in the ISR if no handling happend
+    - serial: stm32: Reset .throttled state in .startup()
+    - serial: core: Fix regression when runtime PM is not enabled
+    - serial: core: Clearing the circular buffer before NULLifying it
+    - serial: core: Fix missing shutdown and startup for serial base port
+    - USB: serial: option: add Fibocom FM135-GL variants
+    - USB: serial: option: add support for Fibocom FM650/FG650
+    - USB: serial: option: add Lonsung U8300/U9300 product
+    - USB: serial: option: support Quectel EM060K sub-models
+    - USB: serial: option: add Rolling RW101-GL and RW135-GL support
+    - USB: serial: option: add Telit FN920C04 rmnet compositions
+    - Revert "usb: cdc-wdm: close race between read and workqueue"
+    - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
+    - usb: Disable USB3 LPM at shutdown
+    - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport
+      error
+    - usb: typec: tcpm: Correct the PDO counting in pd_set
+    - mei: me: disable RPL-S on SPS and IGN firmwares
+    - speakup: Avoid crash on very long word
+    - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
+    - sched: Add missing memory barrier in switch_mm_cid
+    - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
+    - KVM: x86/pmu: Disable support for adaptive PEBS
+    - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
+    - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes
+    - KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
+    - arm64/head: Disable MMU at EL2 before clearing HCR_EL2.E2H
+    - arm64: hibernate: Fix level3 translation fault in swsusp_save()
+    - init/main.c: Fix potential static_command_line memory overflow
+    - mm/madvise: make MADV_POPULATE_(READ|WRITE) handle VM_FAULT_RETRY properly
+    - mm/userfaultfd: allow hugetlb change protection upon poison entry
+    - mm,swapops: update check in is_pfn_swap_entry for hwpoison entries
+    - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
+    - mm/shmem: inline shmem_is_huge() for disabled transparent hugepages
+    - fuse: fix leaked ENOSYS error on first statx call
+    - drm/amdkfd: Fix memory leak in create_process failure
+    - drm/amdgpu: remove invalid resource->start check v2
+    - drm/ttm: stop pooling cached NUMA pages v2
+    - drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init
+    - drm/vmwgfx: Fix prime import/export
+    - drm/vmwgfx: Sort primary plane formats by order of preference
+    - drm/vmwgfx: Fix crtc's atomic check conditional
+    - nouveau: fix instmem race condition around ptr stores
+    - bootconfig: use memblock_free_late to free xbc memory to buddy
+    - Squashfs: check the inode number is not the invalid value of zero
+    - nilfs2: fix OOB in nilfs_set_de_type
+    - fork: defer linking file vma until vma is fully initialized
+    - net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
+    - net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
+    - ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
+    - ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
+    - ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
+    - ksmbd: common: use struct_group_attr instead of struct_group for
+      network_open_info
+    - thunderbolt: Reset only non-USB4 host routers in resume
+    - Linux 6.8.8
+  * Fix inaudible HDMI/DP audio on USB-C MST dock (LP: #2064689)
+    - drm/i915/audio: Fix audio time stamp programming for DP
+  * Add Cirrus Logic CS35L56 amplifier support (LP: #2062135)
+    - ALSA: hda: realtek: Re-work CS35L41 fixups to re-use for other amps
+    - ALSA: hda/realtek: Add quirks for HP G11 Laptops using CS35L56
+  * net:fib_rule_tests.sh in ubuntu_kselftests_net fails on Noble (LP: #2066332)
+    - Revert "UBUNTU: SAUCE: selftests: net: fix "from" match test in
+      fib_rule_tests.sh"
+  * mtk_t7xx WWAN module fails to probe with: Invalid device status 0x1
+    (LP: #2049358)
+    - Revert "UBUNTU: SAUCE: net: wwan: t7xx: PCIe reset rescan"
+    - Revert "UBUNTU: SAUCE: net: wwan: t7xx: Add AP CLDMA"
+    - net: wwan: t7xx: Add AP CLDMA
+    - wwan: core: Add WWAN fastboot port type
+    - net: wwan: t7xx: Add sysfs attribute for device state machine
+    - net: wwan: t7xx: Infrastructure for early port configuration
+    - net: wwan: t7xx: Add fastboot WWAN port
+  * Pull-request to address TPM bypass issue (LP: #2037688)
+    - [Config]: Configure TPM drivers as builtins for arm64 in annotations
+  * re-enable Ubuntu FAN in the Noble kernel (LP: #2064508)
+    - SAUCE: fan: add VXLAN implementation
+    - SAUCE: fan: Fix NULL pointer dereference
+    - SAUCE: fan: support vxlan strict length validation
+  * update for V3 kernel bits and improved multiple fan slice support
+    (LP: #1470091) // re-enable Ubuntu FAN in the Noble kernel (LP: #2064508)
+    - SAUCE: fan: tunnel multiple mapping mode (v3)
+  * TCP memory  leak, slow network (arm64) (LP: #2045560)
+    - net: make SK_MEMORY_PCPU_RESERV tunable
+    - net: fix sk_memory_allocated_{add|sub} vs softirqs
+  * panel flickering after the i915.psr2 is enabled (LP: #2046315)
+    - drm/i915/alpm: Add ALPM register definitions
+    - drm/i915/psr: Add alpm_parameters struct
+    - drm/i915/alpm: Calculate ALPM Entry check
+    - drm/i915/alpm: Alpm aux wake configuration for lnl
