Github Highlights

This week's work centers on a large-scale kernel CVE backporting program for the 6.1 and 6.12 LTS series, a CPU tuning and frequency framework overhaul, and sustained board, SoC, and vendor-kernel maintenance across the Rockchip, MediaTek, and Allwinner ecosystems.

The CVE effort dominates activity, with more than one hundred reviewed backport sets landing across 6.1 and 6.12 covering networking (mac80211, cfg80211, Bluetooth, netfilter, mlx5, stmmac), filesystems (btrfs, f2fs, ext4, smb client, ksmbd), virtualization (KVM SVM/SEV, vhost, virtio), graphics (amdgpu, i915, vc4, msm), and core subsystems (bpf, mm, io_uring). Supporting this is a new fasttrack CI pipeline with per-series sharding, build-time header-change verification, triage records for not-affected verdicts, and tagged releases on each patch set change. The configurations repository has been updated to enable kernel CVE fixes across builds.

Platform work introduces a new per-cluster cpufreq and tuning-profile system that replaces cpufrequtils with image-level profiles, exposed through configng. Board additions include the Seeed reComputer Industrial RK3576, Boardcon EM3588, CZ.NIC Turris Omnia, Hardkernel ODROID-U2/U3/X2, and the DshanPi A1 CM5, while Rockchip vendor kernels gain NPU enablement on Orange Pi CM5, ArmSoM CM5-IO and Rock 4D, along with CAN-FD support for the RK3576. MediaTek Filogic boards move to the 6.18 LTS kernel with U-Boot 2026.10, the Anbernic RG DS and RG Vita Pro receive charge-screen and USB fixes, and the UWE5622 wireless driver sees fixes for memory corruption, teardown, and TCP ACK stalls.

#Armbian #EmbeddedLinux #Rockchip #KernelSecurity #CVE #MediaTek

Changes

• CVE-2026-98432: backport fix for pinned / vendor kernel. by @EvilOlaf in armbian/build#11153
• .github: generate_CODEOWNERS: point family rules at config/sources/families. by @iav in armbian/build#11128
• Add Boardcon EM3588 board support. by @boardcon-arm in armbian/build#11089
• add NPU support for orangepi-cm5. by @ECO1AI in armbian/build#11131
• Add reComputer Industrial RK3576. by @mingzhangqun in armbian/armbian.github.io#526
• Add RM66 vendor CLI and XFCE images. by @RiPetitor in armbian/armbian.github.io#505
• Add Seeed Studio reComputer Industrial RK3576 board. by @mingzhangqun in armbian/build#11136
• Add Seeed Studio reComputer Industrial RK3576 support. by @mingzhangqun in armbian/linux-rockchip#603
• add support for CSI cameras:. by @ECO1AI in armbian/build#11138
• Add support for CZ.NIC Turris Omnia (Armada 385). by @BKPepe in armbian/build#11137
• Add support for Hardkernel ODROID-U2/U3/X2 (Exynos4412). by @BKPepe in armbian/build#11132
• Add Torder R10D board image and vendor logo. by @JasonYANG170 in armbian/armbian.github.io#529
• anbernic-rg-ds: show a charge screen instead of booting when a charger is plugged in. by @crackerjacques in armbian/build#11106
• anbernic-rg-vita-pro: fix USB host and charging on edge 7.3 (sgm41542). by @crackerjacques in armbian/build#11125
• anbernic-rg-vita-pro: off-charge: port the RG DS charge-screen fixes. by @crackerjacques in armbian/build#11126
• armsom-cm5-io: add edge kernel with mainline U-Boot. by @gahingwoo in armbian/build#11097
• armsom-cm5-io: enable the NPU on edge, with the RK3576 NPU series. by @gahingwoo in armbian/build#11162
