Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.15.150 upstream stable release
       from git://git.kernel.org/

net/sched: Retire CBQ qdisc
UBUNTU: [Config] updateconfigs for NET_SCH_CBQ
net/sched: Retire ATM qdisc
UBUNTU: [Config] updateconfigs for NET_SCH_ATM
net/sched: Retire dsmark qdisc
UBUNTU: [Config] updateconfigs for NET_SCH_DSMARK
smb: client: fix potential OOBs in smb2_parse_contexts()
smb: client: fix parsing of SMB3.1.1 POSIX create context
sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
bpf: Merge printk and seq_printf VARARG max macros
bpf: Add struct for bin_args arg in bpf_bprintf_prepare
bpf: Do cleanup in bpf_bprintf_cleanup only when needed
bpf: Remove trace_printk_lock
userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
zonefs: Improve error handling
x86/fpu: Stop relying on userspace for info to fault in xsave buffer
sched/rt: Fix sysctl_sched_rr_timeslice intial value
sched/rt: Disallow writing invalid values to sched_rt_period_us
scsi: target: core: Add TMF to tmr_list handling
dmaengine: shdma: increase size of 'dev_id'
dmaengine: fsl-qdma: increase size of 'irq_name'
wifi: cfg80211: fix missing interfaces when dumping
wifi: mac80211: fix race condition on enabling fast-xmit
fbdev: savage: Error out if pixclock equals zero
fbdev: sis: Error out if pixclock equals zero
spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
ahci: asm1166: correct count of reported ports
ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
MIPS: reserve exception vector space ONLY ONCE
platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet
ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap 
corrupt
ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
dmaengine: ti: edma: Add some null pointer checks to the edma_probe
regulator: pwm-regulator: Add validity checks in continuous .get_voltage
nvmet-tcp: fix nvme tcp ida memory leak
ALSA: usb-audio: Check presence of valid altsetting control
ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
spi: sh-msiof: avoid integer overflow in constants
Input: xpad - add Lenovo Legion Go controllers
netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
ALSA: usb-audio: Ignore clock selector errors for single connection
nvme-fc: do not wait in vain when unloading module
nvmet-fcloop: swap the list_add_tail arguments
nvmet-fc: release reference on target port
nvmet-fc: defer cleanup using RCU properly
nvmet-fc: hold reference on hostport match
nvmet-fc: abort command when there is no binding
nvmet-fc: avoid deadlock on delete association path
nvmet-fc: take ref count on tgtport before delete assoc
ext4: correct the hole length returned by ext4_map_blocks()
Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
fs/ntfs3: Modified fix directory element type detection
fs/ntfs3: Improve ntfs_dir_count
fs/ntfs3: Correct hard links updating when dealing with DOS names
fs/ntfs3: Print warning while fixing hard links count
fs/ntfs3: Fix detected field-spanning write (size 8) of single field "le->name"
fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()
fs/ntfs3: Disable ATTR_LIST_ENTRY size check
fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache
fs/ntfs3: Prevent generic message "attempt to access beyond end of device"
fs/ntfs3: Correct function is_rst_area_valid
fs/ntfs3: Update inode->i_size after success write into compressed file
fs/ntfs3: Fix oob in ntfs_listxattr
wifi: mac80211: adding missing drv_mgd_complete_tx() call
efi: runtime: Fix potential overflow of soft-reserved region size
efi: Don't add memblocks for soft-reserved memory
hwmon: (coretemp) Enlarge per package core count limit
scsi: lpfc: Use unsigned type for num_sge
firewire: core: send bus reset promptly on gap count error
drm/amdgpu: skip to program GFXDEC registers for suspend abort
drm/amdgpu: reset gpu for s3 suspend abort case
virtio-blk: Ensure no requests in virtqueues before deleting vqs.
pmdomain: mediatek: fix race conditions with genpd
ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails
pmdomain: renesas: r8a77980-sysc: CR7 must be always on
erofs: fix lz4 inplace decompression
IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
drm/ttm: Fix an invalid freeing on already freed page in error path
dm-crypt: don't modify the data when using authenticated encryption
platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler
platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
PCI/MSI: Prevent MSI hardware interrupt number truncation
l2tp: pass correct message length to ip6_append_data
ARM: ep93xx: Add terminator to gpiod_lookup_table
Revert "x86/ftrace: Use alternative RET encoding"
x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
x86/ftrace: Use alternative RET encoding
x86/returnthunk: Allow different return thunks
Revert "x86/alternative: Make custom return thunk unconditional"
x86/alternative: Make custom return thunk unconditional
serial: amba-pl011: Fix DMA transmission in RS485 mode
usb: dwc3: gadget: Don't disconnect if not started
usb: cdnsp: blocked some cdns3 specific code
usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers
usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
usb: cdns3: fix memory double free when handle zero packet
usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
usb: roles: fix NULL pointer issue when put module's reference
usb: roles: don't get/set_role() when usb_role_switch is unregistered
mptcp: fix lockless access in subflow ULP diag
clk: imx: imx8mp: add shared clk gate for usb suspend clk
clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
mtd: rawnand: sunxi: Fix the size of the last OOB region
RISC-V: fix funct4 definition for c.jalr in parse_asm.h
Input: iqs269a - drop unused device node references
Input: iqs269a - configure device with a single block write
Input: iqs269a - increase interrupt handler return delay
clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
Input: ads7846 - don't report pressure for ads7845
clk: renesas: cpg-mssr: Remove superfluous check in resume code
clk: imx: avoid memory leak
Input: ads7846 - always set last command to PWRDOWN
Input: ads7846 - don't check penirq immediately for 7845
powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
powerpc/pseries/lparcfg: add missing RTAS retry status handling
powerpc/perf/hv-24x7: add missing RTAS retry status handling
powerpc/pseries/lpar: add missing RTAS retry status handling
MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
MIPS: vpe-mt: drop physical_memsize
vdpa/mlx5: Don't clear mr struct on destroy MR
ARM: dts: BCM53573: Drop nonexistent #usb-cells
RDMA/siw: Balance the reference of cep->kref in the error path
RDMA/siw: Correct wrong debug message
clk: linux/clk-provider.h: fix kernel-doc warnings and typos
platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
acpi: property: Let args be NULL in __acpi_node_get_property_reference
ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
perf beauty: Update copy of linux/socket.h with the kernel sources
tools/virtio: fix build
drm/amdgpu: init iommu after amdkfd device init
f2fs: don't set GC_FAILURE_PIN for background GC
f2fs: write checkpoint during FG_GC
drm/i915/dg1: Update DMC_DEBUG3 register
kernel/sched: Remove dl_boosted flag comment
cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
serial: 8250: Remove serial_rs485 sanitization from em485
clk: imx8mp: Add DISP2 pixel clock
clk: imx8mp: add clkout1/2 support
dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
net: ethernet: ti: add missing of_node_put before return
powerpc/rtas: make all exports GPL
powerpc/rtas: ensure 4KB alignment for rtas_data_buf
powerpc/eeh: Small refactor of eeh_handle_normal_event()
powerpc/eeh: Set channel state after notifying the drivers
PM: core: Redefine pm_ptr() macro
PM: core: Add new *_PM_OPS macros, deprecate old ones
mmc: jz4740: Use the new PM macros
mmc: mxc: Use the new PM macros
PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro
Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr()
Input: iqs269a - do not poll during suspend or resume
Input: iqs269a - do not poll during ATI
net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
netfilter: nf_tables: add rescheduling points during loop detection walks
debugobjects: Recheck debug_objects_enabled before reporting
nbd: Add the maximum limit of allocated index in nbd_dev_add
md: fix data corruption for raid456 when reshape restart while grow up
md/raid10: prevent soft lockup while flush writes
posix-timers: Ensure timer ID search-loop limit is valid
btrfs: add xxhash to fast checksum implementations
ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD 
version)
arm64: set __exception_irq_entry with __irq_entry as a default
arm64: mm: fix VA-range sanity check
sched/fair: Don't balance task to its current running CPU
wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range
bpf: Address KCSAN report on bpf_lru_list
devlink: report devlink_port_type_warn source device
wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
wifi: iwlwifi: mvm: avoid baid size integer overflow
exfat: support dynamic allocate bh for exfat_entry_set_cache
arm64: dts: rockchip: fix regulator name on rk3399-rock-4
arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
xhci: cleanup xhci_hub_control port references
xhci: move port specific items such as state completions to port structure
xhci: rename resume_done to resume_timestamp
xhci: clear usb2 resume related variables in one place.
xhci: decouple usb2 port resume and get_port_status request handling
xhci: track port suspend state correctly in unsuccessful resume cases
cifs: add a warning when the in-flight count goes negative
IB/hfi1: Fix a memleak in init_credit_return
RDMA/bnxt_re: Return error for SRQ resize
RDMA/irdma: Fix KASAN issue with tasklet
RDMA/irdma: Validate max_send_wr and max_recv_wr
RDMA/irdma: Set the CQ read threshold for GEN 1
RDMA/irdma: Add AE for too many RNRS
RDMA/srpt: Support specifying the srpt_service_guid parameter
RDMA/qedr: Fix qedr_create_user_qp error flow
arm64: dts: rockchip: set num-cs property for spi on px30
RDMA/srpt: fix function pointer cast warnings
bpf, scripts: Correct GPL license name
scsi: jazz_esp: Only build if SCSI core is builtin
nouveau: fix function cast warnings
net: stmmac: Fix incorrect dereference in interrupt handlers
ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
ata: libahci_platform: Convert to using devm bulk clocks API
ata: libahci_platform: Introduce reset assertion/deassertion methods
ata: ahci_ceva: fix error handling for Xilinx GT PHY support
bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
afs: Increase buffer size in afs_update_volume_status()
ipv6: sr: fix possible use-after-free and null-ptr-deref
packet: move from strlcpy with unused retval to strscpy
net: dev: Convert sa_data to flexible array in struct sockaddr
drm/nouveau/instmem: fix uninitialized_var.cocci warning
octeontx2-af: Consider the action set by PF
s390: use the correct count for __iowrite64_copy()
tls: rx: jump to a more appropriate label
tls: rx: drop pointless else after goto
tls: stop recv() if initial process_rx_list gave us non-DATA
netfilter: nf_tables: set dormant flag on hook register failure
netfilter: flowtable: simplify route logic
netfilter: nft_flow_offload: reset dst in route object after setting up flow
netfilter: nft_flow_offload: release dst in case direct xmit path is used
drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
drm/amd/display: Fix memory leak in dm_sw_fini()
i2c: imx: Add timer for handling the stop condition
i2c: imx: when being a target, mark the last read as processed
fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
arp: Prevent overflow in arp_req_get().