+    - drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code
+    - drm/i915/psr: Improve fast and IO wake lines calculation
+    - drm/i915/psr: Calculate IO wake and fast wake lines for DISPLAY_VER < 12
+    - drm/i915/display: Increase number of fast wake precharge pulses
+  * I2C HID device sometimes fails to initialize causing touchpad to not work
+    (LP: #2061040)
+    - HID: i2c-hid: Revert to await reset ACK before reading report descriptor
+  * Fix the RTL8852CE BT FW Crash based on SER false alarm (LP: #2060904)
+    - wifi: rtw89: disable txptctrl IMR to avoid flase alarm
+    - wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of
+      firmware command
+  * [X13s] Fingerprint reader is not working (LP: #2065376)
+    - SAUCE: arm64: dts: qcom: sc8280xp: Add USB DWC3 Multiport controller
+    - SAUCE: arm64: dts: qcom: sc8280xp-x13s: enable USB MP and fingerprint reader
+  * Fix random HuC/GuC initialization failure of Intel i915 driver
+    (LP: #2061049)
+    - drm/i915/huc: Allow for very slow HuC loading
+  * Add support of TAS2781 amp of audio (LP: #2064064)
+    - ALSA: hda/tas2781: Add new vendor_id and subsystem_id to support ThinkPad
+      ICE-1
+  * Noble update: v6.8.7 upstream stable release (LP: #2065912)
+    - smb3: fix Open files on server counter going negative
+    - ata: libata-core: Allow command duration limits detection for ACS-4 drives
+    - ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
+    - drm/amdgpu/vpe: power on vpe when hw_init
+    - batman-adv: Avoid infinite loop trying to resize local TT
+    - ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE
+    - ceph: switch to use cap_delay_lock for the unlink delay list
+    - virtio_net: Do not send RSS key if it is not supported
+    - arm64: tlb: Fix TLBI RANGE operand
+    - ARM: dts: imx7s-warp: Pass OV2680 link-frequencies
+    - raid1: fix use-after-free for original bio in raid1_write_request()
+    - ring-buffer: Only update pages_touched when a new page is touched
+    - Bluetooth: Fix memory leak in hci_req_sync_complete()
+    - drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
+    - platform/chrome: cros_ec_uart: properly fix race condition
+    - ACPI: scan: Do not increase dep_unmet for already met dependencies
+    - PM: s2idle: Make sure CPUs will wakeup directly on resume
+    - media: cec: core: remove length check of Timer Status
+    - btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
+    - ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0
+    - ARM: OMAP2+: fix N810 MMC gpiod table
+    - mmc: omap: fix broken slot switch lookup
+    - mmc: omap: fix deferred probe
+    - mmc: omap: restore original power up/down steps
+    - ARM: OMAP2+: fix USB regression on Nokia N8x0
+    - firmware: arm_ffa: Fix the partition ID check in ffa_notification_info_get()
+    - firmware: arm_scmi: Make raw debugfs entries non-seekable
+    - cxl/mem: Fix for the index of Clear Event Record Handle
+    - cxl/core/regs: Fix usage of map->reg_type in cxl_decode_regblock() before
+      assigned
+    - arm64: dts: freescale: imx8mp-venice-gw72xx-2x: fix USB vbus regulator
+    - arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix USB vbus regulator
+    - drm/msm: Add newlines to some debug prints
+    - drm/msm/dpu: don't allow overriding data from catalog
+    - drm/msm/dpu: make error messages at dpu_core_irq_register_callback() more
+      sensible
+    - dt-bindings: display/msm: sm8150-mdss: add DP node
+    - arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
+    - cxl/core: Fix initialization of mbox_cmd.size_out in get event
+    - Revert "drm/qxl: simplify qxl_fence_wait"
+    - nouveau: fix function cast warning
+    - drm/msm/adreno: Set highest_bank_bit for A619
+    - scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
+    - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
+    - net: openvswitch: fix unwanted error log on timeout policy probing
+    - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
+    - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
+    - octeontx2-pf: Fix transmit scheduler resource leak
+    - block: fix q->blkg_list corruption during disk rebind
+    - lib: checksum: hide unused expected_csum_ipv6_magic[]
+    - geneve: fix header validation in geneve[6]_xmit_skb
+    - s390/ism: fix receive message buffer allocation
+    - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()
+    - bnxt_en: Fix error recovery for RoCE ulp client
+    - bnxt_en: Reset PTP tx_avail after possible firmware reset
+    - ACPI: bus: allow _UID matching for integer zero
+    - base/node / ACPI: Enumerate node access class for 'struct access_coordinate'
+    - ACPI: HMAT: Introduce 2 levels of generic port access class
+    - ACPI: HMAT / cxl: Add retrieval of generic port coordinates for both access
+      classes
+    - cxl: Split out combine_coordinates() for common shared usage
+    - cxl: Split out host bridge access coordinates
+    - cxl: Remove checking of iter in cxl_endpoint_get_perf_coordinates()
+    - cxl: Fix retrieving of access_coordinates in PCIe path
+    - net: ks8851: Inline ks8851_rx_skb()
+    - net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
+    - af_unix: Clear stale u->oob_skb.
