The following patches are queued for QEMU stable v10.0.4: https://gitlab.com/qemu-project/qemu/-/commits/staging-10.0
Patch freeze is 2025-09-06, and the release is planned for 2025-09-08: https://wiki.qemu.org/Planning/10.0 Please respond here or CC qemu-sta...@nongnu.org on any additional patches you think should (or shouldn't) be included in the release. The changes which are staging for inclusion, with the original commit hash from master branch, are given below the bottom line. Thanks! /mjt -------------------------------------- 01 e74aad9f81cc Peter Maydell: host-utils: Drop workaround for buggy Apple Clang __builtin_subcll() 02 b8882becd572 Michael Tokarev: hw/display/qxl-render.c: fix qxl_unpack_chunks() chunk size calculation 03 feea87cd6b64 Paolo Bonzini: target/i386: fix width of third operand of VINSERTx128 04 3cdd990aa920 Peter Maydell: linux-user/aarch64: Clear TPIDR2_EL0 when delivering signals 05 99870aff907b Peter Maydell: linux-user/aarch64: Support TPIDR2_MAGIC signal frame record 06 8d6c7de1cc71 Alex Bennée: docs/user: clarify user-mode expects the same OS 07 e895095c78ab Philippe Mathieu-Daudé: target/mips: Only update MVPControl.EVP bit if executed by master VPE 08 2bfcd27e00a4 Luc Michel: hw/net/cadence_gem: fix register mask initialization 09 2865bf1c5795 Pierrick Bouvier: system/physmem: fix use-after-free with dispatch 10 653a75a9d7f9 Michael Tokarev: roms/Makefile: fix npcmNxx_bootrom build rules 11 e111ffe48b29 Daniel Henrique Barboza: linux-user/strace.list: add riscv_hwprobe entry 12 16aa7771afea Daniel Henrique Barboza: target/riscv: do not call GETPC() in check_ret_from_m_mode() 13 30ef718423e8 Xu Lu: target/riscv: Fix exception type when VU accesses supervisor CSRs 14 77707bfdf871 Vac Chen: target/riscv: Fix pmp range wraparound on zero 15 b6f1244678be Yang Jialong: intc/riscv_aplic: Fix target register read when source is inactive 16 e443ba03361b Jay Chang: target/riscv: Restrict mideleg/medeleg/medelegh access to S-mode harts 17 86bc3a0abf10 Jay Chang: target/riscv: Restrict midelegh access to S-mode harts 18 caab7ac83507 Bibo Mao: target/loongarch: Fix valid virtual address checking 19 6fcf5ebafad6 Jonah Palmer: virtio: fix off-by-one and invalid access in virtqueue_ordered_fill 20 c1997099dc26 Hanna Czenczek: vhost: Do not abort on log-start error 21 d63c388dadb7 Hanna Czenczek: vhost: Do not abort on log-stop error 22 6071d13c6a37 Akihiko Odaki: virtio-net: Fix VLAN filter table reset timing 23 cad9aa6fbdcc Akihiko Odaki: pcie_sriov: Fix configuration and state synchronization 24 e8145dcd311b David Woodhouse: intel_iommu: Allow both Status Write and Interrupt Flag in QI wait 25 a7842d94067c Sairaj Kodilkar: hw/i386/amd_iommu: Move IOAPIC memory region initialization to the end 26 b10bd4bd17ac Zenghui Yu: hw/intc/arm_gicv3_kvm: Write all 1's to clear enable/active 27 35cca0f95ff5 Vacha Bhavsar: target/arm: Fix big-endian handling of NEON gdb remote debugging 28 97b3d732afec Vacha Bhavsar: target/arm: Fix handling of setting SVE registers from gdb 29 13ed972b4ce5 Jamin Lin: hw/ssi/aspeed_smc: Fix incorrect FMC_WDT2 register read on AST1030 30 cd9f752fee75 Alex Richardson: target/arm: add support for 64-bit PMCCNTR in AArch32 mode 31 0311a6edb9db Peter Maydell: scripts/make-release: Go back to cloning all the EDK2 submodules 32 b217d987a3c5 Michael Tokarev: qga: correctly write to /sys/power/state on linux 33 d973766e10 Michael Tokarev: Revert "i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]" 34 e68ec2980901 Xiaoyao Li: i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check 35 f985a1195ba2 Chuang Xu: i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16] 36 a62fef582995 Qian Wen: i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16] 37 4e5d58969ed6 Zhao Liu: target/i386/cpu: Move addressable ID encoding out of compat property in CPUID[0x1] 38 301fbbaf03fb Nicholas Piggin: ppc/xive: Fix xive trace event output 39 f0aab779418e Nicholas Piggin: ppc/xive: Report access size in XIVE TM operation error logs 40 f16697292add Glenn Miles: ppc/xive2: Fix calculation of END queue sizes 41 e8cf73b84987 Michael Kowal: ppc/xive2: Remote VSDs need to match on forwarding address 42 d1023a296c82 Nicholas Piggin: ppc/xive2: fix context push calculation of IPB priority 43 bde8c148bb22 Nicholas Piggin: ppc/xive: Fix PHYS NSR ring matching 44 576830428eea Michael Kowal: ppc/xive2: Reset Generation Flipped bit on END Cache Watch 45 8d373176181f Glenn Miles: ppc/xive2: Fix irq preempted by lower priority group irq 46 d4720a7faf4b Glenn Miles: ppc/xive2: Fix treatment of PIPR in CPPR update 47 c7ac771ee750 William Hu: ui/curses: Fix infinite loop on windows 48 e66644c48e96 WANG Rui: target/loongarch: Fix [X]VLDI raising exception incorrectly 49 31b737b19dca Klaus Jensen: hw/nvme: fix namespace attachment 50 bc0c24fdb157 Klaus Jensen: hw/nvme: revert CMIC behavior 51 53493c1f836f Keith Busch: hw/nvme: cap MDTS value for internal limitation 52 4af976ef398e Kevin Wolf: rbd: Fix .bdrv_get_specific_info implementation 53 c0df98ab1f3d Werner Fink: qemu-iotests: Ignore indentation in Killed messages 54 e262646e12ac Philippe Mathieu-Daudé: hw/sd/ssi-sd: Return noise (dummy byte) when no card connected 55 6ad034e71232 Sv. Lockal: mkvenv: Support pip 25.2 56 f757d9d90d19 Mauro Matteo Cascella: hw/uefi: clear uefi-vars buffer in uefi_vars_write callback 57 88e5a28d5aab Gerd Hoffmann: hw/uefi: return success for notifications 58 fc8ee8fe58ad Gerd Hoffmann: hw/uefi: check access for first variable 59 040237436f42 Gerd Hoffmann: hw/uefi: open json file in binary mode