netfilter: nf_tables: fix scheduling-while-atomic splat
ext4: regenerate buddy after block freeing failed if under fc replay
ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
netfilter: nf_tables: can't schedule in nft_chain_validate
r8169: use new PM macros
Linux 5.15.150
UBUNTU: Upstream stable to v5.15.150

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Jammy)
     Importance: Medium
     Assignee: Manuel Diewald (diewald)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Jammy)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Jammy)
       Status: New => In Progress

** Changed in: linux (Ubuntu Jammy)
     Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v5.15.150 upstream stable release
         from git://git.kernel.org/
  
-             
+ net/sched: Retire CBQ qdisc
+ UBUNTU: [Config] updateconfigs for NET_SCH_CBQ
+ net/sched: Retire ATM qdisc
+ UBUNTU: [Config] updateconfigs for NET_SCH_ATM
+ net/sched: Retire dsmark qdisc
+ UBUNTU: [Config] updateconfigs for NET_SCH_DSMARK
+ smb: client: fix potential OOBs in smb2_parse_contexts()
+ smb: client: fix parsing of SMB3.1.1 POSIX create context
+ sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
+ PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
+ bpf: Merge printk and seq_printf VARARG max macros
+ bpf: Add struct for bin_args arg in bpf_bprintf_prepare
+ bpf: Do cleanup in bpf_bprintf_cleanup only when needed
+ bpf: Remove trace_printk_lock
+ userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
+ zonefs: Improve error handling
+ x86/fpu: Stop relying on userspace for info to fault in xsave buffer
+ sched/rt: Fix sysctl_sched_rr_timeslice intial value
+ sched/rt: Disallow writing invalid values to sched_rt_period_us
+ scsi: target: core: Add TMF to tmr_list handling
+ dmaengine: shdma: increase size of 'dev_id'
+ dmaengine: fsl-qdma: increase size of 'irq_name'
+ wifi: cfg80211: fix missing interfaces when dumping
+ wifi: mac80211: fix race condition on enabling fast-xmit
+ fbdev: savage: Error out if pixclock equals zero
+ fbdev: sis: Error out if pixclock equals zero
+ spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
+ ahci: asm1166: correct count of reported ports
+ ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
+ MIPS: reserve exception vector space ONLY ONCE
+ platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet
+ ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap 
corrupt
+ ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
+ ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
+ dmaengine: ti: edma: Add some null pointer checks to the edma_probe
+ regulator: pwm-regulator: Add validity checks in continuous .get_voltage
+ nvmet-tcp: fix nvme tcp ida memory leak
+ ALSA: usb-audio: Check presence of valid altsetting control
+ ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
+ spi: sh-msiof: avoid integer overflow in constants
+ Input: xpad - add Lenovo Legion Go controllers
+ netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
+ ALSA: usb-audio: Ignore clock selector errors for single connection
+ nvme-fc: do not wait in vain when unloading module
+ nvmet-fcloop: swap the list_add_tail arguments
+ nvmet-fc: release reference on target port
+ nvmet-fc: defer cleanup using RCU properly
+ nvmet-fc: hold reference on hostport match
+ nvmet-fc: abort command when there is no binding
+ nvmet-fc: avoid deadlock on delete association path
+ nvmet-fc: take ref count on tgtport before delete assoc
+ ext4: correct the hole length returned by ext4_map_blocks()
+ Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
+ fs/ntfs3: Modified fix directory element type detection
+ fs/ntfs3: Improve ntfs_dir_count
+ fs/ntfs3: Correct hard links updating when dealing with DOS names
+ fs/ntfs3: Print warning while fixing hard links count
+ fs/ntfs3: Fix detected field-spanning write (size 8) of single field 
"le->name"
+ fs/ntfs3: Add NULL ptr dereference checking at the end of 
attr_allocate_frame()
+ fs/ntfs3: Disable ATTR_LIST_ENTRY size check
+ fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache
+ fs/ntfs3: Prevent generic message "attempt to access beyond end of device"
+ fs/ntfs3: Correct function is_rst_area_valid
+ fs/ntfs3: Update inode->i_size after success write into compressed file
+ fs/ntfs3: Fix oob in ntfs_listxattr
+ wifi: mac80211: adding missing drv_mgd_complete_tx() call
+ efi: runtime: Fix potential overflow of soft-reserved region size
+ efi: Don't add memblocks for soft-reserved memory
+ hwmon: (coretemp) Enlarge per package core count limit
+ scsi: lpfc: Use unsigned type for num_sge
+ firewire: core: send bus reset promptly on gap count error
+ drm/amdgpu: skip to program GFXDEC registers for suspend abort
+ drm/amdgpu: reset gpu for s3 suspend abort case
+ virtio-blk: Ensure no requests in virtqueues before deleting vqs.