• ath10k: add QCA988X hw2.0 firmware. by @BKPepe in armbian/firmware#155
• attempts: 6.1 batch 1, 38 not affected and 4 failed. by @igorpecovnik in armbian/cve#86
• attempts: 6.1 batch 2, 31 not affected and 2 failed. by @igorpecovnik in armbian/cve#92
• attempts: 6.1 batch 5, 21 not affected and 13 failed. by @igorpecovnik in armbian/cve#120
• attempts: 6.1 batch 6, 9 not affected and 4 failed. by @igorpecovnik in armbian/cve#131
• attempts: 6.1 batch 7, 2 not affected and 1 failed. by @igorpecovnik in armbian/cve#147
• attempts: 6.1 batch 8, 4 not affected and 2 failed. by @igorpecovnik in armbian/cve#157
• attempts: 6.1 batch 9, 3 not affected. by @igorpecovnik in armbian/cve#163
• attempts: 6.1 batches 3-4, 47 not affected and 7 failed. by @igorpecovnik in armbian/cve#107
• attempts: 6.12 batch 1, 22 not affected and 3 failed. by @igorpecovnik in armbian/cve#43
• attempts: 6.12 batch 2, 18 not affected and 2 left out. by @igorpecovnik in armbian/cve#49
• attempts: 6.12 batch 3, 11 not affected and 3 failed. by @igorpecovnik in armbian/cve#58
• attempts: 6.12 batches 4-5, 9 not affected and 1 failed. by @igorpecovnik in armbian/cve#79
• attempts: record triage of failed 6.1 and 6.12 attempts. by @igorpecovnik in armbian/cve#188
• aw859a: stop advertising park mode in bt_configure_pskey.ini. by @lukaszsobala in armbian/firmware#154
• board-images: add ODROID-U2, ODROID-U3 and ODROID-X2. by @BKPepe in armbian/armbian.github.io#520
• board-images: add Turris MOX. by @BKPepe in armbian/armbian.github.io#527
• board-images: add Turris Omnia and the CZ.NIC logo. by @BKPepe in armbian/armbian.github.io#521
• board-images: replace blurry ODROID-N2L image. by @BKPepe in armbian/armbian.github.io#525
• board: firefly-aibox-k3: promote to community supported. by @leoppark94 in armbian/build#11140
• boards/radxa-dragon-q6a: install EDK2 package once the Armbian repo is on. by @SuperKali in armbian/build#11182
• boards: add DshanPi A1 CM5 on the Waveshare CM5-to-Pi5-Adapter. by @sckiyo in armbian/build#11096
• build check: blame a header change, not the patch on the file. by @igorpecovnik in armbian/cve#171
• build check: compile .c files that include a changed header. by @igorpecovnik in armbian/cve#94
• build-framework: document TUNING_PROFILE and per-cluster CPU settings. by @igorpecovnik in armbian/documentation#1708
• build-test: stack new cve/ backports in made order. by @igorpecovnik in armbian/cve#44
• build-test: test a cve/ series on top of the patch set. by @igorpecovnik in armbian/cve#31
• build-test: test the cve/ set as the change has it. by @igorpecovnik in armbian/cve#172
• ci: build-test: start one shard per changed series. by @igorpecovnik in armbian/cve#26
• ci: bump actions, keep them current with Dependabot. by @igorpecovnik in armbian/cve#25
• ci: fasttrack: check out the branch tip. by @igorpecovnik in armbian/cve#63
• ci: fasttrack: free the runner below 40 GB. by @igorpecovnik in armbian/cve#37
• ci: fasttrack: pass dispatch inputs through env. by @igorpecovnik in armbian/cve#179
• ci: fasttrack: publish only results of the current cve/ and tool. by @igorpecovnik in armbian/cve#180
• ci: fasttrack: verify each series in its own job. by @igorpecovnik in armbian/cve#52
• ci: run the fasttrack unit tests. by @igorpecovnik in armbian/cve#203
