Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.5.13 upstream stable release from git://git.kernel.org/ locking/ww_mutex/test: Fix potential workqueue corruption btrfs: abort transaction on generation mismatch when marking eb as dirty lib/generic-radix-tree.c: Don't overflow in peek() x86/retpoline: Make sure there are no unconverted return thunks due to KCSAN perf/core: Bail out early if the request AUX area is out of bound srcu: Fix srcu_struct node grpmask overflow on 64-bit systems selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config clocksource/drivers/timer-imx-gpt: Fix potential memory leak clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware srcu: Only accelerate on enqueue time smp,csd: Throw an error if a CSD lock is stuck for too long cpu/hotplug: Don't offline the last non-isolated CPU workqueue: Provide one lock class key per work_on_cpu() callsite x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size wifi: plfxlc: fix clang-specific fortify warning wifi: ath12k: Ignore fragments from uninitialized peer in dp wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: mac80211: don't return unset power in ieee80211_get_tx_power() atl1c: Work around the DMA RX overflow issue bpf: Detect IP == ksym.end as part of BPF program wifi: ath9k: fix clang-specific fortify warnings wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() wifi: ath10k: fix clang-specific fortify warning wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() ACPI: APEI: Fix AER info corruption when error status data has multiple sections net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI wifi: mt76: mt7921e: Support MT7992 IP in Xiaomi Redmibook 15 Pro (2023) net: annotate data-races around sk->sk_tx_queue_mapping net: annotate data-races around sk->sk_dst_pending_confirm wifi: ath12k: mhi: fix potential memory leak in ath12k_mhi_register() wifi: ath10k: Don't touch the CE interrupt registers after power up net: sfp: add quirk for FS's 2.5G copper SFP vsock: read from socket's error queue bpf: Ensure proper register state printing for cond jumps wifi: iwlwifi: mvm: fix size check for fw_link_id Bluetooth: btusb: Add date->evt_skb is NULL check Bluetooth: Fix double free in hci_conn_cleanup ACPI: EC: Add quirk for HP 250 G7 Notebook PC tsnep: Fix tsnep_request_irq() format-overflow warning gpiolib: acpi: Add a ignore interrupt quirk for Peaq C1010 platform/chrome: kunit: initialize lock for fake ec_dev of: address: Fix address translation when address-size is greater than 2 platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e drm/gma500: Fix call trace when psb_gem_mm_init() fails drm/amdkfd: ratelimited SQ interrupt messages drm/komeda: drop all currently held locks if deadlock happens drm/amd/display: Blank phantom OTG before enabling drm/amd/display: Don't lock phantom pipe on disabling drm/amd/display: add seamless pipe topology transition check drm/edid: Fixup h/vsync_end instead of h/vtotal md: don't rely on 'mddev->pers' to be set in mddev_suspend() drm/amdgpu: not to save bo in the case of RAS err_event_athub drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments drm/amd/display: use full update for clip size increase of large plane source string.h: add array-wrappers for (v)memdup_user() kernel: kexec: copy user-array safely kernel: watch_queue: copy user-array safely drm_lease.c: copy user-array safely drm: vmwgfx_surface.c: copy user-array safely drm/msm/dp: skip validity check for DP CTS EDID checksum drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amdgpu: Fix potential null pointer derefernce drm/panel: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/radeon: fix a possible null pointer dereference drm/amdgpu/vkms: fix a possible null pointer dereference drm/panel: st7703: Pick different reset sequence drm/amdkfd: Fix shift out-of-bounds issue drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported drm/amd/display: fix num_ways overflow error drm/amd: check num of link levels when update pcie param arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size selftests/efivarfs: create-read: fix a resource leak ASoC: mediatek: mt8188-mt6359: support dynamic pinctrl ASoC: soc-card: Add storage for PCI SSID ASoC: SOF: Pass PCI SSID to machine driver crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware RDMA/hfi1: Use FIELD_GET() to extract Link Width scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool fs/jfs: Add check for negative db_l2nbperpage fs/jfs: Add validity check for db_maxag and db_agpref jfs: fix array-index-out-of-bounds in dbFindLeaf jfs: fix array-index-out-of-bounds in diAlloc HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround ARM: 9320/1: fix stack depot IRQ stack filter ALSA: hda: Fix possible null-ptr-deref when assigning a stream gpiolib: of: Add quirk for mt2701-cs42448 ASoC sound PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields PCI: mvebu: Use FIELD_PREP() with Link Width atm: iphase: Do PCI error checks on own line PCI: Do error check on own line to split long "if" conditions scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Use FIELD_GET() to extract Link Width PCI: Extract ATS disabling to a helper function PCI: Disable ATS for specific Intel IPU E2000 devices PCI: dwc: Add dw_pcie_link_set_max_link_width() PCI: dwc: Add missing PCI_EXP_LNKCAP_MLW handling misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk crypto: hisilicon/qm - prevent soft lockup in receive loop HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W exfat: support handle zero-size directory mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager tty: vcc: Add check for kstrdup() in vcc_probe() dt-bindings: phy: qcom,snps-eusb2-repeater: Add magic tuning overrides phy: qualcomm: phy-qcom-eusb2-repeater: Use regmap_fields phy: qualcomm: phy-qcom-eusb2-repeater: Zero out untouched tuning regs usb: dwc3: core: configure TX/RX threshold for DWC3_IP usb: ucsi: glink: use the connector orientation GPIO to provide switch events soundwire: dmi-quirks: update HP Omen match f2fs: fix error path of __f2fs_build_free_nids f2fs: fix error handling of __get_node_page usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present usb: gadget: f_ncm: Always set current gadget in ncm_bind() 9p/trans_fd: Annotate data-racy writes to file::f_flags 9p: v9fs_listxattr: fix %s null argument warning i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler i2c: i801: Add support for Intel Birch Stream SoC i2c: fix memleak in i2c_new_client_device() i2c: sun6i-p2wi: Prevent potential division by zero virtio-blk: fix implicit overflow on virtio_max_dma_size i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. media: gspca: cpia1: shift-out-of-bounds in set_flicker media: vivid: avoid integer overflow media: ipu-bridge: increase sensor_name size gfs2: ignore negated quota changes gfs2: fix an oops in gfs2_permission media: cobalt: Use FIELD_GET() to extract Link Width media: ccs: Fix driver quirk struct documentation media: imon: fix access to invalid resource for the second interface drm/amd/display: Avoid NULL dereference of timing generator kgdb: Flush console before entering kgdb on panic riscv: VMAP_STACK overflow detection thread-safe i2c: dev: copy userspace array safely ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings drm/qxl: prevent memory leak ALSA: hda/realtek: Add quirk for ASUS UX7602ZM drm/amdgpu: fix software pci_unplug on some chips pwm: Fix double shift bug mtd: rawnand: tegra: add missing check for platform_get_irq() wifi: iwlwifi: Use FW rate for non-data frames sched/core: Optimize in_task() and in_interrupt() a bit samples/bpf: syscall_tp_user: Rename num_progs into nr_tests samples/bpf: syscall_tp_user: Fix array out-of-bound access dt-bindings: serial: fix regex pattern for matching serial node children SUNRPC: ECONNRESET might require a rebind mtd: rawnand: intel: check return value of devm_kasprintf() mtd: rawnand: meson: check return value of devm_kasprintf() drm/i915/mtl: avoid stringop-overflow warning NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RISC-V: hwprobe: Fix vDSO SIGSEGV riscv: provide riscv-specific is_trap_insn() gfs2: Silence "suspicious RCU usage in gfs2_permission" warning drm/i915/tc: Fix -Wformat-truncation in intel_tc_port_init vdpa_sim_blk: allocate the buffer zeroed vhost-vdpa: fix use after free in vhost_vdpa_probe() gcc-plugins: randstruct: Only warn about true flexible arrays bpf: handle ldimm64 properly in check_cfg() bpf: fix precision backtracking instruction iteration net: set SOCK_RCU_FREE before inserting socket into hashtable ipvlan: add ipvlan_route_v6_outbound() helper tty: Fix uninit-value access in ppp_sync_receive() xen/events: avoid using info_for_irq() in xen_send_IPI_one() net: hns3: fix add VLAN fail issue net: hns3: add barrier in vf mailbox reply process net: hns3: fix incorrect capability bit display for copper port net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix VF reset fail issue net: hns3: fix VF wrong speed and duplex issue tipc: Fix kernel-infoleak due to uninitialized TLV value net: mvneta: fix calls to page_pool_get_stats ppp: limit MRU to 64K xen/events: fix delayed eoi list handling blk-mq: make sure active queue usage is held for bio_integrity_prep() ptp: annotate data-race around q->head and q->tail bonding: stop the device in bond_setup_by_slave() net: ethernet: cortina: Fix max RX frame define net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix MTU max setting af_unix: fix use-after-free in unix_stream_read_actor() netfilter: nf_conntrack_bridge: initialize err to 0 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() netfilter: nf_tables: bogus ENOENT when destroying element which does not exist net: stmmac: fix rx budget limit check net: stmmac: avoid rx queue overrun pds_core: use correct index to mask irq pds_core: fix up some format-truncation complaints gve: Fixes for napi_poll when budget is 0 io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval net/mlx5: Decouple PHC .adjtime and .adjphase implementations net/mlx5e: fix double free of encap_header net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: Fix pedit endianness net/mlx5: Consolidate devlink documentation in devlink/mlx5.rst net/mlx5e: Make tx_port_ts logic resilient to out-of-order CQEs net/mlx5e: Add recovery flow for tx devlink health reporter for unhealthy PTP SQ net/mlx5e: Update doorbell for port timestamping CQ before the software counter net/mlx5: Increase size of irq name buffer net/mlx5e: Reduce the size of icosq_str net/mlx5e: Check return value of snprintf writing to fw_version buffer net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors net: sched: do not offload flows with a helper in act_ct macvlan: Don't propagate promisc change to lower dev in passthru tools/power/turbostat: Fix a knl bug tools/power/turbostat: Enable the C-state Pre-wake printing scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 cifs: spnego: add ';' in HOST_KEY_LEN cifs: fix check of rc in function generate_smb3signingkey perf/core: Fix cpuctx refcounting i915/perf: Fix NULL deref bugs with drm_dbg() calls perf: arm_cspmu: Reject events meant for other PMUs drivers: perf: Check find_first_bit() return value media: venus: hfi: add checks to perform sanity on queue pointers perf intel-pt: Fix async branch flags powerpc/perf: Fix disabling BHRB and instruction sampling randstruct: Fix gcc-plugin performance mode to stay in group bpf: Fix check_stack_write_fixed_off() to correctly spill imm bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END scsi: mpt3sas: Fix loop logic scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: ufs: qcom: Update PHY settings only when scaling to higher gears scsi: qla2xxx: Fix system crash due to bad pointer access scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR crypto: x86/sha - load modules based on CPU features