+ pmdomain: mediatek: fix race conditions with genpd
+ ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails
+ pmdomain: renesas: r8a77980-sysc: CR7 must be always on
+ erofs: fix lz4 inplace decompression
+ IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
+ drm/ttm: Fix an invalid freeing on already freed page in error path
+ dm-crypt: don't modify the data when using authenticated encryption
+ platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler
+ platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
+ KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
+ KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
+ gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
+ PCI/MSI: Prevent MSI hardware interrupt number truncation
+ l2tp: pass correct message length to ip6_append_data
+ ARM: ep93xx: Add terminator to gpiod_lookup_table
+ Revert "x86/ftrace: Use alternative RET encoding"
+ x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
+ x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
+ x86/ftrace: Use alternative RET encoding
+ x86/returnthunk: Allow different return thunks
+ Revert "x86/alternative: Make custom return thunk unconditional"
+ x86/alternative: Make custom return thunk unconditional
+ serial: amba-pl011: Fix DMA transmission in RS485 mode
+ usb: dwc3: gadget: Don't disconnect if not started
+ usb: cdnsp: blocked some cdns3 specific code
+ usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers
+ usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
+ usb: cdns3: fix memory double free when handle zero packet
+ usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
+ usb: roles: fix NULL pointer issue when put module's reference
+ usb: roles: don't get/set_role() when usb_role_switch is unregistered
+ mptcp: fix lockless access in subflow ULP diag
+ clk: imx: imx8mp: add shared clk gate for usb suspend clk
+ clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
+ clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
+ mtd: rawnand: sunxi: Fix the size of the last OOB region
+ RISC-V: fix funct4 definition for c.jalr in parse_asm.h
+ Input: iqs269a - drop unused device node references
+ Input: iqs269a - configure device with a single block write
+ Input: iqs269a - increase interrupt handler return delay
+ clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
+ Input: ads7846 - don't report pressure for ads7845
+ clk: renesas: cpg-mssr: Remove superfluous check in resume code
+ clk: imx: avoid memory leak
+ Input: ads7846 - always set last command to PWRDOWN
+ Input: ads7846 - don't check penirq immediately for 7845
+ powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
+ clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
+ clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
+ clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
+ powerpc/pseries/lparcfg: add missing RTAS retry status handling
+ powerpc/perf/hv-24x7: add missing RTAS retry status handling
+ powerpc/pseries/lpar: add missing RTAS retry status handling
+ MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
+ MIPS: vpe-mt: drop physical_memsize
+ vdpa/mlx5: Don't clear mr struct on destroy MR
+ ARM: dts: BCM53573: Drop nonexistent #usb-cells
+ RDMA/siw: Balance the reference of cep->kref in the error path
+ RDMA/siw: Correct wrong debug message
+ clk: linux/clk-provider.h: fix kernel-doc warnings and typos
+ platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
+ acpi: property: Let args be NULL in __acpi_node_get_property_reference
+ ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
+ tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
+ perf beauty: Update copy of linux/socket.h with the kernel sources
+ tools/virtio: fix build
+ drm/amdgpu: init iommu after amdkfd device init
+ f2fs: don't set GC_FAILURE_PIN for background GC
+ f2fs: write checkpoint during FG_GC
+ drm/i915/dg1: Update DMC_DEBUG3 register
+ kernel/sched: Remove dl_boosted flag comment
+ cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
+ serial: 8250: Remove serial_rs485 sanitization from em485
+ clk: imx8mp: Add DISP2 pixel clock
+ clk: imx8mp: add clkout1/2 support
+ dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
+ net: ethernet: ti: add missing of_node_put before return
+ powerpc/rtas: make all exports GPL
+ powerpc/rtas: ensure 4KB alignment for rtas_data_buf
+ powerpc/eeh: Small refactor of eeh_handle_normal_event()
+ powerpc/eeh: Set channel state after notifying the drivers
+ PM: core: Redefine pm_ptr() macro
+ PM: core: Add new *_PM_OPS macros, deprecate old ones
+ mmc: jz4740: Use the new PM macros
+ mmc: mxc: Use the new PM macros
+ PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro
+ Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr()
+ Input: iqs269a - do not poll during suspend or resume
+ Input: iqs269a - do not poll during ATI
+ net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
+ netfilter: nf_tables: add rescheduling points during loop detection walks
+ debugobjects: Recheck debug_objects_enabled before reporting
+ nbd: Add the maximum limit of allocated index in nbd_dev_add
+ md: fix data corruption for raid456 when reshape restart while grow up
+ md/raid10: prevent soft lockup while flush writes
+ posix-timers: Ensure timer ID search-loop limit is valid
+ btrfs: add xxhash to fast checksum implementations
+ ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
+ ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
+ ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 
AMD version)
+ arm64: set __exception_irq_entry with __irq_entry as a default
+ arm64: mm: fix VA-range sanity check
+ sched/fair: Don't balance task to its current running CPU
+ wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range
+ bpf: Address KCSAN report on bpf_lru_list
+ devlink: report devlink_port_type_warn source device
+ wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
+ wifi: iwlwifi: mvm: avoid baid size integer overflow
+ exfat: support dynamic allocate bh for exfat_entry_set_cache
+ arm64: dts: rockchip: fix regulator name on rk3399-rock-4
+ arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
+ arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
+ ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
+ ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
+ ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
+ ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
+ ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
+ ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
+ xhci: cleanup xhci_hub_control port references
+ xhci: move port specific items such as state completions to port structure
+ xhci: rename resume_done to resume_timestamp
+ xhci: clear usb2 resume related variables in one place.