• ci: start fasttrack on a merged backport, fix concurrency. by @igorpecovnik in armbian/cve#51
• configs: enable kernel CVE fixes. by @igorpecovnik in armbian/ci#105
• cpufreq, tuning: per-cluster board settings and a tuning profile per image. by @igorpecovnik in armbian/build#11157
• cpufreq, tuning: replace cpufrequtils and fixed tuning with board settings and profiles. by @igorpecovnik in armbian/build#11156
• cve --unpatched: resolve each CVE only on the series where it is open. by @igorpecovnik in armbian/cve#178
• cve: 6.1 backports, af_unix, ipv4, ipv6, neighbour, netlink, codel, skbuff, af_packet, mctp. by @igorpecovnik in armbian/cve#139
• cve: 6.1 backports, amd display, amdgpu, vc4, i915, altera EDAC. by @igorpecovnik in armbian/cve#153
• cve: 6.1 backports, amdgpu, amd display, v3d, ALSA, ext4, f2fs, ocfs2. by @igorpecovnik in armbian/cve#118
• cve: 6.1 backports, amdgpu, virtio-gpu, gud, cirrus, fbdev, ACPI. by @igorpecovnik in armbian/cve#130
• cve: 6.1 backports, arm64 ioremap_prot. by @igorpecovnik in armbian/cve#105
• cve: 6.1 backports, arm64 percpu, kprobes, tracing, bpf, keys, ALSA, sd_zbc, EDAC, rtc, HID. by @igorpecovnik in armbian/cve#143
• cve: 6.1 backports, bcmsysport, mlx5, stmmac, sparx5, mt7915. by @igorpecovnik in armbian/cve#151
• cve: 6.1 backports, Bluetooth mgmt, ipc mqueue, netlink. by @igorpecovnik in armbian/cve#161
• cve: 6.1 backports, Bluetooth, sock, seg6, GSO, virtio_net, vsock, flowtable. by @igorpecovnik in armbian/cve#150
• cve: 6.1 backports, bpf LSM return range. by @igorpecovnik in armbian/cve#85
• cve: 6.1 backports, bpf, calipso, erofs. by @igorpecovnik in armbian/cve#184
• cve: 6.1 backports, bpf, perf, sched, reboot, iommu/amd, PCI sysfs. by @igorpecovnik in armbian/cve#126
• cve: 6.1 backports, cfg80211, ath11k, ath9k_htc. by @igorpecovnik in armbian/cve#145
• cve: 6.1 backports, cpuset, namespace, btrfs, xfs, power supply, bpf. by @igorpecovnik in armbian/cve#152
• cve: 6.1 backports, crypto, iommu, amd-pmc, fbcon, usb phy, atomisp. by @igorpecovnik in armbian/cve#99
• cve: 6.1 backports, dm-raid, iommu, amdkfd, gve, msm, thermal, fman, imx6, i2c. by @igorpecovnik in armbian/cve#84
• cve: 6.1 backports, f2fs node footer, most core. by @igorpecovnik in armbian/cve#100
• cve: 6.1 backports, f2fs shutdown, bpf pkt_data, rdma netdev. by @igorpecovnik in armbian/cve#91
• cve: 6.1 backports, f2fs, btrfs, hfs, ceph, dm, sysfs, ksmbd. by @igorpecovnik in armbian/cve#97
• cve: 6.1 backports, generic driver_override for 6 buses, x_tables. by @igorpecovnik in armbian/cve#108
• cve: 6.1 backports, gpio, genirq, imx mailbox, arm_scmi, 8250_of, i3c. by @igorpecovnik in armbian/cve#116
• cve: 6.1 backports, gtp/tunnels, qdisc, bridge, rtnetlink, wireguard, nf_tables, 8021q, rxrpc, nl80211. by @igorpecovnik in armbian/cve#103
• cve: 6.1 backports, igmp, ipv6 mcast, udp6, bridge mcast, altnames, rtnetlink. by @igorpecovnik in armbian/cve#123
• cve: 6.1 backports, kcm, espintcp, xfrm, nf_tables, bpf, wifi. by @igorpecovnik in armbian/cve#98
• cve: 6.1 backports, KVM SVM, nVMX, SEV, async PF. by @igorpecovnik in armbian/cve#155
• cve: 6.1 backports, KVM, bpf, perf, page_owner, nx, PCI sysfs. by @igorpecovnik in armbian/cve#115
• cve: 6.1 backports, lan966x, xprtrdma, irdma, mac80211, iwlwifi, mt7921, Bluetooth ISO, rtl8723bs, af_unix, ksmbd. by @igorpecovnik in armbian/cve#114