+    - octeontx2-af: Fix NIX SQ mode and BP config
+    - ipv6: fib: hide unused 'pn' variable
+    - ipv4/route: avoid unused-but-set-variable warning
+    - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
+    - pds_core: use pci_reset_function for health reset
+    - pds_core: Fix pdsc_check_pci_health function to use work thread
+    - Bluetooth: ISO: Align broadcast sync_timeout with connection timeout
+    - Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset
+    - Bluetooth: hci_sync: Use QoS to determine which PHY to scan
+    - Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY
+    - Bluetooth: SCO: Fix not validating setsockopt user input
+    - Bluetooth: RFCOMM: Fix not validating setsockopt user input
+    - Bluetooth: L2CAP: Fix not validating setsockopt user input
+    - Bluetooth: ISO: Fix not validating setsockopt user input
+    - Bluetooth: hci_sock: Fix not validating setsockopt user input
+    - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit
+    - netfilter: complete validation of user input
+    - net/mlx5: SF, Stop waiting for FW as teardown was called
+    - net/mlx5: Register devlink first under devlink lock
+    - net/mlx5: offset comp irq index in name by one
+    - net/mlx5: Properly link new fs rules into the tree
+    - net/mlx5: Correctly compare pkt reformat ids
+    - net/mlx5e: RSS, Block changing channels number when RXFH is configured
+    - net/mlx5e: Fix mlx5e_priv_init() cleanup flow
+    - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
+    - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit
+    - net: sparx5: fix wrong config being used when reconfiguring PCS
+    - Revert "s390/ism: fix receive message buffer allocation"
+    - net: dsa: mt7530: trap link-local frames regardless of ST Port State
+    - af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
+    - af_unix: Fix garbage collector racing against connect()
+    - net: ena: Fix potential sign extension issue
+    - net: ena: Wrong missing IO completions check order
+    - net: ena: Fix incorrect descriptor free behavior
+    - net: ena: Set tx_info->xdpf value to NULL
+    - drm/xe/display: Fix double mutex initialization
+    - drm/xe/hwmon: Cast result to output precision on left shift of operand
+    - tracing: hide unused ftrace_event_id_fops
+    - iommu/vt-d: Fix wrong use of pasid config
+    - iommu/vt-d: Allocate local memory for page request queue
+    - iommu/vt-d: Fix WARN_ON in iommu probe path
+    - io_uring: refactor DEFER_TASKRUN multishot checks
+    - io_uring: disable io-wq execution of multishot NOWAIT requests
+    - btrfs: qgroup: correctly model root qgroup rsv in convert
+    - btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
+    - btrfs: record delayed inode root in transaction
+    - btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans
+    - io_uring/net: restore msg_control on sendzc retry
+    - kprobes: Fix possible use-after-free issue on kprobe registration
+    - fs/proc: remove redundant comments from /proc/bootconfig
+    - fs/proc: Skip bootloader comment if no embedded kernel parameters
+    - scsi: sg: Avoid sg device teardown race
+    - scsi: sg: Avoid race in error handling & drop bogus warn
+    - accel/ivpu: Check return code of ipc->lock init
+    - accel/ivpu: Fix PCI D0 state entry in resume
+    - accel/ivpu: Put NPU back to D3hot after failed resume
+    - accel/ivpu: Return max freq for DRM_IVPU_PARAM_CORE_CLOCK_RATE
+    - accel/ivpu: Fix deadlock in context_xa
+    - drm/vmwgfx: Enable DMA mappings with SEV
+    - drm/i915/vrr: Disable VRR when using bigjoiner
+    - drm/amdkfd: Reset GPU on queue preemption failure
+    - drm/ast: Fix soft lockup
+    - drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
+    - drm/client: Fully protect modes[] with dev->mode_config.mutex
+    - drm/msm/dp: fix runtime PM leak on disconnect
+    - drm/msm/dp: fix runtime PM leak on connect failure
+    - drm/amdgpu/umsch: reinitialize write pointer in hw init
+    - arm64: dts: imx8qm-ss-dma: fix can lpcg indices
+    - arm64: dts: imx8-ss-dma: fix can lpcg indices
+    - arm64: dts: imx8-ss-dma: fix adc lpcg indices
+    - arm64: dts: imx8-ss-conn: fix usb lpcg indices
+    - arm64: dts: imx8-ss-dma: fix pwm lpcg indices
+    - arm64: dts: imx8-ss-lsio: fix pwm lpcg indices
+    - arm64: dts: imx8-ss-dma: fix spi lpcg indices
+    - vhost: Add smp_rmb() in vhost_vq_avail_empty()
+    - vhost: Add smp_rmb() in vhost_enable_notify()
+    - perf/x86: Fix out of range data
+    - x86/cpu: Actually turn off mitigations by default for
+      SPECULATION_MITIGATIONS=n
+    - selftests/timers/posix_timers: Reimplement check_timer_distribution()
+    - selftests: timers: Fix posix_timers ksft_print_msg() warning
+    - selftests: timers: Fix abs() warning in posix_timers test
+    - selftests: kselftest: Mark functions that unconditionally call exit() as
+      __noreturn
+    - x86/apic: Force native_apic_mem_read() to use the MOV instruction
+    - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
+    - selftests: kselftest: Fix build failure with NOLIBC
+    - kernfs: annotate different lockdep class for of->mutex of writable files
+    - x86/bugs: Fix return type of spectre_bhi_state()
+    - x86/bugs: Fix BHI documentation
+    - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
+    - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
+    - x86/bugs: Fix BHI handling of RRSBA
+    - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
+    - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
+    - [Config] updateconfigs to remove obsolete SPECTRE_BHI_AUTO
+    - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with
+      CONFIG_MITIGATION_SPECTRE_BHI