+ xhci: decouple usb2 port resume and get_port_status request handling
+ xhci: track port suspend state correctly in unsuccessful resume cases
+ cifs: add a warning when the in-flight count goes negative
+ IB/hfi1: Fix a memleak in init_credit_return
+ RDMA/bnxt_re: Return error for SRQ resize
+ RDMA/irdma: Fix KASAN issue with tasklet
+ RDMA/irdma: Validate max_send_wr and max_recv_wr
+ RDMA/irdma: Set the CQ read threshold for GEN 1
+ RDMA/irdma: Add AE for too many RNRS
+ RDMA/srpt: Support specifying the srpt_service_guid parameter
+ RDMA/qedr: Fix qedr_create_user_qp error flow
+ arm64: dts: rockchip: set num-cs property for spi on px30
+ RDMA/srpt: fix function pointer cast warnings
+ bpf, scripts: Correct GPL license name
+ scsi: jazz_esp: Only build if SCSI core is builtin
+ nouveau: fix function cast warnings
+ net: stmmac: Fix incorrect dereference in interrupt handlers
+ ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
+ ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
+ ata: libahci_platform: Convert to using devm bulk clocks API
+ ata: libahci_platform: Introduce reset assertion/deassertion methods
+ ata: ahci_ceva: fix error handling for Xilinx GT PHY support
+ bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
+ afs: Increase buffer size in afs_update_volume_status()
+ ipv6: sr: fix possible use-after-free and null-ptr-deref
+ packet: move from strlcpy with unused retval to strscpy
+ net: dev: Convert sa_data to flexible array in struct sockaddr
+ drm/nouveau/instmem: fix uninitialized_var.cocci warning
+ octeontx2-af: Consider the action set by PF
+ s390: use the correct count for __iowrite64_copy()
+ tls: rx: jump to a more appropriate label
+ tls: rx: drop pointless else after goto
+ tls: stop recv() if initial process_rx_list gave us non-DATA
+ netfilter: nf_tables: set dormant flag on hook register failure
+ netfilter: flowtable: simplify route logic
+ netfilter: nft_flow_offload: reset dst in route object after setting up flow
+ netfilter: nft_flow_offload: release dst in case direct xmit path is used
+ drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
+ drm/amd/display: Fix memory leak in dm_sw_fini()
+ i2c: imx: Add timer for handling the stop condition
+ i2c: imx: when being a target, mark the last read as processed
+ fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
+ arp: Prevent overflow in arp_req_get().
+ netfilter: nf_tables: fix scheduling-while-atomic splat
+ ext4: regenerate buddy after block freeing failed if under fc replay
+ ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
+ netfilter: nf_tables: can't schedule in nft_chain_validate
+ r8169: use new PM macros
  Linux 5.15.150
- r8169: use new PM macros
- netfilter: nf_tables: can't schedule in nft_chain_validate
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- ext4: regenerate buddy after block freeing failed if under fc replay
- netfilter: nf_tables: fix scheduling-while-atomic splat
- arp: Prevent overflow in arp_req_get().
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- cifs: fix mid leak during reconnection after timeout threshold
- i2c: imx: when being a target, mark the last read as processed
- i2c: imx: Add timer for handling the stop condition
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- netfilter: nft_flow_offload: release dst in case direct xmit path is used
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- netfilter: flowtable: simplify route logic
- netfilter: nf_tables: set dormant flag on hook register failure
- tls: stop recv() if initial process_rx_list gave us non-DATA
- tls: rx: drop pointless else after goto
- tls: rx: jump to a more appropriate label
- s390: use the correct count for __iowrite64_copy()
- octeontx2-af: Consider the action set by PF
- drm/nouveau/instmem: fix uninitialized_var.cocci warning
- net: dev: Convert sa_data to flexible array in struct sockaddr
- packet: move from strlcpy with unused retval to strscpy
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- afs: Increase buffer size in afs_update_volume_status()
- bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
- ata: ahci_ceva: fix error handling for Xilinx GT PHY support
- ata: libahci_platform: Introduce reset assertion/deassertion methods
- ata: libahci_platform: Convert to using devm bulk clocks API
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- net: stmmac: Fix incorrect dereference in interrupt handlers
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/qedr: Fix qedr_create_user_qp error flow
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- RDMA/irdma: Add AE for too many RNRS
- RDMA/irdma: Set the CQ read threshold for GEN 1
- RDMA/irdma: Validate max_send_wr and max_recv_wr
- RDMA/irdma: Fix KASAN issue with tasklet
- RDMA/bnxt_re: Return error for SRQ resize
- IB/hfi1: Fix a memleak in init_credit_return
- cifs: add a warning when the in-flight count goes negative
- xhci: track port suspend state correctly in unsuccessful resume cases
- xhci: decouple usb2 port resume and get_port_status request handling
- xhci: clear usb2 resume related variables in one place.
- xhci: rename resume_done to resume_timestamp
- xhci: move port specific items such as state completions to port structure
- xhci: cleanup xhci_hub_control port references
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
- ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
- ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
- ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
- ACPI: resource: Add ASUS model S5402ZA to quirks
- ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
- ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
- arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
- arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
- arm64: dts: rockchip: fix regulator name on rk3399-rock-4
- exfat: support dynamic allocate bh for exfat_entry_set_cache
- wifi: iwlwifi: mvm: avoid baid size integer overflow
- igb: Fix igb_down hung on surprise removal
- wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
- devlink: report devlink_port_type_warn source device
- bpf: Address KCSAN report on bpf_lru_list
- wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range
- sched/fair: Don't balance task to its current running CPU
- arm64: mm: fix VA-range sanity check
- arm64: set __exception_irq_entry with __irq_entry as a default
- ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 
AMD version)
- ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
- ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
- btrfs: add xxhash to fast checksum implementations
- posix-timers: Ensure timer ID search-loop limit is valid
- md/raid10: prevent soft lockup while flush writes
- md: fix data corruption for raid456 when reshape restart while grow up