• cve: 6.1 backports, libata, KVM SVM, efa, kprobes, iio, bpf, nx, ksmbd, xfs, ctxfi, rtl8723bs, netfs, coresight, amdkfd, amdgpu. by @igorpecovnik in armbian/cve#104
• cve: 6.1 backports, mac80211. by @igorpecovnik in armbian/cve#138
• cve: 6.1 backports, md noio, dm-integrity keyed discard (reworked). by @igorpecovnik in armbian/cve#156
• cve: 6.1 backports, mlx5e uplink and teardown. by @igorpecovnik in armbian/cve#101
• cve: 6.1 backports, mm, block, md, ext4, f2fs, btrfs. by @igorpecovnik in armbian/cve#87
• cve: 6.1 backports, mm, btrfs, io_uring, virtiofs, udmabuf. by @igorpecovnik in armbian/cve#83
• cve: 6.1 backports, msm, vc4, amdkfd, amdgpu, virtio-gpu. by @igorpecovnik in armbian/cve#141
• cve: 6.1 backports, mtk_eth_soc, smb client. by @igorpecovnik in armbian/cve#158
• cve: 6.1 backports, nfsd, btrfs, configfs, ublk. by @igorpecovnik in armbian/cve#125
• cve: 6.1 backports, nvme, iio, ice1712, usx2y, erdma, vhost-vdpa, mmc hsq. by @igorpecovnik in armbian/cve#127
• cve: 6.1 backports, own design, needs review: ASoC SOF Intel. by @igorpecovnik in armbian/cve#181
• cve: 6.1 backports, own design, needs review: bpf trampoline. by @igorpecovnik in armbian/cve#154
• cve: 6.1 backports, own design, needs review: ima, ipheth, cc2520, vgic, nfsd, io_uring, bpf, ksmbd. by @igorpecovnik in armbian/cve#128
• cve: 6.1 backports, own design, needs review: inet frags, nvme, md. by @igorpecovnik in armbian/cve#185
• cve: 6.1 backports, own design, needs review: khugepaged. by @igorpecovnik in armbian/cve#162
• cve: 6.1 backports, own design, needs review: mac80211, skb defer, bpf, nvme. by @igorpecovnik in armbian/cve#146
• cve: 6.1 backports, own design, needs review: workqueue disable API. by @igorpecovnik in armbian/cve#197
• cve: 6.1 backports, own design, reviewed: resctrl, cxl, zram, cec. by @igorpecovnik in armbian/cve#119
• cve: 6.1 backports, pmbus, atmel-mci, vmbus, nvme, amd-pstate-ut. by @igorpecovnik in armbian/cve#117
• cve: 6.1 backports, sctp, stmmac, btintel, L2CAP, tipc, xfrm, dsa, vsock. by @igorpecovnik in armbian/cve#124
• cve: 6.1 backports, smb client and ksmbd. by @igorpecovnik in armbian/cve#88
• cve: 6.1 backports, smb client, btrfs, hugetlb, damon, ntfs3, io_uring, bootconfig. by @igorpecovnik in armbian/cve#142
• cve: 6.1 backports, SMB client, f2fs, udf. by @igorpecovnik in armbian/cve#187
• cve: 6.1 backports, smb client, ksmbd. by @igorpecovnik in armbian/cve#129
• cve: 6.1 backports, tiny SRCU irq_work, x86-64 copy_user. by @igorpecovnik in armbian/cve#106
• cve: 6.1 backports, virtio_ring, vdpa, vhost, vduse, KVM, swiotlb. by @igorpecovnik in armbian/cve#140
• cve: 6.1 backports, vxlan, stmmac, ice, bcmgenet, hci_qca, mtk_eth_soc, macsec, mt7530, gve. by @igorpecovnik in armbian/cve#144
• cve: 6.1 backports, wifi, mlx5e, amdgpu, drm, hyperv fb, driver core, bpf, riscv. by @igorpecovnik in armbian/cve#89
• cve: 6.1 backports, zswap. by @igorpecovnik in armbian/cve#90
• cve: 6.1 fixes from the second review of 357 backports. by @igorpecovnik in armbian/cve#202
• cve: 6.1 fuse export fix, drop CVE-2026-43115. by @igorpecovnik in armbian/cve#167
• cve: 6.1, 6.12 backports, own design, needs review: conntrack helper refcount. by @igorpecovnik in armbian/cve#190
• cve: 6.12 backports, 8021q and netfilter. by @igorpecovnik in armbian/cve#45