+    - [Config] updateconfigs to enable new MITIGATION_SPECTRE_BHI
+    - drm/i915/cdclk: Fix CDCLK programming order when pipes are active
+    - drm/i915/psr: Disable PSR when bigjoiner is used
+    - drm/i915: Disable port sync when bigjoiner is used
+    - drm/i915: Disable live M/N updates when using bigjoiner
+    - drm/amdgpu: Reset dGPU if suspend got aborted
+    - drm/amdgpu: always force full reset for SOC21
+    - drm/amdgpu: fix incorrect number of active RBs for gfx11
+    - drm/amdgpu: differentiate external rev id for gfx 11.5.0
+    - drm/amd/display: Program VSC SDP colorimetry for all DP sinks >= 1.4
+    - drm/amd/display: Set VSC SDP Colorimetry same way for MST and SST
+    - drm/amd/display: Do not recursively call manual trigger programming
+    - drm/amd/display: Return max resolution supported by DWB
+    - drm/amd/display: always reset ODM mode in context when adding first plane
+    - drm/amd/display: fix disable otg wa logic in DCN316
+    - Linux 6.8.7
+  * Noble update: v6.8.6 upstream stable release (LP: #2065899)
+    - amdkfd: use calloc instead of kzalloc to avoid integer overflow
+    - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
+    - wifi: rtw89: fix null pointer access when abort scan
+    - bnx2x: Fix firmware version string character counts
+    - net: stmmac: dwmac-starfive: Add support for JH7100 SoC
+    - net: phy: phy_device: Prevent nullptr exceptions on ISR
+    - wifi: rtw89: pci: validate RX tag for RXQ and RPQ
+    - wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor
+    - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
+    - wifi: iwlwifi: pcie: Add the PCI device id for new hardware
+    - arm64: dts: qcom: qcm6490-idp: Add definition for three LEDs
+    - net: dsa: qca8k: put MDIO controller OF node if unavailable
+    - arm64: dts: qcom: qrb2210-rb1: disable cluster power domains
+    - printk: For @suppress_panic_printk check for other CPU in panic
+    - panic: Flush kernel log buffer at the end
+    - dump_stack: Do not get cpu_sync for panic CPU
+    - wifi: iwlwifi: pcie: Add new PCI device id and CNVI
+    - cpuidle: Avoid potential overflow in integer multiplication
+    - ARM: dts: rockchip: fix rk3288 hdmi ports node
+    - ARM: dts: rockchip: fix rk322x hdmi ports node
+    - arm64: dts: rockchip: fix rk3328 hdmi ports node
+    - arm64: dts: rockchip: fix rk3399 hdmi ports node
+    - net: add netdev_lockdep_set_classes() to virtual drivers
+    - arm64: dts: qcom: qcs6490-rb3gen2: Declare GCC clocks protected
+    - pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
+    - pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain
+    - ACPI: resource: Add IRQ override quirk for ASUS ExpertBook B2502FBA
+    - ionic: set adminq irq affinity
+    - net: skbuff: add overflow debug check to pull/push helpers
+    - firmware: tegra: bpmp: Return directly after a failed kzalloc() in
+      get_filename()
+    - wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro
+    - wifi: mt76: mt7915: add locking for accessing mapped registers
+    - wifi: mt76: mt7996: disable AMSDU for non-data frames
+    - wifi: mt76: mt7996: add locking for accessing mapped registers
+    - ACPI: x86: Move acpi_quirk_skip_serdev_enumeration() out of
+      CONFIG_X86_ANDROID_TABLETS
+    - ACPI: x86: Add DELL0501 handling to acpi_quirk_skip_serdev_enumeration()
+    - pstore/zone: Add a null pointer check to the psz_kmsg_read
+    - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
+    - net: pcs: xpcs: Return EINVAL in the internal methods
+    - dma-direct: Leak pages on dma_set_decrypted() failure
+    - wifi: ath11k: decrease MHI channel buffer length to 8KB
+    - iommu/arm-smmu-v3: Hold arm_smmu_asid_lock during all of attach_dev
+    - cpufreq: Don't unregister cpufreq cooling on CPU hotplug
+    - overflow: Allow non-type arg to type_max() and type_min()
+    - wifi: iwlwifi: Add missing MODULE_FIRMWARE() for *.pnvm
+    - wifi: cfg80211: check A-MSDU format more carefully
+    - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
+    - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
+    - btrfs: send: handle path ref underflow in header iterate_inode_ref()
+    - ice: use relative VSI index for VFs instead of PF VSI number
+    - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
+    - netdev: let netlink core handle -EMSGSIZE errors
+    - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
+    - Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922
+    - Bluetooth: Add new quirk for broken read key length on ATS2851
+    - drm/vc4: don't check if plane->state->fb == state->fb
+    - drm/ci: uprev mesa version: fix kdl commit fetch
+    - drm/amdgpu: Skip do PCI error slot reset during RAS recovery
+    - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
+    - drm: panel-orientation-quirks: Add quirk for GPD Win Mini
+    - ASoC: SOF: amd: Optimize quirk for Valve Galileo
+    - drm/ttm: return ENOSPC from ttm_bo_mem_space v3
+    - scsi: ufs: qcom: Avoid re-init quirk when gears match
+    - drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz
+    - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
+    - sysv: don't call sb_bread() with pointers_lock held
+    - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
+    - drm/amd/display: Disable idle reallow as part of command/gpint execution
+    - isofs: handle CDs with bad root inode but good Joliet root directory
+    - ASoC: Intel: sof_rt5682: dmi quirk cleanup for mtl boards
+    - ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710)
+      laptops
+    - rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
+    - rcu-tasks: Repair RCU Tasks Trace quiescence check
+    - Julia Lawall reported this null pointer dereference, this should fix it.