- nbd: Add the maximum limit of allocated index in nbd_dev_add
- debugobjects: Recheck debug_objects_enabled before reporting
- netfilter: nf_tables: add rescheduling points during loop detection walks
- net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
- Input: iqs269a - do not poll during ATI
- Input: iqs269a - do not poll during suspend or resume
- Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr()
- PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro
- mmc: mxc: Use the new PM macros
- mmc: jz4740: Use the new PM macros
- PM: core: Add new *_PM_OPS macros, deprecate old ones
- PM: core: Redefine pm_ptr() macro
- powerpc/eeh: Set channel state after notifying the drivers
- powerpc/eeh: Small refactor of eeh_handle_normal_event()
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf
- powerpc/rtas: make all exports GPL
- net: ethernet: ti: add missing of_node_put before return
- dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
- clk: imx8mp: add clkout1/2 support
- clk: imx8mp: Add DISP2 pixel clock
- serial: 8250: Remove serial_rs485 sanitization from em485
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- kernel/sched: Remove dl_boosted flag comment
- drm/i915/dg1: Update DMC_DEBUG3 register
- f2fs: write checkpoint during FG_GC
- f2fs: don't set GC_FAILURE_PIN for background GC
- drm/amdgpu: init iommu after amdkfd device init
- tools/virtio: fix build
- perf beauty: Update copy of linux/socket.h with the kernel sources
- tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- acpi: property: Let args be NULL in __acpi_node_get_property_reference
- platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
- clk: linux/clk-provider.h: fix kernel-doc warnings and typos
- RDMA/siw: Correct wrong debug message
- RDMA/siw: Balance the reference of cep->kref in the error path
- ARM: dts: BCM53573: Drop nonexistent #usb-cells
- selftests: net: vrf-xfrm-tests: change authentication and encryption algos
- vdpa/mlx5: Don't clear mr struct on destroy MR
- MIPS: vpe-mt: drop physical_memsize
- MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
- powerpc/pseries/lpar: add missing RTAS retry status handling
- powerpc/perf/hv-24x7: add missing RTAS retry status handling
- powerpc/pseries/lparcfg: add missing RTAS retry status handling
- clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
- clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
- clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
- Input: ads7846 - don't check penirq immediately for 7845
- Input: ads7846 - always set last command to PWRDOWN
- clk: imx: avoid memory leak
- clk: renesas: cpg-mssr: Remove superfluous check in resume code
- Input: ads7846 - don't report pressure for ads7845
- clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
- Input: iqs269a - increase interrupt handler return delay
- Input: iqs269a - configure device with a single block write
- Input: iqs269a - drop unused device node references
- RISC-V: fix funct4 definition for c.jalr in parse_asm.h
- mtd: rawnand: sunxi: Fix the size of the last OOB region
- clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
- clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
- clk: imx: imx8mp: add shared clk gate for usb suspend clk
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers
- usb: cdnsp: blocked some cdns3 specific code
- usb: dwc3: gadget: Don't disconnect if not started
- serial: amba-pl011: Fix DMA transmission in RS485 mode
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- l2tp: pass correct message length to ip6_append_data
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler
- dm-crypt: don't modify the data when using authenticated encryption
- drm/ttm: Fix an invalid freeing on already freed page in error path
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
- erofs: fix lz4 inplace decompression
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails
- pmdomain: mediatek: fix race conditions with genpd
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- drm/amdgpu: reset gpu for s3 suspend abort case
- drm/amdgpu: skip to program GFXDEC registers for suspend abort
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- efi: runtime: Fix potential overflow of soft-reserved region size
- wifi: mac80211: adding missing drv_mgd_complete_tx() call
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: Update inode->i_size after success write into compressed file
- fs/ntfs3: Correct function is_rst_area_valid
- fs/ntfs3: Prevent generic message "attempt to access beyond end of device"
- fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache
- fs/ntfs3: Disable ATTR_LIST_ENTRY size check
- fs/ntfs3: Add NULL ptr dereference checking at the end of 
attr_allocate_frame()
- fs/ntfs3: Fix detected field-spanning write (size 8) of single field 
"le->name"
- fs/ntfs3: Print warning while fixing hard links count
- fs/ntfs3: Correct hard links updating when dealing with DOS names
- fs/ntfs3: Improve ntfs_dir_count
- fs/ntfs3: Modified fix directory element type detection
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: take ref count on tgtport before delete assoc
- nvmet-fc: avoid deadlock on delete association path
- nvmet-fc: abort command when there is no binding
- nvmet-fc: hold reference on hostport match
- nvmet-fc: defer cleanup using RCU properly
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- nvme-fc: do not wait in vain when unloading module
- ALSA: usb-audio: Ignore clock selector errors for single connection
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- Input: xpad - add Lenovo Legion Go controllers
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- ALSA: usb-audio: Check presence of valid altsetting control
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap 
corrupt
- platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet
- MIPS: reserve exception vector space ONLY ONCE
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- fbdev: sis: Error out if pixclock equals zero
- fbdev: savage: Error out if pixclock equals zero
- wifi: mac80211: fix race condition on enabling fast-xmit
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- scsi: target: core: Add TMF to tmr_list handling
- sched/rt: Disallow writing invalid values to sched_rt_period_us
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- bpf: Remove trace_printk_lock
- bpf: Do cleanup in bpf_bprintf_cleanup only when needed
- bpf: Add struct for bin_args arg in bpf_bprintf_prepare
- bpf: Merge printk and seq_printf VARARG max macros
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- smb: client: fix OOB in receive_encrypted_standard()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
+ UBUNTU: Upstream stable to v5.15.150

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2060142

Title:
