staging/nbd, branch master

unetd: cli: add helper function for getting path to temp files

2026-02-15T09:45:40Z

Signed-off-by: Felix Fietkau

unetd: cli: split generating network key from signing

2026-02-15T09:45:40Z

Preparation for reusing the key for more operations Signed-off-by: Felix Fietkau

unetd: cli: fix error reporting in the apply command

2026-02-15T09:45:40Z

Pass errors during config signing to the user Signed-off-by: Felix Fietkau

gcc/binutils: disable sysv style hash tables for generated binaries

2026-02-15T09:45:40Z

GNU hash tables are always preferred by musl, so the sysv ones are completely unused and only waste space. Reduces image size by ~1.4% Signed-off-by: Felix Fietkau

ramips: add support for actiontec web7200

2026-02-15T09:45:40Z

Signed-off-by: John Crispin

wireguard-tools: rewrite proto handler in ucode

2026-02-15T09:45:06Z

This fixes automatic config reload on peer changes Signed-off-by: Felix Fietkau

netifd: update to Git HEAD (2026-02-15)

2026-02-15T08:32:19Z

Adds ucode proto handler support 51fa9ed6d4d6 interface-ip: fix fortify build error ca33316f8552 proto-ext: extract shared protocol handler code from proto-shell.c 2098f29810e8 proto: add config_load callback to proto_handler aaf5b194b15d proto-ucode: add ucode protocol handler infrastructure 3fc8b83c8b62 proto-ucode: add ucode proto handler scripts c6122254eb70 examples: sync wireless scripts with openwrt Signed-off-by: Felix Fietkau

wifi-scripts: netifd: fix null dereference in config_init for missing devices

2026-02-15T08:32:19Z

Add optional chaining when accessing device config in the wifi-iface loop to handle cases where a referenced device doesn't exist. Signed-off-by: Felix Fietkau

kernel: backport crypto selftests for some ciphersuites

2026-02-15T00:25:54Z

FIPS 140-3 recommends that all crypto implementations should be tested before first use. Testmanager performs initial tests based on existing test vectors. Not all algorithms have defined test vectors, so to improve this situation, this commit backports recently added test vectors for three cipher suites: * authenc(hmac(md5),cbc(des3_ede)), * authenc(hmac(sha224),cbc(aes)), * authenc(hmac(sha384),cbc(aes)). These vectors were calculated using a software implementation and then double-checked on Mediatek MT7981 (safexcel) and NXP P2020 (talitos). Both platforms passed self-tests. Signed-off-by: Aleksander Jan Bajkowski Link: https://github.com/openwrt/openwrt/pull/21970 Signed-off-by: Hauke Mehrtens

wifi-scripts: ucode: allow sae_pwe to be modified for AP mode

2026-02-15T00:18:18Z

Some Android devices have issues with H2E causing downgrades to PSK when using WPA2/3. With WPA3 it doesn't work reliably whatsoever. My Samsung A55/6 for example has the following behavior: daemon.info hostapd: lan5g: STA IEEE 802.11: authenticated daemon.notice hostapd: SAE: indicates support for SAE H2E, but did not use it daemon.info hostapd: lan2g: STA IEEE 802.11: authenticated daemon.info hostapd: lan2g: STA IEEE 802.11: associated (aid 1) daemon.notice hostapd: lan5g: Prune association for daemon.notice hostapd: lan2g: AP-STA-CONNECTED auth_alg=open daemon.info hostapd: lan2g: STA RADIUS: starting accounting session 8234C696AAC1AE7D daemon.info hostapd: lan2g: STA WPA: pairwise key handshake completed (RSN) daemon.notice hostapd: lan2g: EAPOL-4WAY-HS-COMPLETED This is also brought up in the issue: https://github.com/openwrt/openwrt/issues/9963 Ultimately this allows users to have the option to at the very least disable H2E. Unrelated: a minor cleanup was done so that ieee80211w uses set_default instead. There is no functional change on that front. Signed-off-by: Rany Hany Link: https://github.com/openwrt/openwrt/pull/22021 Signed-off-by: Hauke Mehrtens