+    - media: sta2x11: fix irq handler cast
+    - ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block
+      counter
+    - drm/panel: simple: Add BOE BP082WX1-100 8.2" panel
+    - x86/vdso: Fix rethunk patching for vdso-image-{32,64}.o
+    - ASoC: Intel: avs: Populate board selection with new I2S entries
+    - ext4: add a hint for block bitmap corrupt state in mb_groups
+    - ext4: forbid commit inconsistent quota data when errors=remount-ro
+    - drm/amd/display: Fix nanosec stat overflow
+    - accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings
+    - i2c: designware: Fix RX FIFO depth define on Wangxun 10Gb NIC
+    - HID: input: avoid polling stylus battery on Chromebook Pompom
+    - drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()
+    - drm: Check output polling initialized before disabling
+    - drm: Check polling initialized before enabling in
+      drm_helper_probe_single_connector_modes
+    - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned
+      int
+    - PCI: Disable D3cold on Asus B1400 PCI-NVMe bridge
+    - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
+    - libperf evlist: Avoid out-of-bounds access
+    - crypto: iaa - Fix async_disable descriptor leak
+    - input/touchscreen: imagis: Correct the maximum touch area value
+    - drivers/perf: hisi: Enable HiSilicon Erratum 162700402 quirk for HIP09
+    - block: prevent division by zero in blk_rq_stat_sum()
+    - RDMA/cm: add timeout to cm_destroy_id wait
+    - Input: imagis - use FIELD_GET where applicable
+    - Input: allocate keycode for Display refresh rate toggle
+    - platform/x86: acer-wmi: Add support for Acer PH16-71
+    - platform/x86: acer-wmi: Add predator_v4 module parameter
+    - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi
+      Vi8 tablet
+    - perf/x86/amd/lbr: Discard erroneous branch entries
+    - ALSA: hda/realtek: Add quirk for Lenovo Yoga 9 14IMH9
+    - ktest: force $buildonly = 1 for 'make_warnings_file' test type
+    - Input: xpad - add support for Snakebyte GAMEPADs
+    - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent
+      environment
+    - tools: iio: replace seekdir() in iio_generic_buffer
+    - bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state
+    - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in
+      kernfs_find_and_get_node_by_id()
+    - usb: typec: ucsi: Add qcm6490-pmic-glink as needing PDOS quirk
+    - thunderbolt: Calculate DisplayPort tunnel bandwidth after DPRX capabilities
+      read
+    - usb: gadget: uvc: refactor the check for a valid buffer in the pump worker
+    - usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR
+    - usb: typec: ucsi: Limit read size on v1.2
+    - serial: 8250_of: Drop quirk fot NPCM from 8250_port
+    - thunderbolt: Keep the domain powered when USB4 port is in redrive mode
+    - usb: typec: tcpci: add generic tcpci fallback compatible
+    - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
+    - ASoC: amd: yc: Fix non-functional mic on ASUS M7600RE
+    - thermal/of: Assume polling-delay(-passive) 0 when absent
+    - ASoC: soc-core.c: Skip dummy codec when adding platforms
+    - x86/xen: attempt to inflate the memory balloon on PVH
+    - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
+    - io_uring: clear opcode specific data for an early failure
+    - modpost: fix null pointer dereference
+    - drivers/nvme: Add quirks for device 126f:2262
+    - fbmon: prevent division by zero in fb_videomode_from_videomode()
+    - ALSA: hda/realtek: Add quirks for some Clevo laptops
+    - drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
+    - gcc-plugins/stackleak: Avoid .head.text section
+    - media: mediatek: vcodec: Fix oops when HEVC init fails
+    - media: mediatek: vcodec: adding lock to protect decoder context list
+    - media: mediatek: vcodec: adding lock to protect encoder context list
+    - randomize_kstack: Improve entropy diffusion
+    - platform/x86/intel/hid: Don't wake on 5-button releases
+    - platform/x86: intel-vbtn: Update tablet mode switch at end of probe
+    - nouveau: fix devinit paths to only handle display on GSP.
+    - Bluetooth: btintel: Fixe build regression
+    - net: mpls: error out if inner headers are not set
+    - VMCI: Fix possible memcpy() run-time warning in
+      vmci_datagram_invoke_guest_handler()
+    - x86/vdso: Fix rethunk patching for vdso-image-x32.o too
+    - Revert "drm/amd/amdgpu: Fix potential ioremap() memory leaks in
+      amdgpu_device_init()"
+    - Linux 6.8.6
+  * Noble update: v6.8.5 upstream stable release (LP: #2065400)
+    - scripts/bpf_doc: Use silent mode when exec make cmd
+    - xsk: Don't assume metadata is always requested in TX completion
+    - s390/bpf: Fix bpf_plt pointer arithmetic
+    - bpf, arm64: fix bug in BPF_LDX_MEMSX
+    - dma-buf: Fix NULL pointer dereference in sanitycheck()
+    - arm64: bpf: fix 32bit unconditional bswap
+    - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
+    - nfsd: Fix error cleanup path in nfsd_rename()
+    - tools: ynl: fix setting presence bits in simple nests
+    - mlxbf_gige: stop PHY during open() error paths
+    - wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF
+    - wifi: iwlwifi: mvm: rfi: fix potential response leaks
+    - wifi: iwlwifi: mvm: include link ID when releasing frames
+    - ALSA: hda: cs35l56: Set the init_done flag before component_add()
+    - ice: Refactor FW data type and fix bitmap casting issue
+    - ice: fix memory corruption bug with suspend and rebuild
+    - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
+    - igc: Remove stale comment about Tx timestamping
+    - drm/xe: Remove unused xe_bo->props struct