• cve: 6.12 backports, amdgpu, xe, vc4, i915. by @igorpecovnik in armbian/cve#77
• cve: 6.12 backports, amdkfd, msm, rzv2h watchdog, btrfs, fs. by @igorpecovnik in armbian/cve#69
• cve: 6.12 backports, arm64 driver, coresight, i3c, iommu. by @igorpecovnik in armbian/cve#47
• cve: 6.12 backports, arm64, CXL, ctxfi, amdgpu. by @igorpecovnik in armbian/cve#42
• cve: 6.12 backports, bcmgenet, stmmac, fbnic, hci_qca, erdma. by @igorpecovnik in armbian/cve#67
• cve: 6.12 backports, block, mm, sched, bpf, KVM. by @igorpecovnik in armbian/cve#40
• cve: 6.12 backports, Bluetooth and veth. by @igorpecovnik in armbian/cve#41
• cve: 6.12 backports, bpf trampoline. by @igorpecovnik in armbian/cve#74
• cve: 6.12 backports, bpf verifier and pci-sysfs. by @igorpecovnik in armbian/cve#59
• cve: 6.12 backports, bpf, arm64 KVM, powerpc nx. by @igorpecovnik in armbian/cve#46
• cve: 6.12 backports, bpf, blk-mq, cpuset, namespace, ipc. by @igorpecovnik in armbian/cve#75
• cve: 6.12 backports, bpf, sched, x86 kprobes, KVM. by @igorpecovnik in armbian/cve#68
• cve: 6.12 backports, cfg80211 and mac80211. by @igorpecovnik in armbian/cve#71
• cve: 6.12 backports, ext4, btrfs, smb client, io_uring, xsk. by @igorpecovnik in armbian/cve#54
• cve: 6.12 backports, f2fs and ksmbd. by @igorpecovnik in armbian/cve#39
• cve: 6.12 backports, ipv6, neighbour, af_unix, netlink, codel, vsock. by @igorpecovnik in armbian/cve#66
• cve: 6.12 backports, irdma, nvme, iio, mt76, renesas. by @igorpecovnik in armbian/cve#57
• cve: 6.12 backports, ksmbd. by @igorpecovnik in armbian/cve#65
• cve: 6.12 backports, KVM SEV, resctrl, amd-pstate, riscv. by @igorpecovnik in armbian/cve#55
• cve: 6.12 backports, net core, virtio_net, stmmac, gve, macsec. by @igorpecovnik in armbian/cve#76
• cve: 6.12 backports, netfs and f2fs. by @igorpecovnik in armbian/cve#50
• cve: 6.12 backports, nouveau, amdgpu, tas2781, perf. by @igorpecovnik in armbian/cve#48
• cve: 6.12 backports, serial, nvme, power_supply, gpio, riscv, KVM SEV, regulator. by @igorpecovnik in armbian/cve#78
• cve: 6.12 backports, smb client. by @igorpecovnik in armbian/cve#70
• cve: 6.12 backports, smb client and KVM SVM. by @igorpecovnik in armbian/cve#80
• cve: 6.12 backports, xe, amdgpu, v3d, fbdev. by @igorpecovnik in armbian/cve#56
• cve: 6.12 fixes from the second review of shipped backports. by @igorpecovnik in armbian/cve#194
• cve: 6.18 fixes from the second review of shipped backports. by @igorpecovnik in armbian/cve#193
• cve: add missing mainline follow-ups to 6.1 and 6.12 backports. by @igorpecovnik in armbian/cve#198
• cve: complete CVE-2026-98180 on 6.1 and 6.12 with the dma-fence name helpers. by @igorpecovnik in armbian/cve#199
• cve: keep an earlier backport on a partial result. by @igorpecovnik in armbian/cve#174
• cve: manual backports for 12 CVEs on 6.18 and 7.3. by @igorpecovnik in armbian/cve#24
• cve: rebase 10 backports on the 6.18 patch set. by @igorpecovnik in armbian/cve#29
• cve: restore upstream trailers in 7 backports on 6.12. by @igorpecovnik in armbian/cve#61
• cve: second review of not-affected verdicts, CVE-2026-98718 6.12. by @igorpecovnik in armbian/cve#170
• d1: follow the Linux 7.3 stable branch. by @khaliforce in armbian/build#11152
• docs: short README, move how it works to DEVELOPMENT.md. by @igorpecovnik in armbian/cve#28