x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4 x86/apic/msi: Fix misconfigured non-maskable MSI quirk x86/cpu/hygon: Fix the CPU topology evaluation for real KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: Clear bit12 of ICR after APIC-write VM-exit KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER sched: psi: fix unprivileged polling against cgroups audit: don't take task_lock() in audit_exe_compare() code path audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() proc: sysctl: prevent aliased sysctls from getting passed to init tty/sysrq: replace smp_processor_id() with get_cpu() tty: serial: meson: fix hard LOCKUP on crtscts mode hvc/xen: fix console unplug hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix event channel handling for secondary consoles PCI/sysfs: Protect driver's D3cold preference from user space mm/damon/sysfs: remove requested targets when online-commit inputs mm/damon/sysfs: update monitoring target regions for online input commit watchdog: move softlockup_panic back to early_param iommufd: Fix missing update of domains_itree after splitting iopt_area fbdev: stifb: Make the STI next font pointer a 32-bit signed offset dm crypt: account large pages in cc->n_allocated_pages mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation mm/damon/ops-common: avoid divide-by-zero during region hotness calculation mm/damon: implement a function for max nr_accesses safe calculation mm/damon/core: avoid divide-by-zero during monitoring results update mm/damon/sysfs-schemes: handle tried region directory allocation failure mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure mm/damon/sysfs: check error from damon_sysfs_update_target() parisc: Add nop instructions after TLB inserts ACPI: resource: Do IRQ override on TongFang GMxXGxx regmap: Ensure range selector registers are updated after cache sync wifi: ath11k: fix temperature event locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix gtk offload status event locking wifi: ath12k: fix htt mlo-offset event locking wifi: ath12k: fix dfs-radar and temperature event locking mmc: meson-gx: Remove setting of CMD_CFG_ERROR genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware sched/core: Fix RQCF_ACT_SKIP leak KEYS: trusted: tee: Refactor register SHM usage KEYS: trusted: Rollback init_trusted() consistently PCI: keystone: Don't discard .remove() callback PCI: keystone: Don't discard .probe() callback arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer arm64: module: Fix PLT counting when CONFIG_RANDOMIZE_BASE=n parisc/agp: Use 64-bit LE values in SBA IOMMU PDIR table parisc/pdc: Add width field to struct pdc_model parisc/power: Add power soft-off when running on qemu cpufreq: stats: Fix buffer overflow detection in trans_stats() powercap: intel_rapl: Downgrade BIOS locked limits pr_warn() to pr_debug() clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks ksmbd: fix recursive locking in vfs helpers ksmbd: handle malformed smb1 message ksmbd: fix slab out of bounds write in smb_inherit_dacl() mmc: vub300: fix an error code mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() PCI: kirin: Don't discard .remove() callback PCI: exynos: Don't discard .remove() callback wifi: wilc1000: use vmm_table as array in wilc struct svcrdma: Drop connection after an RDMA Read error rcu/tree: Defer setting of jiffies during stall reset arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM dt-bindings: timer: renesas,rz-mtu3: Fix overflow/underflow interrupt names PM: hibernate: Use __get_safe_page() rather than touching the list PM: hibernate: Clean up sync_read handling in snapshot_write_next() rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects btrfs: don't arbitrarily slow down delalloc if we're committing thermal: intel: powerclamp: fix mismatch in get function for max_idle arm64: dts: qcom: ipq5332: Fix hwlock index for SMEM arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit ACPI: FPDT: properly handle invalid FPDT subtables arm64: dts: qcom: ipq9574: Fix hwlock index for SMEM arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size leds: trigger: netdev: Move size check in set_device_name mfd: qcom-spmi-pmic: Fix reference leaks in revid helper mfd: qcom-spmi-pmic: Fix revid implementation ima: annotate iint mutex to avoid lockdep false positive warnings ima: detect changes to the backing overlay file netfilter: nf_tables: split async and sync catchall in two functions ASoC: soc-dai: add flag to mute and unmute stream during trigger ASoC: codecs: wsa883x: make use of new mute_unmute_on_trigger flag selftests/resctrl: Fix uninitialized .sa_flags selftests/resctrl: Remove duplicate feature check from CMT test selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests hid: lenovo: Resend all settings on reset_resume for compact keyboards ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev quota: explicitly forbid quota files from being encrypted kernel/reboot: emergency_restart: Set correct system_state i2c: core: Run atomic i2c xfer when !preemptible selftests/clone3: Fix broken test under !CONFIG_TIME_NS tracing: Have the user copy of synthetic event address use correct context driver core: Release all resources during unbind before updating device links mcb: fix error handling for different scenarios when parsing dmaengine: stm32-mdma: correct desc prep when channel running s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() s390/cmma: fix detection of DAT pages mm/cma: use nth_page() in place of direct struct page manipulation mm/memory_hotplug: use pfn math in place of direct struct page manipulation mm: make PR_MDWE_REFUSE_EXEC_GAIN an unsigned long mtd: cfi_cmdset_0001: Byte swap OTP info cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails i3c: master: cdns: Fix reading status register i3c: master: svc: fix race condition in ibi work thread i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen i3c: master: svc: fix random hot join failure since timeout error cxl/region: Fix x1 root-decoder granularity calculations cxl/port: Fix delete_endpoint() vs parent unregistration race pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable pmdomain: amlogic: Fix mask for the second NNA mem PD domain pmdomain: imx: Make imx pgc power domain also set the fwnode PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card torture: Add a kthread-creation callback to _torture_create_kthread() torture: Add lock_torture writer_fifo module parameter torture: Make torture_hrtimeout_*() use TASK_IDLE torture: Move stutter_wait() timeouts to hrtimers torture: Make torture_hrtimeout_ns() take an hrtimer mode parameter rcutorture: Fix stuttering races and other issues mm/hugetlb: prepare hugetlb_follow_page_mask() for FOLL_PIN mm/hugetlb: use nth_page() in place of direct struct page manipulation parisc: Prevent booting 64-bit kernels on PA1.x machines parisc/pgtable: Do not drop upper 5 address bits of physical address parisc/power: Fix power soft-off when running on qemu xhci: Enable RPM on controllers that support low-power states fs: add ctime accessors infrastructure smb3: fix creating FIFOs when mounting with "sfu" mount option smb3: fix touch -h of symlink smb3: allow dumping session and tcon id to improve stats analysis and debugging smb3: fix caching of ctime on setxattr smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb: client: fix use-after-free in smb2_query_info_compound() smb: client: fix potential deadlock when releasing mids cifs: reconnect helper should set reconnect for the right channel cifs: force interface update before a fresh session setup cifs: do not reset chan_max if multichannel is not supported at mount cifs: Fix encryption of cleared, but unset rq_iter data buffers xfs: recovery should not clear di_flushiter unconditionally btrfs: zoned: wait for data BG to be finished on direct IO allocation ALSA: info: Fix potential deadlock at disconnection ALSA: hda/realtek: Enable Mute LED on HP 255 G8 ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek: Enable Mute LED on HP 255 G10 ALSA: hda/realtek: Add quirks for HP Laptops Revert ncsi: Propagate carrier gain/loss events to the NCSI controller Revert "i2c: pxa: move to generic GPIO recovery" lsm: fix default return value for vm_enough_memory lsm: fix default return value for inode_getsecctx sbsa_gwdt: Calculate timeout with 64-bit math i2c: designware: Disable TX_EMPTY irq while waiting for block length byte s390/ap: fix AP bus crash on early config change callback invocation net: ethtool: Fix documentation of ethtool_sprintf() net: dsa: lan9303: consequently nested-lock physical MDIO net: phylink: initialize carrier state at creation gfs2: don't withdraw if init_threads() got interrupted i2c: i801: fix potential race in i801_block_transaction_byte_by_byte f2fs: do not return EFSCORRUPTED, but try to run online repair f2fs: set the default compress_level on ioctl f2fs: avoid format-overflow warning f2fs: split initial and dynamic conditions for extent_cache media: lirc: drop trailing space from scancode transmit media: sharp: fix sharp encoding media: venus: hfi_parser: Add check to keep the number of codecs within range media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi: add checks to handle capabilities from firmware media: ccs: Correctly initialise try compose rectangle drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection drm/mediatek/dp: fix memory leak on ->get_edid callback error path dm-bufio: fix no-sleep mode dm-verity: don't use blocking calls from tasklets nfsd: fix file memleak on client_opens_release NFSD: Update nfsd_cache_append() to use xdr_stream LoongArch: Mark __percpu functions as always inline riscv: Using TOOLCHAIN_HAS_ZIHINTPAUSE marco replace zihintpause riscv: put interrupt entries into .irqentry.text riscv: mm: Update the comment of CONFIG_PAGE_OFFSET riscv: correct pt_level name via pgtable_l5/4_enabled riscv: kprobes: allow writing to x0 mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 mm: fix for negative counter: nr_file_hugepages mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mptcp: deal with large GSO size mptcp: add validity check for sending RM_ADDR mptcp: fix setsockopt(IP_TOS) subflow locking selftests: mptcp: fix fastclose with csum failure mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER media: qcom: camss: Fix pm_domain_on sequence in probe media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix VFE-480 vfe_disable_output() media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 media: qcom: camss: Fix invalid clock enable bit disjunction media: qcom: camss: Fix csid-gen2 for test pattern generator ext4: fix race between writepages and remount ext4: make sure allocate pending entry not fail ext4: apply umask if ACL support is disabled ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: mark buffer new if it is unwritten to avoid stale data exposure ext4: correct return value of ext4_convert_meta_bg ext4: correct the start block of counting reserved clusters ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: add missed brelse in update_backups ext4: properly sync file size update after O_SYNC direct IO ext4: fix racy may inline data check in dio write drm/amd/pm: Handle non-terminated overdrive commands. drm: bridge: it66121: ->get_edid callback must not return err pointers drm/i915/mtl: Support HBR3 rate with C10 phy and eDP in MTL drm/i915: Bump GLK CDCLK frequency when driving multiple pipes drm/i915: Fix potential spectre vulnerability drm/i915: Flush WC GGTT only on required platforms drm/amdgpu/smu13: drop compute workload workaround drm/amdgpu: don't use pci_is_thunderbolt_attached() drm/amdgpu: fix GRBM read timeout when do mes_self_test drm/amdgpu: add a retry for IP discovery init drm/amdgpu: don't use ATRM for external devices drm/amdgpu: fix error handling in amdgpu_vm_init drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: lower CS errors to debug severity drm/amdgpu: Fix possible null pointer dereference drm/amd/display: Guard against invalid RPTR/WPTR being set drm/amd/display: Fix DSC not Enabled on Direct MST Sink drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() drm/amd/display: Enable fast plane updates on DCN3.2 and above drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox powerpc/powernv: Fix fortify source warnings in opal-prd.c tracing: Have trace_event_file have ref counters net/mlx5e: Avoid referencing skb after free-ing in drop path of mlx5e_sq_xmit_wqe net/mlx5e: Track xmit submission to PTP WQ after populating metadata map Linux 6.5.13 UBUNTU: Upstream stable to v6.5.13 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Mantic) Importance: Medium Assignee: Manuel Diewald (diewald) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Mantic) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Mantic) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Mantic) Status: New => In Progress ** Changed in: linux (Ubuntu Mantic) Assignee: (unassigned) => Manuel Diewald (diewald) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.5.13 upstream stable release from git://git.kernel.org/ - + locking/ww_mutex/test: Fix potential workqueue corruption + btrfs: abort transaction on generation mismatch when marking eb as dirty + lib/generic-radix-tree.c: Don't overflow in peek() + x86/retpoline: Make sure there are no unconverted return thunks due to KCSAN + perf/core: Bail out early if the request AUX area is out of bound + srcu: Fix srcu_struct node grpmask overflow on 64-bit systems + selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config + clocksource/drivers/timer-imx-gpt: Fix potential memory leak + clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware + srcu: Only accelerate on enqueue time + smp,csd: Throw an error if a CSD lock is stuck for too long + cpu/hotplug: Don't offline the last non-isolated CPU + workqueue: Provide one lock class key per work_on_cpu() callsite + x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size + wifi: plfxlc: fix clang-specific fortify warning + wifi: ath12k: Ignore fragments from uninitialized peer in dp + wifi: mac80211_hwsim: fix clang-specific fortify warning + wifi: mac80211: don't return unset power in ieee80211_get_tx_power() + atl1c: Work around the DMA RX overflow issue + bpf: Detect IP == ksym.end as part of BPF program + wifi: ath9k: fix clang-specific fortify warnings + wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() + wifi: ath10k: fix clang-specific fortify warning + wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() + ACPI: APEI: Fix AER info corruption when error status data has multiple sections + net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI + wifi: mt76: mt7921e: Support MT7992 IP in Xiaomi Redmibook 15 Pro (2023) + net: annotate data-races around sk->sk_tx_queue_mapping + net: annotate data-races around sk->sk_dst_pending_confirm + wifi: ath12k: mhi: fix potential memory leak in ath12k_mhi_register() + wifi: ath10k: Don't touch the CE interrupt registers after power up + net: sfp: add quirk for FS's 2.5G copper SFP + vsock: read from socket's error queue + bpf: Ensure proper register state printing for cond jumps + wifi: iwlwifi: mvm: fix size check for fw_link_id + Bluetooth: btusb: Add date->evt_skb is NULL check + Bluetooth: Fix double free in hci_conn_cleanup + ACPI: EC: Add quirk for HP 250 G7 Notebook PC + tsnep: Fix tsnep_request_irq() format-overflow warning + gpiolib: acpi: Add a ignore interrupt quirk for Peaq C1010 + platform/chrome: kunit: initialize lock for fake ec_dev + of: address: Fix address translation when address-size is greater than 2 + platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e + drm/gma500: Fix call trace when psb_gem_mm_init() fails + drm/amdkfd: ratelimited SQ interrupt messages + drm/komeda: drop all currently held locks if deadlock happens + drm/amd/display: Blank phantom OTG before enabling + drm/amd/display: Don't lock phantom pipe on disabling + drm/amd/display: add seamless pipe topology transition check + drm/edid: Fixup h/vsync_end instead of h/vtotal + md: don't rely on 'mddev->pers' to be set in mddev_suspend() + drm/amdgpu: not to save bo in the case of RAS err_event_athub + drm/amdkfd: Fix a race condition of vram buffer unref in svm code + drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments + drm/amd/display: use full update for clip size increase of large plane source + string.h: add array-wrappers for (v)memdup_user() + kernel: kexec: copy user-array safely + kernel: watch_queue: copy user-array safely + drm_lease.c: copy user-array safely + drm: vmwgfx_surface.c: copy user-array safely + drm/msm/dp: skip validity check for DP CTS EDID checksum + drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 + drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga + drm/amdgpu: Fix potential null pointer derefernce + drm/panel: fix a possible null pointer dereference + drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference + drm/radeon: fix a possible null pointer dereference + drm/amdgpu/vkms: fix a possible null pointer dereference + drm/panel: st7703: Pick different reset sequence + drm/amdkfd: Fix shift out-of-bounds issue + drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL + drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported + drm/amd/display: fix num_ways overflow error + drm/amd: check num of link levels when update pcie param + arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size + selftests/efivarfs: create-read: fix a resource leak + ASoC: mediatek: mt8188-mt6359: support dynamic pinctrl + ASoC: soc-card: Add storage for PCI SSID + ASoC: SOF: Pass PCI SSID to machine driver + crypto: pcrypt - Fix hungtask for PADATA_RESET + ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware + RDMA/hfi1: Use FIELD_GET() to extract Link Width + scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs + scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool + fs/jfs: Add check for negative db_l2nbperpage + fs/jfs: Add validity check for db_maxag and db_agpref + jfs: fix array-index-out-of-bounds in dbFindLeaf + jfs: fix array-index-out-of-bounds in diAlloc + HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround + ARM: 9320/1: fix stack depot IRQ stack filter + ALSA: hda: Fix possible null-ptr-deref when assigning a stream + gpiolib: of: Add quirk for mt2701-cs42448 ASoC sound + PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields + PCI: mvebu: Use FIELD_PREP() with Link Width + atm: iphase: Do PCI error checks on own line + PCI: Do error check on own line to split long "if" conditions + scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() + PCI: Use FIELD_GET() to extract Link Width + PCI: Extract ATS disabling to a helper function + PCI: Disable ATS for specific Intel IPU E2000 devices + PCI: dwc: Add dw_pcie_link_set_max_link_width() + PCI: dwc: Add missing PCI_EXP_LNKCAP_MLW handling + misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller + PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk + ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk + crypto: hisilicon/qm - prevent soft lockup in receive loop + HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W + exfat: support handle zero-size directory + mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs + iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() + thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager + tty: vcc: Add check for kstrdup() in vcc_probe() + dt-bindings: phy: qcom,snps-eusb2-repeater: Add magic tuning overrides + phy: qualcomm: phy-qcom-eusb2-repeater: Use regmap_fields + phy: qualcomm: phy-qcom-eusb2-repeater: Zero out untouched tuning regs + usb: dwc3: core: configure TX/RX threshold for DWC3_IP + usb: ucsi: glink: use the connector orientation GPIO to provide switch events + soundwire: dmi-quirks: update HP Omen match + f2fs: fix error path of __f2fs_build_free_nids + f2fs: fix error handling of __get_node_page + usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present + usb: gadget: f_ncm: Always set current gadget in ncm_bind() + 9p/trans_fd: Annotate data-racy writes to file::f_flags + 9p: v9fs_listxattr: fix %s null argument warning + i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler + i2c: i801: Add support for Intel Birch Stream SoC + i2c: fix memleak in i2c_new_client_device() + i2c: sun6i-p2wi: Prevent potential division by zero + virtio-blk: fix implicit overflow on virtio_max_dma_size + i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. + media: gspca: cpia1: shift-out-of-bounds in set_flicker + media: vivid: avoid integer overflow + media: ipu-bridge: increase sensor_name size + gfs2: ignore negated quota changes + gfs2: fix an oops in gfs2_permission + media: cobalt: Use FIELD_GET() to extract Link Width + media: ccs: Fix driver quirk struct documentation + media: imon: fix access to invalid resource for the second interface + drm/amd/display: Avoid NULL dereference of timing generator + kgdb: Flush console before entering kgdb on panic + riscv: VMAP_STACK overflow detection thread-safe + i2c: dev: copy userspace array safely + ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings + drm/qxl: prevent memory leak + ALSA: hda/realtek: Add quirk for ASUS UX7602ZM + drm/amdgpu: fix software pci_unplug on some chips + pwm: Fix double shift bug + mtd: rawnand: tegra: add missing check for platform_get_irq() + wifi: iwlwifi: Use FW rate for non-data frames + sched/core: Optimize in_task() and in_interrupt() a bit + samples/bpf: syscall_tp_user: Rename num_progs into nr_tests + samples/bpf: syscall_tp_user: Fix array out-of-bound access + dt-bindings: serial: fix regex pattern for matching serial node children + SUNRPC: ECONNRESET might require a rebind + mtd: rawnand: intel: check return value of devm_kasprintf() + mtd: rawnand: meson: check return value of devm_kasprintf() + drm/i915/mtl: avoid stringop-overflow warning + NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking + SUNRPC: Add an IS_ERR() check back to where it was + NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO + SUNRPC: Fix RPC client cleaned up the freed pipefs dentries + RISC-V: hwprobe: Fix vDSO SIGSEGV + riscv: provide riscv-specific is_trap_insn() + gfs2: Silence "suspicious RCU usage in gfs2_permission" warning + drm/i915/tc: Fix -Wformat-truncation in intel_tc_port_init + vdpa_sim_blk: allocate the buffer zeroed + vhost-vdpa: fix use after free in vhost_vdpa_probe() + gcc-plugins: randstruct: Only warn about true flexible arrays + bpf: handle ldimm64 properly in check_cfg() + bpf: fix precision backtracking instruction iteration + net: set SOCK_RCU_FREE before inserting socket into hashtable + ipvlan: add ipvlan_route_v6_outbound() helper + tty: Fix uninit-value access in ppp_sync_receive() + xen/events: avoid using info_for_irq() in xen_send_IPI_one() + net: hns3: fix add VLAN fail issue + net: hns3: add barrier in vf mailbox reply process + net: hns3: fix incorrect capability bit display for copper port + net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs + net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() + net: hns3: fix VF reset fail issue + net: hns3: fix VF wrong speed and duplex issue + tipc: Fix kernel-infoleak due to uninitialized TLV value + net: mvneta: fix calls to page_pool_get_stats + ppp: limit MRU to 64K + xen/events: fix delayed eoi list handling + blk-mq: make sure active queue usage is held for bio_integrity_prep() + ptp: annotate data-race around q->head and q->tail + bonding: stop the device in bond_setup_by_slave() + net: ethernet: cortina: Fix max RX frame define + net: ethernet: cortina: Handle large frames + net: ethernet: cortina: Fix MTU max setting + af_unix: fix use-after-free in unix_stream_read_actor() + netfilter: nf_conntrack_bridge: initialize err to 0 + netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() + netfilter: nf_tables: bogus ENOENT when destroying element which does not exist + net: stmmac: fix rx budget limit check + net: stmmac: avoid rx queue overrun + pds_core: use correct index to mask irq + pds_core: fix up some format-truncation complaints + gve: Fixes for napi_poll when budget is 0 + io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval + net/mlx5: Decouple PHC .adjtime and .adjphase implementations + net/mlx5e: fix double free of encap_header + net/mlx5e: fix double free of encap_header in update funcs + net/mlx5e: Fix pedit endianness + net/mlx5: Consolidate devlink documentation in devlink/mlx5.rst + net/mlx5e: Make tx_port_ts logic resilient to out-of-order CQEs + net/mlx5e: Add recovery flow for tx devlink health reporter for unhealthy PTP SQ + net/mlx5e: Update doorbell for port timestamping CQ before the software counter + net/mlx5: Increase size of irq name buffer + net/mlx5e: Reduce the size of icosq_str + net/mlx5e: Check return value of snprintf writing to fw_version buffer + net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors + net: sched: do not offload flows with a helper in act_ct + macvlan: Don't propagate promisc change to lower dev in passthru + tools/power/turbostat: Fix a knl bug + tools/power/turbostat: Enable the C-state Pre-wake printing + scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 + cifs: spnego: add ';' in HOST_KEY_LEN + cifs: fix check of rc in function generate_smb3signingkey + perf/core: Fix cpuctx refcounting + i915/perf: Fix NULL deref bugs with drm_dbg() calls + perf: arm_cspmu: Reject events meant for other PMUs + drivers: perf: Check find_first_bit() return value + media: venus: hfi: add checks to perform sanity on queue pointers + perf intel-pt: Fix async branch flags + powerpc/perf: Fix disabling BHRB and instruction sampling + randstruct: Fix gcc-plugin performance mode to stay in group + bpf: Fix check_stack_write_fixed_off() to correctly spill imm + bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END + scsi: mpt3sas: Fix loop logic + scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers + scsi: ufs: qcom: Update PHY settings only when scaling to higher gears + scsi: qla2xxx: Fix system crash due to bad pointer access + scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR + crypto: x86/sha - load modules based on CPU features + x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4 + x86/apic/msi: Fix misconfigured non-maskable MSI quirk + x86/cpu/hygon: Fix the CPU topology evaluation for real + KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space + KVM: x86: Ignore MSR_AMD64_TW_CFG access + KVM: x86: Clear bit12 of ICR after APIC-write VM-exit + KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. + mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER + sched: psi: fix unprivileged polling against cgroups + audit: don't take task_lock() in audit_exe_compare() code path + audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() + proc: sysctl: prevent aliased sysctls from getting passed to init + tty/sysrq: replace smp_processor_id() with get_cpu() + tty: serial: meson: fix hard LOCKUP on crtscts mode + hvc/xen: fix console unplug + hvc/xen: fix error path in xen_hvc_init() to always register frontend driver + hvc/xen: fix event channel handling for secondary consoles + PCI/sysfs: Protect driver's D3cold preference from user space + mm/damon/sysfs: remove requested targets when online-commit inputs + mm/damon/sysfs: update monitoring target regions for online input commit + watchdog: move softlockup_panic back to early_param + iommufd: Fix missing update of domains_itree after splitting iopt_area + fbdev: stifb: Make the STI next font pointer a 32-bit signed offset + dm crypt: account large pages in cc->n_allocated_pages + mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation + mm/damon/ops-common: avoid divide-by-zero during region hotness calculation + mm/damon: implement a function for max nr_accesses safe calculation + mm/damon/core: avoid divide-by-zero during monitoring results update + mm/damon/sysfs-schemes: handle tried region directory allocation failure + mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure + mm/damon/sysfs: check error from damon_sysfs_update_target() + parisc: Add nop instructions after TLB inserts + ACPI: resource: Do IRQ override on TongFang GMxXGxx + regmap: Ensure range selector registers are updated after cache sync + wifi: ath11k: fix temperature event locking + wifi: ath11k: fix dfs radar event locking + wifi: ath11k: fix htt pktlog locking + wifi: ath11k: fix gtk offload status event locking + wifi: ath12k: fix htt mlo-offset event locking + wifi: ath12k: fix dfs-radar and temperature event locking + mmc: meson-gx: Remove setting of CMD_CFG_ERROR + genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware + sched/core: Fix RQCF_ACT_SKIP leak + KEYS: trusted: tee: Refactor register SHM usage + KEYS: trusted: Rollback init_trusted() consistently + PCI: keystone: Don't discard .remove() callback + PCI: keystone: Don't discard .probe() callback + arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer + arm64: module: Fix PLT counting when CONFIG_RANDOMIZE_BASE=n + parisc/agp: Use 64-bit LE values in SBA IOMMU PDIR table + parisc/pdc: Add width field to struct pdc_model + parisc/power: Add power soft-off when running on qemu + cpufreq: stats: Fix buffer overflow detection in trans_stats() + powercap: intel_rapl: Downgrade BIOS locked limits pr_warn() to pr_debug() + clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data + clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider + clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks + clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks + ksmbd: fix recursive locking in vfs helpers + ksmbd: handle malformed smb1 message + ksmbd: fix slab out of bounds write in smb_inherit_dacl() + mmc: vub300: fix an error code + mmc: sdhci_am654: fix start loop index for TAP value parsing + mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A + PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() + PCI: kirin: Don't discard .remove() callback + PCI: exynos: Don't discard .remove() callback + wifi: wilc1000: use vmm_table as array in wilc struct + svcrdma: Drop connection after an RDMA Read error + rcu/tree: Defer setting of jiffies during stall reset + arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM + dt-bindings: timer: renesas,rz-mtu3: Fix overflow/underflow interrupt names + PM: hibernate: Use __get_safe_page() rather than touching the list + PM: hibernate: Clean up sync_read handling in snapshot_write_next() + rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects + btrfs: don't arbitrarily slow down delalloc if we're committing + thermal: intel: powerclamp: fix mismatch in get function for max_idle + arm64: dts: qcom: ipq5332: Fix hwlock index for SMEM + arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM + firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit + ACPI: FPDT: properly handle invalid FPDT subtables + arm64: dts: qcom: ipq9574: Fix hwlock index for SMEM + arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size + leds: trigger: netdev: Move size check in set_device_name + mfd: qcom-spmi-pmic: Fix reference leaks in revid helper + mfd: qcom-spmi-pmic: Fix revid implementation + ima: annotate iint mutex to avoid lockdep false positive warnings + ima: detect changes to the backing overlay file + netfilter: nf_tables: split async and sync catchall in two functions + ASoC: soc-dai: add flag to mute and unmute stream during trigger + ASoC: codecs: wsa883x: make use of new mute_unmute_on_trigger flag + selftests/resctrl: Fix uninitialized .sa_flags + selftests/resctrl: Remove duplicate feature check from CMT test + selftests/resctrl: Move _GNU_SOURCE define into Makefile + selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests + hid: lenovo: Resend all settings on reset_resume for compact keyboards + ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix + jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev + quota: explicitly forbid quota files from being encrypted + kernel/reboot: emergency_restart: Set correct system_state + i2c: core: Run atomic i2c xfer when !preemptible + selftests/clone3: Fix broken test under !CONFIG_TIME_NS + tracing: Have the user copy of synthetic event address use correct context + driver core: Release all resources during unbind before updating device links + mcb: fix error handling for different scenarios when parsing + dmaengine: stm32-mdma: correct desc prep when channel running + s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() + s390/cmma: fix detection of DAT pages + mm/cma: use nth_page() in place of direct struct page manipulation + mm/memory_hotplug: use pfn math in place of direct struct page manipulation + mm: make PR_MDWE_REFUSE_EXEC_GAIN an unsigned long + mtd: cfi_cmdset_0001: Byte swap OTP info + cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails + i3c: master: cdns: Fix reading status register + i3c: master: svc: fix race condition in ibi work thread + i3c: master: svc: fix wrong data return when IBI happen during start frame + i3c: master: svc: fix ibi may not return mandatory data byte + i3c: master: svc: fix check wrong status register in irq handler + i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen + i3c: master: svc: fix random hot join failure since timeout error + cxl/region: Fix x1 root-decoder granularity calculations + cxl/port: Fix delete_endpoint() vs parent unregistration race + pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable + pmdomain: amlogic: Fix mask for the second NNA mem PD domain + pmdomain: imx: Make imx pgc power domain also set the fwnode + PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers + PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card + torture: Add a kthread-creation callback to _torture_create_kthread() + torture: Add lock_torture writer_fifo module parameter + torture: Make torture_hrtimeout_*() use TASK_IDLE + torture: Move stutter_wait() timeouts to hrtimers + torture: Make torture_hrtimeout_ns() take an hrtimer mode parameter + rcutorture: Fix stuttering races and other issues + mm/hugetlb: prepare hugetlb_follow_page_mask() for FOLL_PIN + mm/hugetlb: use nth_page() in place of direct struct page manipulation + parisc: Prevent booting 64-bit kernels on PA1.x machines + parisc/pgtable: Do not drop upper 5 address bits of physical address + parisc/power: Fix power soft-off when running on qemu + xhci: Enable RPM on controllers that support low-power states + fs: add ctime accessors infrastructure + smb3: fix creating FIFOs when mounting with "sfu" mount option + smb3: fix touch -h of symlink + smb3: allow dumping session and tcon id to improve stats analysis and debugging + smb3: fix caching of ctime on setxattr + smb: client: fix use-after-free bug in cifs_debug_data_proc_show() + smb: client: fix use-after-free in smb2_query_info_compound() + smb: client: fix potential deadlock when releasing mids + cifs: reconnect helper should set reconnect for the right channel + cifs: force interface update before a fresh session setup + cifs: do not reset chan_max if multichannel is not supported at mount + cifs: Fix encryption of cleared, but unset rq_iter data buffers + xfs: recovery should not clear di_flushiter unconditionally + btrfs: zoned: wait for data BG to be finished on direct IO allocation + ALSA: info: Fix potential deadlock at disconnection + ALSA: hda/realtek: Enable Mute LED on HP 255 G8 + ALSA: hda/realtek - Add Dell ALC295 to pin fall back table + ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC + ALSA: hda/realtek: Enable Mute LED on HP 255 G10 + ALSA: hda/realtek: Add quirks for HP Laptops + Revert ncsi: Propagate carrier gain/loss events to the NCSI controller + Revert "i2c: pxa: move to generic GPIO recovery" + lsm: fix default return value for vm_enough_memory + lsm: fix default return value for inode_getsecctx + sbsa_gwdt: Calculate timeout with 64-bit math + i2c: designware: Disable TX_EMPTY irq while waiting for block length byte + s390/ap: fix AP bus crash on early config change callback invocation + net: ethtool: Fix documentation of ethtool_sprintf() + net: dsa: lan9303: consequently nested-lock physical MDIO + net: phylink: initialize carrier state at creation + gfs2: don't withdraw if init_threads() got interrupted + i2c: i801: fix potential race in i801_block_transaction_byte_by_byte + f2fs: do not return EFSCORRUPTED, but try to run online repair + f2fs: set the default compress_level on ioctl + f2fs: avoid format-overflow warning + f2fs: split initial and dynamic conditions for extent_cache + media: lirc: drop trailing space from scancode transmit + media: sharp: fix sharp encoding + media: venus: hfi_parser: Add check to keep the number of codecs within range + media: venus: hfi: fix the check to handle session buffer requirement + media: venus: hfi: add checks to handle capabilities from firmware + media: ccs: Correctly initialise try compose rectangle + drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection + drm/mediatek/dp: fix memory leak on ->get_edid callback error path + dm-bufio: fix no-sleep mode + dm-verity: don't use blocking calls from tasklets + nfsd: fix file memleak on client_opens_release + NFSD: Update nfsd_cache_append() to use xdr_stream + LoongArch: Mark __percpu functions as always inline + riscv: Using TOOLCHAIN_HAS_ZIHINTPAUSE marco replace zihintpause + riscv: put interrupt entries into .irqentry.text + riscv: mm: Update the comment of CONFIG_PAGE_OFFSET + riscv: correct pt_level name via pgtable_l5/4_enabled + riscv: kprobes: allow writing to x0 + mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 + mm: fix for negative counter: nr_file_hugepages + mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors + mptcp: deal with large GSO size + mptcp: add validity check for sending RM_ADDR + mptcp: fix setsockopt(IP_TOS) subflow locking + selftests: mptcp: fix fastclose with csum failure + mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER + media: qcom: camss: Fix pm_domain_on sequence in probe + media: qcom: camss: Fix vfe_get() error jump + media: qcom: camss: Fix VFE-17x vfe_disable_output() + media: qcom: camss: Fix VFE-480 vfe_disable_output() + media: qcom: camss: Fix missing vfe_lite clocks check + media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 + media: qcom: camss: Fix invalid clock enable bit disjunction + media: qcom: camss: Fix csid-gen2 for test pattern generator + ext4: fix race between writepages and remount + ext4: make sure allocate pending entry not fail + ext4: apply umask if ACL support is disabled + ext4: correct offset of gdb backup in non meta_bg group to update_backups + ext4: mark buffer new if it is unwritten to avoid stale data exposure + ext4: correct return value of ext4_convert_meta_bg + ext4: correct the start block of counting reserved clusters + ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks + ext4: add missed brelse in update_backups + ext4: properly sync file size update after O_SYNC direct IO + ext4: fix racy may inline data check in dio write + drm/amd/pm: Handle non-terminated overdrive commands. + drm: bridge: it66121: ->get_edid callback must not return err pointers + drm/i915/mtl: Support HBR3 rate with C10 phy and eDP in MTL + drm/i915: Bump GLK CDCLK frequency when driving multiple pipes + drm/i915: Fix potential spectre vulnerability + drm/i915: Flush WC GGTT only on required platforms + drm/amdgpu/smu13: drop compute workload workaround + drm/amdgpu: don't use pci_is_thunderbolt_attached() + drm/amdgpu: fix GRBM read timeout when do mes_self_test + drm/amdgpu: add a retry for IP discovery init + drm/amdgpu: don't use ATRM for external devices + drm/amdgpu: fix error handling in amdgpu_vm_init + drm/amdgpu: fix error handling in amdgpu_bo_list_get() + drm/amdgpu: lower CS errors to debug severity + drm/amdgpu: Fix possible null pointer dereference + drm/amd/display: Guard against invalid RPTR/WPTR being set + drm/amd/display: Fix DSC not Enabled on Direct MST Sink + drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() + drm/amd/display: Enable fast plane updates on DCN3.2 and above + drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox + powerpc/powernv: Fix fortify source warnings in opal-prd.c + tracing: Have trace_event_file have ref counters + net/mlx5e: Avoid referencing skb after free-ing in drop path of mlx5e_sq_xmit_wqe + net/mlx5e: Track xmit submission to PTP WQ after populating metadata map Linux 6.5.13 - net/mlx5e: Track xmit submission to PTP WQ after populating metadata map - net/mlx5e: Avoid referencing skb after free-ing in drop path of mlx5e_sq_xmit_wqe - tracing: Have trace_event_file have ref counters - powerpc/powernv: Fix fortify source warnings in opal-prd.c - drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox - drm/amd/display: Enable fast plane updates on DCN3.2 and above - drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() - drm/amd/display: Fix DSC not Enabled on Direct MST Sink - drm/amd/display: Guard against invalid RPTR/WPTR being set - drm/amdgpu: Fix possible null pointer dereference - drm/amdgpu: lower CS errors to debug severity - drm/amdgpu: fix error handling in amdgpu_bo_list_get() - drm/amdgpu: fix error handling in amdgpu_vm_init - drm/amdgpu: don't use ATRM for external devices - drm/amdgpu: add a retry for IP discovery init - drm/amdgpu: fix GRBM read timeout when do mes_self_test - drm/amdgpu: don't use pci_is_thunderbolt_attached() - drm/amdgpu/smu13: drop compute workload workaround - drm/amd/pm: Fix error of MACO flag setting code - drm/i915: Flush WC GGTT only on required platforms - drm/i915: Fix potential spectre vulnerability - drm/i915: Bump GLK CDCLK frequency when driving multiple pipes - drm/i915/mtl: Support HBR3 rate with C10 phy and eDP in MTL - drm: bridge: it66121: ->get_edid callback must not return err pointers - drm/amd/pm: Handle non-terminated overdrive commands. - ext4: fix racy may inline data check in dio write - ext4: properly sync file size update after O_SYNC direct IO - ext4: add missed brelse in update_backups - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks - ext4: correct the start block of counting reserved clusters - ext4: correct return value of ext4_convert_meta_bg - ext4: mark buffer new if it is unwritten to avoid stale data exposure - ext4: correct offset of gdb backup in non meta_bg group to update_backups - ext4: apply umask if ACL support is disabled - ext4: make sure allocate pending entry not fail - ext4: fix race between writepages and remount - Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" - media: qcom: camss: Fix csid-gen2 for test pattern generator - media: qcom: camss: Fix invalid clock enable bit disjunction - media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 - media: qcom: camss: Fix missing vfe_lite clocks check - media: qcom: camss: Fix VFE-480 vfe_disable_output() - media: qcom: camss: Fix VFE-17x vfe_disable_output() - media: qcom: camss: Fix vfe_get() error jump - media: qcom: camss: Fix pm_domain_on sequence in probe - mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER - r8169: add handling DASH when DASH is disabled - r8169: fix network lost after resume on DASH systems - selftests: mptcp: fix fastclose with csum failure - mptcp: fix setsockopt(IP_TOS) subflow locking - mptcp: add validity check for sending RM_ADDR - mptcp: deal with large GSO size - mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors - mm: fix for negative counter: nr_file_hugepages - mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 - riscv: kprobes: allow writing to x0 - riscv: correct pt_level name via pgtable_l5/4_enabled - riscv: mm: Update the comment of CONFIG_PAGE_OFFSET - riscv: put interrupt entries into .irqentry.text - riscv: Using TOOLCHAIN_HAS_ZIHINTPAUSE marco replace zihintpause - LoongArch: Mark __percpu functions as always inline - NFSD: Update nfsd_cache_append() to use xdr_stream - nfsd: fix file memleak on client_opens_release - dm-verity: don't use blocking calls from tasklets - dm-bufio: fix no-sleep mode - drm/mediatek/dp: fix memory leak on ->get_edid callback error path - drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection - media: ccs: Correctly initialise try compose rectangle - media: venus: hfi: add checks to handle capabilities from firmware - media: venus: hfi: fix the check to handle session buffer requirement - media: venus: hfi_parser: Add check to keep the number of codecs within range - media: sharp: fix sharp encoding - media: lirc: drop trailing space from scancode transmit - f2fs: split initial and dynamic conditions for extent_cache - f2fs: avoid format-overflow warning - f2fs: set the default compress_level on ioctl - f2fs: do not return EFSCORRUPTED, but try to run online repair - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte - gfs2: don't withdraw if init_threads() got interrupted - net: phylink: initialize carrier state at creation - net: dsa: lan9303: consequently nested-lock physical MDIO - net: ethtool: Fix documentation of ethtool_sprintf() - s390/ap: fix AP bus crash on early config change callback invocation - i2c: designware: Disable TX_EMPTY irq while waiting for block length byte - sbsa_gwdt: Calculate timeout with 64-bit math - lsm: fix default return value for inode_getsecctx - lsm: fix default return value for vm_enough_memory - Revert "i2c: pxa: move to generic GPIO recovery" - Revert ncsi: Propagate carrier gain/loss events to the NCSI controller - ALSA: hda/realtek: Add quirks for HP Laptops - ALSA: hda/realtek: Enable Mute LED on HP 255 G10 - ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC - ALSA: hda/realtek - Add Dell ALC295 to pin fall back table - ALSA: hda/realtek: Enable Mute LED on HP 255 G8 - ALSA: info: Fix potential deadlock at disconnection - btrfs: zoned: wait for data BG to be finished on direct IO allocation - xfs: recovery should not clear di_flushiter unconditionally - cifs: Fix encryption of cleared, but unset rq_iter data buffers - cifs: do not reset chan_max if multichannel is not supported at mount - cifs: force interface update before a fresh session setup - cifs: reconnect helper should set reconnect for the right channel - smb: client: fix potential deadlock when releasing mids - smb: client: fix use-after-free in smb2_query_info_compound() - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() - smb3: fix caching of ctime on setxattr - smb3: allow dumping session and tcon id to improve stats analysis and debugging - smb3: fix touch -h of symlink - smb3: fix creating FIFOs when mounting with "sfu" mount option - fs: add ctime accessors infrastructure - xhci: Enable RPM on controllers that support low-power states - parisc/power: Fix power soft-off when running on qemu - parisc/pgtable: Do not drop upper 5 address bits of physical address - parisc: Prevent booting 64-bit kernels on PA1.x machines - mm/hugetlb: use nth_page() in place of direct struct page manipulation - mm/hugetlb: prepare hugetlb_follow_page_mask() for FOLL_PIN - rcutorture: Fix stuttering races and other issues - torture: Make torture_hrtimeout_ns() take an hrtimer mode parameter - torture: Move stutter_wait() timeouts to hrtimers - torture: Make torture_hrtimeout_*() use TASK_IDLE - torture: Add lock_torture writer_fifo module parameter - torture: Add a kthread-creation callback to _torture_create_kthread() - PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card - PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers - pmdomain: imx: Make imx pgc power domain also set the