+    - drm/xe: Add exec_queue.sched_props.job_timeout_ms
+    - drm/xe/guc_submit: use jiffies for job timeout
+    - drm/xe/queue: fix engine_class bounds check
+    - drm/xe/device: fix XE_MAX_GT_PER_TILE check
+    - drm/xe/device: fix XE_MAX_TILES_PER_DEVICE check
+    - dpll: indent DPLL option type by a tab
+    - s390/qeth: handle deferred cc1
+    - net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
+    - tcp: properly terminate timers for kernel sockets
+    - net: wwan: t7xx: Split 64bit accesses to fix alignment issues
+    - drm/rockchip: vop2: Remove AR30 and AB30 format support
+    - selftests: vxlan_mdb: Fix failures with old libnet
+    - gpiolib: Fix debug messaging in gpiod_find_and_request()
+    - ACPICA: debugger: check status of acpi_evaluate_object() in
+      acpi_db_walk_for_fields()
+    - net: hns3: fix index limit to support all queue stats
+    - net: hns3: fix kernel crash when devlink reload during pf initialization
+    - net: hns3: mark unexcuted loopback test result as UNEXECUTED
+    - tls: recv: process_rx_list shouldn't use an offset with kvec
+    - tls: adjust recv return with async crypto and failed copy to userspace
+    - tls: get psock ref after taking rxlock to avoid leak
+    - mlxbf_gige: call request_irq() after NAPI initialized
+    - drm/amd/display: Update P010 scaling cap
+    - drm/amd/display: Send DTBCLK disable message on first commit
+    - bpf: Protect against int overflow for stack access size
+    - cifs: Fix duplicate fscache cookie warnings
+    - netfilter: nf_tables: reject destroy command to remove basechain hooks
+    - netfilter: nf_tables: reject table flag and netdev basechain updates
+    - netfilter: nf_tables: skip netdev hook unregistration if table is dormant
+    - iommu: Validate the PASID in iommu_attach_device_pasid()
+    - net: bcmasp: Bring up unimac after PHY link up
+    - net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips
+    - Octeontx2-af: fix pause frame configuration in GMP mode
+    - inet: inet_defrag: prevent sk release while still in use
+    - drm/i915: Stop doing double audio enable/disable on SDVO and g4x+ DP
+    - drm/i915/display: Disable AuxCCS framebuffers if built for Xe
+    - drm/i915/xelpg: Extend some workarounds/tuning to gfx version 12.74
+    - drm/i915/mtl: Update workaround 14018575942
+    - drm/i915: Do not print 'pxp init failed with 0' when it succeed
+    - dm integrity: fix out-of-range warning
+    - modpost: do not make find_tosym() return NULL
+    - kbuild: make -Woverride-init warnings more consistent
+    - mm/treewide: replace pud_large() with pud_leaf()
+    - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be
+      mapped."
+    - gpio: cdev: sanitize the label before requesting the interrupt
+    - RISC-V: KVM: Fix APLIC setipnum_le/be write emulation
+    - RISC-V: KVM: Fix APLIC in_clrip[x] read emulation
+    - KVM: arm64: Fix host-programmed guest events in nVHE
+    - KVM: arm64: Fix out-of-IPA space translation fault handling
+    - selinux: avoid dereference of garbage after mount failure
+    - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
+    - x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
+    - x86/bpf: Fix IP after emitting call depth accounting
+    - Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT"
+    - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
+    - Bluetooth: qca: fix device-address endianness
+    - Bluetooth: add quirk for broken address properties
+    - Bluetooth: hci_event: set the conn encrypted before conn establishes
+    - Bluetooth: Fix TOCTOU in HCI debugfs implementation
+    - netfilter: nf_tables: release batch on table validation from abort path
+    - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
+    - selftests: mptcp: join: fix dev in check_endpoint
+    - net/rds: fix possible cp null dereference
+    - net: usb: ax88179_178a: avoid the interface always configured as random
+      address
+    - net: mana: Fix Rx DMA datasize and skb_over_panic
+    - vsock/virtio: fix packet delivery to tap device
+    - netfilter: nf_tables: reject new basechain after table flag update
+    - netfilter: nf_tables: flush pending destroy work before exit_net release
+    - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
+    - netfilter: nf_tables: discard table flag update with pending basechain
+      deletion
+    - netfilter: validate user input for expected length
+    - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
+    - bpf, sockmap: Prevent lock inversion deadlock in map delete elem
+    - mptcp: prevent BPF accessing lowat from a subflow socket.
+    - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for
+      !SRSO
+    - KVM: arm64: Use TLBI_TTL_UNKNOWN in __kvm_tlb_flush_vmid_range()
+    - KVM: arm64: Ensure target address is granule-aligned for range TLBI
+    - net/sched: act_skbmod: prevent kernel-infoleak
+    - net: dsa: sja1105: Fix parameters order in sja1110_pcs_mdio_write_c45()
+    - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()
+    - net: stmmac: fix rx queue priority assignment
+    - net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping
+    - net: txgbe: fix i2c dev name cannot match clkdev
+    - net: fec: Set mac_managed_pm during probe
+    - net: phy: micrel: Fix potential null pointer dereference
+    - net: dsa: mv88e6xxx: fix usable ports on 88e6020
+    - selftests: net: gro fwd: update vxlan GRO test expectations
+    - gro: fix ownership transfer
+    - idpf: fix kernel panic on unknown packet types
+    - ice: fix enabling RX VLAN filtering
+    - i40e: Fix VF MAC filter removal
+    - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-
+      wildcard addresses.