• dshanpi-r1: move to U-Boot v2026.07, add mainline DTS and the R1+. by @sckiyo in armbian/build#10892
• dtoverlays: support a list of overlay prefixes. by @lukaszsobala in armbian/configng#1067
• eltay-rm66: add PDM microphone overlay. by @RiPetitor in armbian/build#11122
• eltay-rm66: add PWM fan control. by @RiPetitor in armbian/build#11123
• eltay-rm66: update U-Boot to v2026.10. by @RiPetitor in armbian/build#11147
• engine: place a carried mainline pick before its backport set. by @igorpecovnik in armbian/cve#208
• extensions/ffmpeg-v4l2-request: fix config-phase abort and declare the prebuilt's full runtime. by @Novice-PG in armbian/build#11124
• fasttrack: no build-test run on the bot's patches PR. by @igorpecovnik in armbian/cve#135
• fasttrack: only igorpecovnik may run Claude. by @igorpecovnik in armbian/cve#132
• fasttrack: reject stray .orig and .rej files. by @igorpecovnik in armbian/cve#112
• fasttrack: run Claude in environment claude. by @igorpecovnik in armbian/cve#133
• fasttrack: use an absolute work package path. by @igorpecovnik in armbian/cve#23
• feat(api): attach companion files from file_companion. by @SuperKali in armbian/website#65
• Featured feed: one dated JSON for website, imager and motd. by @igorpecovnik in armbian/armbian.github.io#208
• filogic: add edge kernel to BPI-R4. by @igorpecovnik in armbian/build#11173
• filogic: move BPI-R4 to U-Boot v2026.10, halt on shutdown. by @igorpecovnik in armbian/build#11169
• filogic: move current kernel to 6.18 LTS for BPI-R4 and BPI-R3 Mini. by @igorpecovnik in armbian/build#11170
• filogic: remove unused legacy kernel. by @igorpecovnik in armbian/build#11174
• fingerprint: include attempts.json. by @igorpecovnik in armbian/cve#173
• followups: list mainline follow-ups the patch sets miss. by @igorpecovnik in armbian/cve#195
• generate-armbian-images-json: detect companion files generically. by @SuperKali in armbian/armbian.github.io#530
• genio-7.3: disable ASP FSM parity to fix Ethernet reset loops. by @rbrok in armbian/build#11167
• git-ref2info: fetch the Makefile from any mirror of the source. by @iav in armbian/build#11172
• git-ref2info: leave the Makefile version out on unknown git hosts. by @iav in armbian/build#11143
• Github Action: Add input for userpatch configuration name suffix. by @pykpkg47 in armbian/build#11146
• Integrate patches from framework directly into 6.1 vendor source. by @EvilOlaf in armbian/linux-rockchip#607
• integrate patches from the framework directly into 6.12 vendor sources. by @EvilOlaf in armbian/linux-rockchip#606
• kernel-debs: image: skip dkms hook while headers are unconfigured. by @lukaszsobala in armbian/build#11119
• kernel: 6.1: zswap: do not allocate from atomic pool. by @igorpecovnik in armbian/build#11171
• Lenovo y700 gen4 next. by @retro98boy in armbian/build#11104
• lore: take a stable-list post only when it backports the fix itself. by @igorpecovnik in armbian/cve#200
• map: key assets on their redi_url. by @SuperKali in armbian/armbian-router#44
• net: can: rockchip: backport CAN-FD support for rk3576_can + TX queue wedge fix. by @mingzhangqun in armbian/linux-rockchip#610
• odroidm1: u-boot: enable EFI_RT_VOLATILE_STORE (runtime SetVariable). by @excavador in armbian/build#11148