  Jammy update: v5.15.150 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Jammy:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.15.150 upstream stable release
         from git://git.kernel.org/

  net/sched: Retire CBQ qdisc
  UBUNTU: [Config] updateconfigs for NET_SCH_CBQ
  net/sched: Retire ATM qdisc
  UBUNTU: [Config] updateconfigs for NET_SCH_ATM
  net/sched: Retire dsmark qdisc
  UBUNTU: [Config] updateconfigs for NET_SCH_DSMARK
  smb: client: fix potential OOBs in smb2_parse_contexts()
  smb: client: fix parsing of SMB3.1.1 POSIX create context
  sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
  bpf: Merge printk and seq_printf VARARG max macros
  bpf: Add struct for bin_args arg in bpf_bprintf_prepare
  bpf: Do cleanup in bpf_bprintf_cleanup only when needed
  bpf: Remove trace_printk_lock
  userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
  zonefs: Improve error handling
  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
  sched/rt: Fix sysctl_sched_rr_timeslice intial value
  sched/rt: Disallow writing invalid values to sched_rt_period_us
  scsi: target: core: Add TMF to tmr_list handling
  dmaengine: shdma: increase size of 'dev_id'
  dmaengine: fsl-qdma: increase size of 'irq_name'
  wifi: cfg80211: fix missing interfaces when dumping
  wifi: mac80211: fix race condition on enabling fast-xmit
  fbdev: savage: Error out if pixclock equals zero
  fbdev: sis: Error out if pixclock equals zero
  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
  ahci: asm1166: correct count of reported ports
  ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
  MIPS: reserve exception vector space ONLY ONCE
  platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet
  ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap 
corrupt
  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
  regulator: pwm-regulator: Add validity checks in continuous .get_voltage
  nvmet-tcp: fix nvme tcp ida memory leak
  ALSA: usb-audio: Check presence of valid altsetting control
  ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
  spi: sh-msiof: avoid integer overflow in constants
  Input: xpad - add Lenovo Legion Go controllers
  netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
  ALSA: usb-audio: Ignore clock selector errors for single connection
  nvme-fc: do not wait in vain when unloading module
  nvmet-fcloop: swap the list_add_tail arguments
  nvmet-fc: release reference on target port
  nvmet-fc: defer cleanup using RCU properly
  nvmet-fc: hold reference on hostport match
  nvmet-fc: abort command when there is no binding
  nvmet-fc: avoid deadlock on delete association path
  nvmet-fc: take ref count on tgtport before delete assoc
  ext4: correct the hole length returned by ext4_map_blocks()
  Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
  fs/ntfs3: Modified fix directory element type detection
  fs/ntfs3: Improve ntfs_dir_count
  fs/ntfs3: Correct hard links updating when dealing with DOS names
  fs/ntfs3: Print warning while fixing hard links count
  fs/ntfs3: Fix detected field-spanning write (size 8) of single field 
"le->name"
  fs/ntfs3: Add NULL ptr dereference checking at the end of 
attr_allocate_frame()
  fs/ntfs3: Disable ATTR_LIST_ENTRY size check
  fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache
  fs/ntfs3: Prevent generic message "attempt to access beyond end of device"
  fs/ntfs3: Correct function is_rst_area_valid
  fs/ntfs3: Update inode->i_size after success write into compressed file
  fs/ntfs3: Fix oob in ntfs_listxattr
  wifi: mac80211: adding missing drv_mgd_complete_tx() call
  efi: runtime: Fix potential overflow of soft-reserved region size
  efi: Don't add memblocks for soft-reserved memory
  hwmon: (coretemp) Enlarge per package core count limit
  scsi: lpfc: Use unsigned type for num_sge
  firewire: core: send bus reset promptly on gap count error
  drm/amdgpu: skip to program GFXDEC registers for suspend abort
  drm/amdgpu: reset gpu for s3 suspend abort case
  virtio-blk: Ensure no requests in virtqueues before deleting vqs.
  pmdomain: mediatek: fix race conditions with genpd
  ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails
  pmdomain: renesas: r8a77980-sysc: CR7 must be always on
  erofs: fix lz4 inplace decompression
  IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
  drm/ttm: Fix an invalid freeing on already freed page in error path
  dm-crypt: don't modify the data when using authenticated encryption
  platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler
  platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
  KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
  KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  PCI/MSI: Prevent MSI hardware interrupt number truncation
  l2tp: pass correct message length to ip6_append_data
  ARM: ep93xx: Add terminator to gpiod_lookup_table
  Revert "x86/ftrace: Use alternative RET encoding"
  x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
  x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
  x86/ftrace: Use alternative RET encoding
  x86/returnthunk: Allow different return thunks
  Revert "x86/alternative: Make custom return thunk unconditional"
  x86/alternative: Make custom return thunk unconditional
  serial: amba-pl011: Fix DMA transmission in RS485 mode
  usb: dwc3: gadget: Don't disconnect if not started
  usb: cdnsp: blocked some cdns3 specific code
  usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers
  usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
  usb: cdns3: fix memory double free when handle zero packet
  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  usb: roles: fix NULL pointer issue when put module's reference
  usb: roles: don't get/set_role() when usb_role_switch is unregistered
  mptcp: fix lockless access in subflow ULP diag
  clk: imx: imx8mp: add shared clk gate for usb suspend clk
  clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
  clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
  mtd: rawnand: sunxi: Fix the size of the last OOB region
  RISC-V: fix funct4 definition for c.jalr in parse_asm.h
  Input: iqs269a - drop unused device node references
  Input: iqs269a - configure device with a single block write
  Input: iqs269a - increase interrupt handler return delay
  clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
  Input: ads7846 - don't report pressure for ads7845
  clk: renesas: cpg-mssr: Remove superfluous check in resume code
  clk: imx: avoid memory leak
  Input: ads7846 - always set last command to PWRDOWN
  Input: ads7846 - don't check penirq immediately for 7845
  powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
  clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
  clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
  clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
  powerpc/pseries/lparcfg: add missing RTAS retry status handling
  powerpc/perf/hv-24x7: add missing RTAS retry status handling
  powerpc/pseries/lpar: add missing RTAS retry status handling
  MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
  MIPS: vpe-mt: drop physical_memsize
  vdpa/mlx5: Don't clear mr struct on destroy MR
  ARM: dts: BCM53573: Drop nonexistent #usb-cells
  RDMA/siw: Balance the reference of cep->kref in the error path
  RDMA/siw: Correct wrong debug message
  clk: linux/clk-provider.h: fix kernel-doc warnings and typos
  platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
  acpi: property: Let args be NULL in __acpi_node_get_property_reference
  ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
  tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
  perf beauty: Update copy of linux/socket.h with the kernel sources
  tools/virtio: fix build
  drm/amdgpu: init iommu after amdkfd device init
  f2fs: don't set GC_FAILURE_PIN for background GC
  f2fs: write checkpoint during FG_GC
  drm/i915/dg1: Update DMC_DEBUG3 register
  kernel/sched: Remove dl_boosted flag comment
  cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
  serial: 8250: Remove serial_rs485 sanitization from em485
  clk: imx8mp: Add DISP2 pixel clock
  clk: imx8mp: add clkout1/2 support
  dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
  net: ethernet: ti: add missing of_node_put before return
  powerpc/rtas: make all exports GPL
  powerpc/rtas: ensure 4KB alignment for rtas_data_buf
  powerpc/eeh: Small refactor of eeh_handle_normal_event()
  powerpc/eeh: Set channel state after notifying the drivers
  PM: core: Redefine pm_ptr() macro
  PM: core: Add new *_PM_OPS macros, deprecate old ones
  mmc: jz4740: Use the new PM macros
  mmc: mxc: Use the new PM macros
  PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro
  Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr()
  Input: iqs269a - do not poll during suspend or resume
  Input: iqs269a - do not poll during ATI
  net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
  netfilter: nf_tables: add rescheduling points during loop detection walks
  debugobjects: Recheck debug_objects_enabled before reporting
  nbd: Add the maximum limit of allocated index in nbd_dev_add
  md: fix data corruption for raid456 when reshape restart while grow up
  md/raid10: prevent soft lockup while flush writes
  posix-timers: Ensure timer ID search-loop limit is valid
  btrfs: add xxhash to fast checksum implementations
  ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
  ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
  ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 
AMD version)
  arm64: set __exception_irq_entry with __irq_entry as a default
  arm64: mm: fix VA-range sanity check
  sched/fair: Don't balance task to its current running CPU
  wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range
  bpf: Address KCSAN report on bpf_lru_list
  devlink: report devlink_port_type_warn source device
  wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
  wifi: iwlwifi: mvm: avoid baid size integer overflow
  exfat: support dynamic allocate bh for exfat_entry_set_cache
  arm64: dts: rockchip: fix regulator name on rk3399-rock-4
  arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
  arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
  ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
  ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
  ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
  ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
  ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
  ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
  xhci: cleanup xhci_hub_control port references
  xhci: move port specific items such as state completions to port structure
  xhci: rename resume_done to resume_timestamp
  xhci: clear usb2 resume related variables in one place.
  xhci: decouple usb2 port resume and get_port_status request handling
  xhci: track port suspend state correctly in unsuccessful resume cases
  cifs: add a warning when the in-flight count goes negative
  IB/hfi1: Fix a memleak in init_credit_return
  RDMA/bnxt_re: Return error for SRQ resize
  RDMA/irdma: Fix KASAN issue with tasklet
  RDMA/irdma: Validate max_send_wr and max_recv_wr
  RDMA/irdma: Set the CQ read threshold for GEN 1
  RDMA/irdma: Add AE for too many RNRS
  RDMA/srpt: Support specifying the srpt_service_guid parameter
  RDMA/qedr: Fix qedr_create_user_qp error flow
  arm64: dts: rockchip: set num-cs property for spi on px30
  RDMA/srpt: fix function pointer cast warnings
  bpf, scripts: Correct GPL license name
  scsi: jazz_esp: Only build if SCSI core is builtin
  nouveau: fix function cast warnings
  net: stmmac: Fix incorrect dereference in interrupt handlers
  ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
  ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
  ata: libahci_platform: Convert to using devm bulk clocks API
  ata: libahci_platform: Introduce reset assertion/deassertion methods
  ata: ahci_ceva: fix error handling for Xilinx GT PHY support
  bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
  afs: Increase buffer size in afs_update_volume_status()
  ipv6: sr: fix possible use-after-free and null-ptr-deref
  packet: move from strlcpy with unused retval to strscpy
  net: dev: Convert sa_data to flexible array in struct sockaddr
  drm/nouveau/instmem: fix uninitialized_var.cocci warning
  octeontx2-af: Consider the action set by PF
  s390: use the correct count for __iowrite64_copy()
  tls: rx: jump to a more appropriate label
  tls: rx: drop pointless else after goto
  tls: stop recv() if initial process_rx_list gave us non-DATA
  netfilter: nf_tables: set dormant flag on hook register failure
  netfilter: flowtable: simplify route logic
  netfilter: nft_flow_offload: reset dst in route object after setting up flow
  netfilter: nft_flow_offload: release dst in case direct xmit path is used
  drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
  drm/amd/display: Fix memory leak in dm_sw_fini()
  i2c: imx: Add timer for handling the stop condition
  i2c: imx: when being a target, mark the last read as processed
  fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
  arp: Prevent overflow in arp_req_get().
  netfilter: nf_tables: fix scheduling-while-atomic splat
  ext4: regenerate buddy after block freeing failed if under fc replay
  ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
  netfilter: nf_tables: can't schedule in nft_chain_validate
  r8169: use new PM macros
  Linux 5.15.150
  UBUNTU: Upstream stable to v5.15.150

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2060142/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to