+    - erspan: make sure erspan_base_hdr is present in skb->head
+    - selftests: reuseaddr_conflict: add missing new line at the end of the output
+    - tcp: Fix bind() regression for v6-only wildcard and v4(-mapped-v6) non-
+      wildcard addresses.
+    - ax25: fix use-after-free bugs caused by ax25_ds_del_timer
+    - e1000e: Workaround for sporadic MDI error on Meteor Lake systems
+    - ipv6: Fix infinite recursion in fib6_dump_done().
+    - mlxbf_gige: stop interface during shutdown
+    - r8169: skip DASH fw status checks when DASH is disabled
+    - udp: do not accept non-tunnel GSO skbs landing in a tunnel
+    - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
+    - udp: prevent local UDP tunnel packets from being GROed
+    - octeontx2-af: Fix issue with loading coalesced KPU profiles
+    - octeontx2-pf: check negative error code in otx2_open()
+    - octeontx2-af: Add array index check
+    - i40e: fix i40e_count_filters() to count only active/new filters
+    - i40e: fix vf may be used uninitialized in this function warning
+    - i40e: Enforce software interrupt during busy-poll exit
+    - drm/amd: Flush GFXOFF requests in prepare stage
+    - e1000e: Minor flow correction in e1000_shutdown function
+    - e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue
+    - mean_and_variance: Drop always failing tests
+    - net: ravb: Let IP-specific receive function to interrogate descriptors
+    - net: ravb: Always process TX descriptor ring
+    - net: ravb: Always update error counters
+    - KVM: SVM: Use unsigned integers when dealing with ASIDs
+    - KVM: SVM: Add support for allowing zero SEV ASIDs
+    - selftests: mptcp: connect: fix shellcheck warnings
+    - selftests: mptcp: use += operator to append strings
+    - mptcp: don't account accept() of non-MPC client as fallback to TCP
+    - 9p: Fix read/write debug statements to report server reply
+    - ASoC: wm_adsp: Fix missing mutex_lock in wm_adsp_write_ctl()
+    - ASoC: cs42l43: Correct extraction of data pointer in suspend/resume
+    - riscv: mm: Fix prototype to avoid discarding const
+    - riscv: hwprobe: do not produce frtace relocation
+    - drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported
+    - block: count BLK_OPEN_RESTRICT_WRITES openers
+    - RISC-V: Update AT_VECTOR_SIZE_ARCH for new AT_MINSIGSTKSZ
+    - ASoC: amd: acp: fix for acp pdm configuration check
+    - regmap: maple: Fix cache corruption in regcache_maple_drop()
+    - ALSA: hda: cs35l56: Add ACPI device match tables
+    - drm/panfrost: fix power transition timeout warnings
+    - nouveau/uvmm: fix addr/range calcs for remap operations
+    - drm/prime: Unbreak virtgpu dma-buf export
+    - ASoC: rt5682-sdw: fix locking sequence
+    - ASoC: rt711-sdca: fix locking sequence
+    - ASoC: rt711-sdw: fix locking sequence
+    - ASoC: rt712-sdca-sdw: fix locking sequence
+    - ASoC: rt722-sdca-sdw: fix locking sequence
+    - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
+    - spi: s3c64xx: Extract FIFO depth calculation to a dedicated macro
+    - spi: s3c64xx: sort headers alphabetically
+    - spi: s3c64xx: explicitly include <linux/bits.h>
+    - spi: s3c64xx: remove else after return
+    - spi: s3c64xx: define a magic value
+    - spi: s3c64xx: allow full FIFO masks
+    - spi: s3c64xx: determine the fifo depth only once
+    - spi: s3c64xx: Use DMA mode from fifo size
+    - ASoC: amd: acp: fix for acp_init function error handling
+    - regmap: maple: Fix uninitialized symbol 'ret' warnings
+    - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
+    - scsi: mylex: Fix sysfs buffer lengths
+    - scsi: sd: Unregister device if device_add_disk() failed in sd_probe()
+    - Revert "ALSA: emu10k1: fix synthesizer sample playback position and caching"
+    - drm/i915/dp: Fix DSC state HW readout for SST connectors
+    - cifs: Fix caching to try to do open O_WRONLY as rdwr on server
+    - spi: mchp-pci1xxx: Fix a possible null pointer dereference in
+      pci1xxx_spi_probe
+    - s390/pai: fix sampling event removal for PMU device driver
+    - thermal: gov_power_allocator: Allow binding without cooling devices
+    - thermal: gov_power_allocator: Allow binding without trip points
+    - drm/i915/gt: Limit the reserved VM space to only the platforms that need it
+    - ata: sata_mv: Fix PCI device ID table declaration compilation warning
+    - ASoC: SOF: amd: fix for false dsp interrupts
+    - SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
+    - riscv: use KERN_INFO in do_trap
+    - riscv: Fix warning by declaring arch_cpu_idle() as noinstr
+    - riscv: Disable preemption when using patch_map()
+    - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
+    - lib/stackdepot: move stack_record struct definition into the header
+    - stackdepot: rename pool_index to pool_index_plus_1
+    - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
+    - Revert "drm/amd/display: Send DTBCLK disable message on first commit"
+    - gpio: cdev: check for NULL labels when sanitizing them for irqs
+    - gpio: cdev: fix missed label sanitizing in debounce_setup()
+    - ksmbd: don't send oplock break if rename fails