• orangepizero3w: update boot0 for 1GB boards. by @JackHuang021 in armbian/build#11142
• Patch maint: rewrite various patches against upstream or to align properly at least. by @EvilOlaf in armbian/build#11155
• prune: retire a set whose patches change each other's lines. by @igorpecovnik in armbian/cve#176
• radxa-nio-12l: patch lk.bin to fix 4-GiB fastboot flashing barrier. by @rbrok in armbian/mtkbin#1
• radxa-rock-4d: enable the NPU on edge. by @gahingwoo in armbian/build#11163
• README: add workflow picture. by @igorpecovnik in armbian/cve#113
• release: tag a release each time the patch set changes. by @igorpecovnik in armbian/cve#33
• report: a "not affected" verdict does not hold when the set adds the bug. by @igorpecovnik in armbian/cve#192
• report: list reviewed "not affected" results with their reason. by @igorpecovnik in armbian/cve#34
• rk35xx vendor: build the PCA953X GPIO expander into the kernel. by @Mkiring in armbian/build#11179
• rk35xx vendor: drop the unused CANFD_RK3576 fragment symbol. by @mingzhangqun in armbian/build#11176
• rockchip vendor: drop rkr patches from framework and merge directly into armbian/linux-rockchip. by @EvilOlaf in armbian/build#11159
• rockchip64-7.3: add Orange Pi 5 Max AP6611S WiFi overlay. by @a1ext in armbian/build#11141
• rockchip64-7.3: RK3399: make hibernation work (video decoder and GPU). by @iav in armbian/build#11139
• rockchip64-7.3: rk3528: keep the idle-only pmdomain workaround on RK3528. by @iav in armbian/build#11134
• rockchip64: helios64: drop two DT patches that contradict the schematic. by @iav in armbian/build#11120
• rockchip: rk8xx: power off instead of halting on RK3288. by @ohayoyogi in armbian/build#11115
• rockchip: support a list of overlay prefixes. by @lukaszsobala in armbian/build#11060
• rootfs, bsp: do not fail when /etc/sysctl.conf is missing. by @igorpecovnik in armbian/build#11164
• run: a backport carries a fix that is not in the mirror. by @igorpecovnik in armbian/cve#175
• run: one patch set per series, with reviewed cve/ backports. by @igorpecovnik in armbian/cve#27
• run: rebuild backports rejected with a mainline pick. by @igorpecovnik in armbian/cve#166
• run: retry backport sets after a build rejection. by @igorpecovnik in armbian/cve#159
• series: add LTS 6.12 and 6.1. by @igorpecovnik in armbian/cve#35
• skill: contribute without the claude CLI, retry stale backports. by @igorpecovnik in armbian/cve#32
• Spacemit k1 current redux. by @pyavitz in armbian/build#11035
• tuning_profile: add CPU frequency control per cluster. by @igorpecovnik in armbian/configng#1082
• u-boot: point the remaining links at u-boot-project.org. by @iav in armbian/build#11121
• uefi-arm64-6.18: fix HiKey960 USB role-switch endpoint. by @syscl in armbian/build#11181
• Update dependency oras-project/oras to v1.3.6. by @renovate[bot] in armbian/build#11150
• UWE5622 fixes: memory corruption, teardown bugs, start-up retry, TCP ACK stall. by @lukaszsobala in armbian/uwe5622#28
• work package: leave superseded cve/ sets out of the stack. by @igorpecovnik in armbian/cve#177
• zswap: do not allocate from atomic pool. by @igorpecovnik in armbian/linux-rockchip#611
• Automatic refresh repository README. by @igorpecovnik in armbian/armbian.github.io#433
• Automatic refresh repository README. by @igorpecovnik in armbian/build#10245