+    - ksmbd: validate payload size in ipc response
+    - ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
+    - ALSA: hda: Add pplcllpl/u members to hdac_ext_stream
+    - ALSA: hda/realtek - Fix inactive headset mic jack
+    - ALSA: hda/realtek: Add sound quirks for Lenovo Legion slim 7 16ARHA7 models
+    - ALSA: hda/realtek: cs35l41: Support ASUS ROG G634JYR
+    - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with
+      microphone
+    - io_uring/kbuf: get rid of lower BGID lists
+    - io_uring/kbuf: get rid of bl->is_ready
+    - io_uring/kbuf: protect io_buffer_list teardown with a reference
+    - io_uring/rw: don't allow multishot reads without NOWAIT support
+    - io_uring: use private workqueue for exit work
+    - io_uring/kbuf: hold io_buffer_list reference over mmap
+    - ASoC: SOF: Add dsp_max_burst_size_in_ms member to snd_sof_pcm_stream
+    - ASoC: SOF: ipc4-topology: Save the DMA maximum burst size for PCMs
+    - ASoC: SOF: Intel: hda-pcm: Use dsp_max_burst_size_in_ms to place constraint
+    - ASoC: SOF: Intel: hda: Implement get_stream_position (Linear Link Position)
+    - ASoC: SOF: Intel: mtl/lnl: Use the generic get_stream_position callback
+    - ASoC: SOF: Introduce a new callback pair to be used for PCM delay reporting
+    - ASoC: SOF: Intel: Set the dai/host get frame/byte counter callbacks
+    - ASoC: SOF: Intel: hda-common-ops: Do not set the get_stream_position
+      callback
+    - ASoC: SOF: ipc4-pcm: Use the snd_sof_pcm_get_dai_frame_counter() for
+      pcm_delay
+    - ASoC: SOF: Remove the get_stream_position callback
+    - ASoC: SOF: ipc4-pcm: Move struct sof_ipc4_timestamp_info definition locally
+    - ASoC: SOF: ipc4-pcm: Combine the SOF_IPC4_PIPE_PAUSED cases in pcm_trigger
+    - ASoC: SOF: ipc4-pcm: Invalidate the stream_start_offset in PAUSED state
+    - ASoC: SOF: sof-pcm: Add pointer callback to sof_ipc_pcm_ops
+    - ASoC: SOF: ipc4-pcm: Correct the delay calculation
+    - ASoC: SOF: Intel: hda: Compensate LLP in case it is not reset
+    - driver core: Introduce device_link_wait_removal()
+    - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
+    - of: module: prevent NULL pointer dereference in vsnprintf()
+    - x86/mm/pat: fix VM_PAT handling in COW mappings
+    - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
+    - x86/coco: Require seeding RNG with RDRAND on CoCo systems
+    - perf/x86/intel/ds: Don't clear ->pebs_data_cfg for the last PEBS event
+    - riscv: Fix vector state restore in rt_sigreturn()
+    - arm64/ptrace: Use saved floating point state type to determine SVE layout
+    - mm/secretmem: fix GUP-fast succeeding on secretmem folios
+    - selftests/mm: include strings.h for ffsl
+    - s390/entry: align system call table on 8 bytes
+    - riscv: Fix spurious errors from __get/put_kernel_nofault
+    - riscv: process: Fix kernel gp leakage
+    - smb: client: fix UAF in smb2_reconnect_server()
+    - smb: client: guarantee refcounted children from parent session
+    - smb: client: refresh referral without acquiring refpath_lock
+    - smb: client: handle DFS tcons in cifs_construct_tcon()
+    - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex
+    - smb3: retrying on failed server close
+    - smb: client: fix potential UAF in cifs_debug_files_proc_show()
+    - smb: client: fix potential UAF in cifs_stats_proc_write()
+    - smb: client: fix potential UAF in cifs_stats_proc_show()
+    - smb: client: fix potential UAF in cifs_dump_full_key()
+    - smb: client: fix potential UAF in smb2_is_valid_oplock_break()
+    - smb: client: fix potential UAF in smb2_is_valid_lease_break()
+    - smb: client: fix potential UAF in is_valid_oplock_break()
+    - smb: client: fix potential UAF in smb2_is_network_name_deleted()
+    - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
+    - drm/i915/mst: Limit MST+DSC to TGL+
+    - drm/i915/mst: Reject FEC+MST on ICL
+    - drm/i915/dp: Fix the computation for compressed_bpp for DISPLAY < 13
+    - drm/i915/gt: Disable HW load balancing for CCS
+    - drm/i915/gt: Do not generate the command streamer for all the CCS
+    - drm/i915/gt: Enable only one CCS for compute workload
+    - drm/xe: Use ring ops TLB invalidation for rebinds
+    - drm/xe: Rework rebinding
+    - Revert "x86/mpparse: Register APIC address only once"
+    - bpf: put uprobe link's path and task in release callback
+    - bpf: support deferring bpf_link dealloc to after RCU grace period
+    - efi/libstub: Add generic support for parsing mem_encrypt=
+    - x86/boot: Move mem_encrypt= parsing to the decompressor
+    - x86/sme: Move early SME kernel encryption handling into .head.text
+    - x86/sev: Move early startup code into .head.text section
+    - Linux 6.8.5
+  * CVE-2024-26926
+    - binder: check offset alignment in binder_get_object()
+  * CVE-2024-26922
+    - drm/amdgpu: validate the parameters of bo mapping operations more clearly
+  * CVE-2024-26924
+    - netfilter: nft_set_pipapo: do not free live element
 
- -- Jacob Martin <jacob.martin@canonical.com>  Fri, 21 Jun 2024 14:16:55 -0500
+ -- Jacob Martin <jacob.martin@canonical.com>  Fri, 21 Jun 2024 14:23:55 -0500
 
 linux-nvidia (6.8.0-1008.8) noble; urgency=medium