fwnode - pmdomain: amlogic: Fix mask for the second NNA mem PD domain - pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable - cxl/port: Fix delete_endpoint() vs parent unregistration race - cxl/region: Fix x1 root-decoder granularity calculations - i3c: master: svc: fix random hot join failure since timeout error - i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen - i3c: master: svc: fix check wrong status register in irq handler - i3c: master: svc: fix ibi may not return mandatory data byte - i3c: master: svc: fix wrong data return when IBI happen during start frame - i3c: master: svc: fix race condition in ibi work thread - i3c: master: cdns: Fix reading status register - cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails - mtd: cfi_cmdset_0001: Byte swap OTP info - mm: make PR_MDWE_REFUSE_EXEC_GAIN an unsigned long - mm/memory_hotplug: use pfn math in place of direct struct page manipulation - mm/cma: use nth_page() in place of direct struct page manipulation - s390/cmma: fix detection of DAT pages - s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() - dmaengine: stm32-mdma: correct desc prep when channel running - mcb: fix error handling for different scenarios when parsing - driver core: Release all resources during unbind before updating device links - tracing: Have the user copy of synthetic event address use correct context - selftests/clone3: Fix broken test under !CONFIG_TIME_NS - i2c: core: Run atomic i2c xfer when !preemptible - kernel/reboot: emergency_restart: Set correct system_state - quota: explicitly forbid quota files from being encrypted - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev - ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix - hid: lenovo: Resend all settings on reset_resume for compact keyboards - selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests - selftests/resctrl: Move _GNU_SOURCE define into Makefile - selftests/resctrl: Remove duplicate feature check from CMT test - selftests/resctrl: Fix uninitialized .sa_flags - ASoC: codecs: wsa883x: make use of new mute_unmute_on_trigger flag - ASoC: soc-dai: add flag to mute and unmute stream during trigger - netfilter: nf_tables: split async and sync catchall in two functions - netfilter: nf_tables: remove catchall element in GC sync path - ima: detect changes to the backing overlay file - ima: annotate iint mutex to avoid lockdep false positive warnings - mfd: qcom-spmi-pmic: Fix revid implementation - mfd: qcom-spmi-pmic: Fix reference leaks in revid helper - leds: trigger: netdev: Move size check in set_device_name - arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size - arm64: dts: qcom: ipq9574: Fix hwlock index for SMEM - ACPI: FPDT: properly handle invalid FPDT subtables - firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit - arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM - arm64: dts: qcom: ipq5332: Fix hwlock index for SMEM - thermal: intel: powerclamp: fix mismatch in get function for max_idle - btrfs: don't arbitrarily slow down delalloc if we're committing - rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects - PM: hibernate: Clean up sync_read handling in snapshot_write_next() - PM: hibernate: Use __get_safe_page() rather than touching the list - dt-bindings: timer: renesas,rz-mtu3: Fix overflow/underflow interrupt names - arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM - rcu/tree: Defer setting of jiffies during stall reset - svcrdma: Drop connection after an RDMA Read error - wifi: wilc1000: use vmm_table as array in wilc struct - PCI: exynos: Don't discard .remove() callback - PCI: kirin: Don't discard .remove() callback - PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() - mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A - mmc: sdhci_am654: fix start loop index for TAP value parsing - mmc: vub300: fix an error code - ksmbd: fix slab out of bounds write in smb_inherit_dacl() - ksmbd: handle malformed smb1 message - ksmbd: fix recursive locking in vfs helpers - clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks - clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks - clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider - clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data - powercap: intel_rapl: Downgrade BIOS locked limits pr_warn() to pr_debug() - cpufreq: stats: Fix buffer overflow detection in trans_stats() - parisc/power: Add power soft-off when running on qemu - parisc/pdc: Add width field to struct pdc_model - parisc/agp: Use 64-bit LE values in SBA IOMMU PDIR table - arm64: module: Fix PLT counting when CONFIG_RANDOMIZE_BASE=n - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer - PCI: keystone: Don't discard .probe() callback - PCI: keystone: Don't discard .remove() callback - KEYS: trusted: Rollback init_trusted() consistently - KEYS: trusted: tee: Refactor register SHM usage - sched/core: Fix RQCF_ACT_SKIP leak - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware - mmc: meson-gx: Remove setting of CMD_CFG_ERROR - wifi: ath12k: fix dfs-radar and temperature event locking - wifi: ath12k: fix htt mlo-offset event locking - wifi: ath11k: fix gtk offload status event locking - wifi: ath11k: fix htt pktlog locking - wifi: ath11k: fix dfs radar event locking - wifi: ath11k: fix temperature event locking - regmap: Ensure range selector registers are updated after cache sync - ACPI: resource: Do IRQ override on TongFang GMxXGxx - parisc: Add nop instructions after TLB inserts - mm/damon/sysfs: check error from damon_sysfs_update_target() - mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure - mm/damon/sysfs-schemes: handle tried region directory allocation failure - mm/damon/core: avoid divide-by-zero during monitoring results update - mm/damon: implement a function for max nr_accesses safe calculation - mm/damon/ops-common: avoid divide-by-zero during region hotness calculation - mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation - dm crypt: account large pages in cc->n_allocated_pages - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset - iommufd: Fix missing update of domains_itree after splitting iopt_area - watchdog: move softlockup_panic back to early_param - mm/damon/sysfs: update monitoring target regions for online input commit - mm/damon/sysfs: remove requested targets when online-commit inputs - PCI/sysfs: Protect driver's D3cold preference from user space - hvc/xen: fix event channel handling for secondary consoles - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver - hvc/xen: fix console unplug - tty: serial: meson: fix hard LOCKUP on crtscts mode - tty/sysrq: replace smp_processor_id() with get_cpu() - proc: sysctl: prevent aliased sysctls from getting passed to init - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() - audit: don't take task_lock() in audit_exe_compare() code path - sched: psi: fix unprivileged polling against cgroups - mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER - KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. - KVM: x86: Clear bit12 of ICR after APIC-write VM-exit - KVM: x86: Ignore MSR_AMD64_TW_CFG access - KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space - x86/cpu/hygon: Fix the CPU topology evaluation for real - x86/apic/msi: Fix misconfigured non-maskable MSI quirk - x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4 - crypto: x86/sha - load modules based on CPU features - scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR - scsi: qla2xxx: Fix system crash due to bad pointer access - scsi: ufs: qcom: Update PHY settings only when scaling to higher gears - scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers - scsi: mpt3sas: Fix loop logic - bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END - bpf: Fix check_stack_write_fixed_off() to correctly spill imm - randstruct: Fix gcc-plugin performance mode to stay in group - powerpc/perf: Fix disabling BHRB and instruction sampling - perf intel-pt: Fix async branch flags - media: venus: hfi: add checks to perform sanity on queue pointers - drivers: perf: Check find_first_bit() return value - perf: arm_cspmu: Reject events meant for other PMUs - i915/perf: Fix NULL deref bugs with drm_dbg() calls - perf/core: Fix cpuctx refcounting - cifs: fix check of rc in function generate_smb3signingkey - cifs: spnego: add ';' in HOST_KEY_LEN - scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 - tools/power/turbostat: Enable the C-state Pre-wake printing - tools/power/turbostat: Fix a knl bug - macvlan: Don't propagate promisc change to lower dev in passthru - net: sched: do not offload flows with a helper in act_ct - net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors - net/mlx5e: Check return value of snprintf writing to fw_version buffer - net/mlx5e: Reduce the size of icosq_str - net/mlx5: Increase size of irq name buffer - net/mlx5e: Update doorbell for port timestamping CQ before the software counter - net/mlx5e: Add recovery flow for tx devlink health reporter for unhealthy PTP SQ - net/mlx5e: Make tx_port_ts logic resilient to out-of-order CQEs - net/mlx5: Consolidate devlink documentation in devlink/mlx5.rst - net/mlx5e: Fix pedit endianness - net/mlx5e: fix double free of encap_header in update funcs - net/mlx5e: fix double free of encap_header - net/mlx5: Decouple PHC .adjtime and .adjphase implementations - io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval - gve: Fixes for napi_poll when budget is 0 - pds_core: fix up some format-truncation complaints - pds_core: use correct index to mask irq - net: stmmac: avoid rx queue overrun - net: stmmac: fix rx budget limit check - netfilter: nf_tables: bogus ENOENT when destroying element which does not exist - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() - netfilter: nf_conntrack_bridge: initialize err to 0 - af_unix: fix use-after-free in unix_stream_read_actor() - net: ethernet: cortina: Fix MTU max setting - net: ethernet: cortina: Handle large frames - net: ethernet: cortina: Fix max RX frame define - bonding: stop the device in bond_setup_by_slave() - ptp: annotate data-race around q->head and q->tail - blk-mq: make sure active queue usage is held for bio_integrity_prep() - xen/events: fix delayed eoi list handling - ppp: limit MRU to 64K - net: mvneta: fix calls to page_pool_get_stats - tipc: Fix kernel-infoleak due to uninitialized TLV value - net: hns3: fix VF wrong speed and duplex issue - net: hns3: fix VF reset fail issue - net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() - net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs - net: hns3: fix incorrect capability bit display for copper port - net: hns3: add barrier in vf mailbox reply process - net: hns3: fix add VLAN fail issue - xen/events: avoid using info_for_irq() in xen_send_IPI_one() - tty: Fix uninit-value access in ppp_sync_receive() - ipvlan: add ipvlan_route_v6_outbound() helper - net: set SOCK_RCU_FREE before inserting socket into hashtable - bpf: fix precision backtracking instruction iteration - bpf: handle ldimm64 properly in check_cfg() - gcc-plugins: randstruct: Only warn about true flexible arrays - vhost-vdpa: fix use after free in vhost_vdpa_probe() - vdpa_sim_blk: allocate the buffer zeroed - drm/i915/tc: Fix -Wformat-truncation in intel_tc_port_init - gfs2: Silence "suspicious RCU usage in gfs2_permission" warning - riscv: provide riscv-specific is_trap_insn() - RISC-V: hwprobe: Fix vDSO SIGSEGV - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries - NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO - SUNRPC: Add an IS_ERR() check back to where it was - NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking - drm/i915/mtl: avoid stringop-overflow warning - mtd: rawnand: meson: check return value of devm_kasprintf() - mtd: rawnand: intel: check return value of devm_kasprintf() - SUNRPC: ECONNRESET might require a rebind - dt-bindings: serial: fix regex pattern for matching serial node children - samples/bpf: syscall_tp_user: Fix array out-of-bound access - samples/bpf: syscall_tp_user: Rename num_progs into nr_tests - sched/core: Optimize in_task() and in_interrupt() a bit - wifi: iwlwifi: Use FW rate for non-data frames - mtd: rawnand: tegra: add missing check for platform_get_irq() - pwm: Fix double shift bug - drm/amdgpu: fix software pci_unplug on some chips - ALSA: hda/realtek: Add quirk for ASUS UX7602ZM - drm/qxl: prevent memory leak - ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings - i2c: dev: copy userspace array safely - riscv: VMAP_STACK overflow detection thread-safe - kgdb: Flush console before entering kgdb on panic - drm/amd/display: Avoid NULL dereference of timing generator - media: imon: fix access to invalid resource for the second interface - media: ccs: Fix driver quirk struct documentation - media: cobalt: Use FIELD_GET() to extract Link Width - gfs2: fix an oops in gfs2_permission - gfs2: ignore negated quota changes - media: ipu-bridge: increase sensor_name size - media: vivid: avoid integer overflow - media: gspca: cpia1: shift-out-of-bounds in set_flicker - i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. - virtio-blk: fix implicit overflow on virtio_max_dma_size - i2c: sun6i-p2wi: Prevent potential division by zero - i2c: fix memleak in i2c_new_client_device() - i2c: i801: Add support for Intel Birch Stream SoC - i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler - 9p: v9fs_listxattr: fix %s null argument warning - 9p/trans_fd: Annotate data-racy writes to file::f_flags - usb: gadget: f_ncm: Always set current gadget in ncm_bind() - usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present - f2fs: fix error handling of __get_node_page - f2fs: fix error path of __f2fs_build_free_nids - soundwire: dmi-quirks: update HP Omen match - usb: ucsi: glink: use the connector orientation GPIO to provide switch events - usb: dwc3: core: configure TX/RX threshold for DWC3_IP - phy: qualcomm: phy-qcom-eusb2-repeater: Zero out untouched tuning regs - phy: qualcomm: phy-qcom-eusb2-repeater: Use regmap_fields - dt-bindings: phy: qcom,snps-eusb2-repeater: Add magic tuning overrides - tty: vcc: Add check for kstrdup() in vcc_probe() - thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() - mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs - exfat: support handle zero-size directory - HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W - crypto: hisilicon/qm - prevent soft lockup in receive loop - ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk - PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk - misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller - PCI: dwc: Add missing PCI_EXP_LNKCAP_MLW handling - PCI: dwc: Add dw_pcie_link_set_max_link_width() - PCI: Disable ATS for specific Intel IPU E2000 devices - PCI: Extract ATS disabling to a helper function - PCI: Use FIELD_GET() to extract Link Width - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() - PCI: Do error check on own line to split long "if" conditions - atm: iphase: Do PCI error checks on own line - PCI: mvebu: Use FIELD_PREP() with Link Width - PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields - gpiolib: of: Add quirk for mt2701-cs42448 ASoC sound - ALSA: hda: Fix possible null-ptr-deref when assigning a stream - ARM: 9320/1: fix stack depot IRQ stack filter - HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround - jfs: fix array-index-out-of-bounds in diAlloc - jfs: fix array-index-out-of-bounds in dbFindLeaf - fs/jfs: Add validity check for db_maxag and db_agpref - fs/jfs: Add check for negative db_l2nbperpage - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs - RDMA/hfi1: Use FIELD_GET() to extract Link Width - ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware - crypto: pcrypt - Fix hungtask for PADATA_RESET - ASoC: SOF: Pass PCI SSID to machine driver - ASoC: soc-card: Add storage for PCI SSID - ASoC: mediatek: mt8188-mt6359: support dynamic pinctrl - selftests/efivarfs: create-read: fix a resource leak - arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size - drm/amd: check num of link levels when update pcie param - drm/amd/display: fix num_ways overflow error - drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL - drm/amdkfd: Fix shift out-of-bounds issue - drm/panel: st7703: Pick different reset sequence - drm/amdgpu/vkms: fix a possible null pointer dereference - drm/radeon: fix a possible null pointer dereference - drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference - drm/panel: fix a possible null pointer dereference - drm/amdgpu: Fix potential null pointer derefernce - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 - drm/msm/dp: skip validity check for DP CTS EDID checksum - drm: vmwgfx_surface.c: copy user-array safely - drm_lease.c: copy user-array safely - kernel: watch_queue: copy user-array safely - kernel: kexec: copy user-array safely - string.h: add array-wrappers for (v)memdup_user() - drm/amd/display: use full update for clip size increase of large plane source - drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments - drm/amdkfd: Fix a race condition of vram buffer unref in svm code - drm/amdgpu: not to save bo in the case of RAS err_event_athub - md: don't rely on 'mddev->pers' to be set in mddev_suspend() - drm/edid: Fixup h/vsync_end instead of h/vtotal - drm/amd/display: add seamless pipe topology transition check - drm/amd/display: Don't lock phantom pipe on disabling - drm/amd/display: Blank phantom OTG before enabling - drm/komeda: drop all currently held locks if deadlock happens - drm/amdkfd: ratelimited SQ interrupt messages - drm/gma500: Fix call trace when psb_gem_mm_init() fails - platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e - of: address: Fix address translation when address-size is greater than 2 - platform/chrome: kunit: initialize lock for fake ec_dev - gpiolib: acpi: Add a ignore interrupt quirk for Peaq C1010 - tsnep: Fix tsnep_request_irq() format-overflow warning - ACPI: EC: Add quirk for HP 250 G7 Notebook PC - Bluetooth: Fix double free in hci_conn_cleanup - Bluetooth: btusb: Add date->evt_skb is NULL check - wifi: iwlwifi: mvm: fix size check for fw_link_id - bpf: Ensure proper register state printing for cond jumps - vsock: read from socket's error queue - net: sfp: add quirk for FS's 2.5G copper SFP - wifi: ath10k: Don't touch the CE interrupt registers after power up - wifi: ath12k: mhi: fix potential memory leak in ath12k_mhi_register() - net: annotate data-races around sk->sk_dst_pending_confirm - net: annotate data-races around sk->sk_tx_queue_mapping - wifi: mt76: mt7921e: Support MT7992 IP in Xiaomi Redmibook 15 Pro (2023) - net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI - ACPI: APEI: Fix AER info corruption when error status data has multiple sections - wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() - wifi: ath10k: fix clang-specific fortify warning - wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() - wifi: ath9k: fix clang-specific fortify warnings - bpf: Detect IP == ksym.end as part of BPF program - atl1c: Work around the DMA RX overflow issue - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() - wifi: mac80211_hwsim: fix clang-specific fortify warning - wifi: ath12k: Ignore fragments from uninitialized peer in dp - wifi: plfxlc: fix clang-specific fortify warning - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size - workqueue: Provide one lock class key per work_on_cpu() callsite - cpu/hotplug: Don't offline the last non-isolated CPU - smp,csd: Throw an error if a CSD lock is stuck for too long - srcu: Only accelerate on enqueue time - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware - clocksource/drivers/timer-imx-gpt: Fix potential memory leak - selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config - srcu: Fix srcu_struct node grpmask overflow on 64-bit systems - perf/core: Bail out early if the request AUX area is out of bound - x86/retpoline: Make sure there are no unconverted return thunks due to KCSAN - lib/generic-radix-tree.c: Don't overflow in peek() - btrfs: abort transaction on generation mismatch when marking eb as dirty - locking/ww_mutex/test: Fix potential workqueue corruption + UBUNTU: Upstream stable to v6.5.13 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2051142 Title: Mantic update: v6.5.13 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Mantic: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.5.13 upstream stable release from git://git.kernel.org/ locking/ww_mutex/test: Fix potential workqueue corruption btrfs: abort transaction on generation mismatch when marking eb as dirty lib/generic-radix-tree.c: Don't overflow in peek() x86/retpoline: Make sure there are no unconverted return thunks due to KCSAN perf/core: Bail out early if the request AUX area is out of bound srcu: Fix srcu_struct node grpmask overflow on 64-bit systems selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config clocksource/drivers/timer-imx-gpt: Fix potential memory leak clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware srcu: Only accelerate on enqueue time smp,csd: Throw an error if a CSD lock is stuck for too long cpu/hotplug: Don't offline the last non-isolated CPU workqueue: Provide one lock class key per work_on_cpu() callsite x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size wifi: plfxlc: fix clang-specific fortify warning wifi: ath12k: Ignore fragments from uninitialized peer in dp wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: mac80211: don't return unset power in ieee80211_get_tx_power() atl1c: Work around the DMA RX overflow issue bpf: Detect IP == ksym.end as part of BPF program wifi: ath9k: fix clang-specific fortify warnings wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() wifi: ath10k: fix clang-specific fortify warning wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() ACPI: APEI: Fix AER info corruption when error status data has multiple sections net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI wifi: mt76: mt7921e: Support MT7992 IP in Xiaomi Redmibook 15 Pro (2023) net: annotate data-races around sk->sk_tx_queue_mapping net: annotate data-races around sk->sk_dst_pending_confirm wifi: ath12k: mhi: fix potential memory leak in ath12k_mhi_register() wifi: ath10k: Don't touch the CE interrupt registers after power up net: sfp: add quirk for FS's 2.5G copper SFP vsock: read from socket's error queue bpf: Ensure proper register state printing for cond jumps wifi: iwlwifi: mvm: fix size check for fw_link_id Bluetooth: btusb: Add date->evt_skb is NULL check Bluetooth: Fix double free in hci_conn_cleanup ACPI: EC: Add quirk for HP 250 G7 Notebook PC tsnep: Fix tsnep_request_irq() format-overflow warning gpiolib: acpi: Add a ignore interrupt quirk for Peaq C1010 platform/chrome: kunit: initialize lock for fake ec_dev of: address: Fix address translation when address-size is greater than 2 platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e drm/gma500: Fix call trace when psb_gem_mm_init() fails drm/amdkfd: ratelimited SQ interrupt messages drm/komeda: drop all currently held locks if deadlock happens drm/amd/display: Blank phantom OTG before enabling drm/amd/display: Don't lock phantom pipe on disabling drm/amd/display: add seamless pipe topology transition check drm/edid: Fixup h/vsync_end instead of h/vtotal md: don't rely on 'mddev->pers' to be set in mddev_suspend() drm/amdgpu: not to save bo in the case of RAS err_event_athub drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments drm/amd/display: use full update for clip size increase of large plane source string.h: add array-wrappers for (v)memdup_user() kernel: kexec: copy user-array safely kernel: watch_queue: copy user-array safely drm_lease.c: copy user-array safely drm: vmwgfx_surface.c: copy user-array safely drm/msm/dp: skip validity check for DP CTS EDID checksum drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amdgpu: Fix potential null pointer derefernce drm/panel: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/radeon: fix a possible null pointer dereference drm/amdgpu/vkms: fix a possible null pointer dereference drm/panel: st7703: Pick different reset sequence drm/amdkfd: Fix shift out-of-bounds issue drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported drm/amd/display: fix num_ways overflow error drm/amd: check num of link levels when update pcie param arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size selftests/efivarfs: create-read: fix a resource leak ASoC: mediatek: mt8188-mt6359: support dynamic pinctrl ASoC: soc-card: Add storage for PCI SSID ASoC: SOF: Pass PCI SSID to machine driver crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware RDMA/hfi1: Use FIELD_GET() to extract Link Width scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool fs/jfs: Add check for negative db_l2nbperpage fs/jfs: Add validity check for db_maxag and db_agpref jfs: fix array-index-out-of-bounds in dbFindLeaf jfs: fix array-index-out-of-bounds in diAlloc HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround ARM: 9320/1: fix stack depot IRQ stack filter ALSA: hda: Fix possible null-ptr-deref when assigning a stream gpiolib: of: Add quirk for mt2701-cs42448 ASoC sound PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields PCI: mvebu: Use FIELD_PREP() with Link Width atm: iphase: Do PCI error checks on own line PCI: Do error check on own line to split long "if" conditions scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Use FIELD_GET() to extract Link Width PCI: Extract ATS disabling to a helper function PCI: Disable ATS for specific Intel IPU E2000 devices PCI: dwc: Add dw_pcie_link_set_max_link_width() PCI: dwc: Add missing PCI_EXP_LNKCAP_MLW handling misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk crypto: hisilicon/qm - prevent soft lockup in receive loop HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W exfat: support handle zero-size directory mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager tty: vcc: Add check for kstrdup() in vcc_probe() dt-bindings: phy: qcom,snps-eusb2-repeater: Add magic tuning overrides phy: qualcomm: phy-qcom-eusb2-repeater: Use regmap_fields phy: qualcomm: phy-qcom-eusb2-repeater: Zero out untouched tuning regs usb: dwc3: core: configure TX/RX threshold for DWC3_IP usb: ucsi: glink: use the connector orientation GPIO to provide switch events soundwire: dmi-quirks: update HP Omen match f2fs: fix error path of __f2fs_build_free_nids f2fs: fix error handling of __get_node_page usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present usb: gadget: f_ncm: Always set current gadget in ncm_bind() 9p/trans_fd: Annotate data-racy writes to file::f_flags 9p: v9fs_listxattr: fix %s null argument warning i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler i2c: i801: Add support for Intel Birch Stream SoC i2c: fix memleak in i2c_new_client_device() i2c: sun6i-p2wi: Prevent potential division by zero virtio-blk: fix implicit overflow on virtio_max_dma_size i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. media: gspca: cpia1: shift-out-of-bounds in set_flicker media: vivid: avoid integer overflow media: ipu-bridge: increase sensor_name size gfs2: ignore negated quota changes gfs2: fix an oops in gfs2_permission media: cobalt: Use FIELD_GET() to extract Link Width media: ccs: Fix driver quirk struct documentation media: imon: fix access to invalid resource for the second interface drm/amd/display: Avoid NULL dereference of timing generator kgdb: Flush console before entering kgdb on panic riscv: VMAP_STACK overflow detection thread-safe i2c: dev: copy userspace array safely ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings drm/qxl: prevent memory leak ALSA: hda/realtek: Add quirk for ASUS UX7602ZM drm/amdgpu: fix software pci_unplug on some chips pwm: Fix double shift bug mtd: rawnand: tegra: add missing check for platform_get_irq() wifi: iwlwifi: Use FW rate for non-data frames sched/core: Optimize in_task() and in_interrupt() a bit samples/bpf: syscall_tp_user: Rename num_progs into nr_tests samples/bpf: syscall_tp_user: Fix array out-of-bound access dt-bindings: serial: fix regex pattern for matching serial node children SUNRPC: ECONNRESET might require a rebind mtd: rawnand: intel: check return value of devm_kasprintf() mtd: rawnand: meson: check return value of devm_kasprintf() drm/i915/mtl: avoid stringop-overflow warning NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RISC-V: hwprobe: Fix vDSO SIGSEGV riscv: provide riscv-specific is_trap_insn() gfs2: Silence "suspicious RCU usage in gfs2_permission" warning drm/i915/tc: Fix -Wformat-truncation in intel_tc_port_init vdpa_sim_blk: allocate the buffer zeroed vhost-vdpa: fix use after free in vhost_vdpa_probe() gcc-plugins: randstruct: Only warn about true flexible arrays bpf: handle ldimm64 properly in check_cfg() bpf: fix precision backtracking instruction iteration net: set SOCK_RCU_FREE before inserting socket into hashtable ipvlan: add ipvlan_route_v6_outbound() helper tty: Fix uninit-value access in ppp_sync_receive() xen/events: avoid using info_for_irq() in xen_send_IPI_one() net: hns3: fix add VLAN fail issue net: hns3: add barrier in vf mailbox reply process net: hns3: fix incorrect capability bit display for copper port net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix VF reset fail issue net: hns3: fix VF wrong speed and duplex issue tipc: Fix kernel-infoleak due to uninitialized TLV value net: mvneta: fix calls to page_pool_get_stats ppp: limit MRU to 64K xen/events: fix delayed eoi list handling blk-mq: make sure active queue usage is held for bio_integrity_prep() ptp: annotate data-race around q->head and q->tail bonding: stop the device in bond_setup_by_slave() net: ethernet: cortina: Fix max RX frame define net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix MTU max setting af_unix: fix use-after-free in unix_stream_read_actor() netfilter: nf_conntrack_bridge: initialize err to 0 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() netfilter: nf_tables: bogus ENOENT when destroying element which does not exist net: stmmac: fix rx budget limit check net: stmmac: avoid rx queue overrun pds_core: use correct index to mask irq pds_core: fix up some format-truncation complaints gve: Fixes for napi_poll when budget is 0 io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval net/mlx5: Decouple PHC .adjtime and .adjphase implementations net/mlx5e: fix double free of encap_header net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: Fix pedit endianness net/mlx5: Consolidate devlink documentation in devlink/mlx5.rst net/mlx5e: Make tx_port_ts logic resilient to out-of-order CQEs net/mlx5e: Add recovery flow for tx devlink health reporter for unhealthy PTP SQ net/mlx5e: Update doorbell for port timestamping CQ before the software counter net/mlx5: Increase size of irq name buffer net/mlx5e: Reduce the size of icosq_str net/mlx5e: Check return value of snprintf writing to fw_version buffer net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors net: sched: do not offload flows with a helper in act_ct macvlan: Don't propagate promisc change to lower dev in passthru tools/power/turbostat: Fix a knl bug tools/power/turbostat: Enable the C-state Pre-wake printing scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 cifs: spnego: add ';' in HOST_KEY_LEN cifs: fix check of rc in function generate_smb3signingkey perf/core: Fix cpuctx refcounting i915/perf: Fix NULL deref bugs with drm_dbg() calls perf: arm_cspmu: Reject events meant for other PMUs drivers: perf: Check find_first_bit() return value media: venus: hfi: add checks to perform sanity on queue pointers perf intel-pt: Fix async branch flags powerpc/perf: Fix disabling BHRB and instruction sampling randstruct: Fix gcc-plugin performance mode to stay in group bpf: Fix check_stack_write_fixed_off() to correctly spill imm bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END scsi: mpt3sas: Fix loop logic scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: ufs: qcom: Update PHY settings only when scaling to higher gears scsi: qla2xxx: Fix system crash due to bad pointer access scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR crypto: x86/sha - load modules based on CPU features x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4 x86/apic/msi: Fix misconfigured non-maskable MSI quirk x86/cpu/hygon: Fix the CPU topology evaluation for real KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: Clear bit12 of ICR after APIC-write VM-exit KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER sched: psi: fix unprivileged polling against cgroups audit: don't take task_lock() in audit_exe_compare() code path audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() proc: sysctl: prevent aliased sysctls from getting passed to init tty/sysrq: replace smp_processor_id() with get_cpu() tty: serial: meson: fix hard LOCKUP on crtscts mode hvc/xen: fix console unplug hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix event channel handling for secondary consoles PCI/sysfs: Protect driver's D3cold preference from user space mm/damon/sysfs: remove requested targets when online-commit inputs mm/damon/sysfs: update monitoring target regions for online input commit watchdog: move softlockup_panic back to early_param iommufd: Fix missing update of domains_itree after splitting iopt_area fbdev: stifb: Make the STI next font pointer a 32-bit signed offset dm crypt: account large pages in cc->n_allocated_pages mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation mm/damon/ops-common: avoid divide-by-zero during region hotness calculation mm/damon: implement a function for max nr_accesses safe calculation mm/damon/core: avoid divide-by-zero during monitoring results update mm/damon/sysfs-schemes: handle tried region directory allocation failure mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure mm/damon/sysfs: check error from damon_sysfs_update_target() parisc: Add nop instructions after TLB inserts ACPI: resource: Do IRQ override on TongFang GMxXGxx regmap: Ensure range selector registers are updated after cache sync wifi: ath11k: fix temperature event locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix gtk offload status event locking wifi: ath12k: fix htt mlo-offset event locking wifi: ath12k: fix dfs-radar and temperature event locking mmc: meson-gx: Remove setting of CMD_CFG_ERROR genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware sched/core: Fix RQCF_ACT_SKIP leak KEYS: trusted: tee: Refactor register SHM usage KEYS: trusted: Rollback init_trusted() consistently PCI: keystone: Don't discard .remove() callback PCI: keystone: Don't discard .probe() callback arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer arm64: module: Fix PLT counting when CONFIG_RANDOMIZE_BASE=n parisc/agp: Use 64-bit LE values in SBA IOMMU PDIR table parisc/pdc: Add width field to struct pdc_model parisc/power: Add power soft-off when running on qemu cpufreq: stats: Fix buffer overflow detection in trans_stats() powercap: intel_rapl: Downgrade BIOS locked limits pr_warn() to pr_debug() clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks ksmbd: fix recursive locking in vfs helpers ksmbd: handle malformed smb1 message ksmbd: fix slab out of bounds write in smb_inherit_dacl() mmc: vub300: fix an error code mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() PCI: kirin: Don't discard .remove() callback PCI: exynos: Don't discard .remove() callback wifi: wilc1000: use vmm_table as array in wilc struct svcrdma: Drop connection after an RDMA Read error rcu/tree: Defer setting of jiffies during stall reset arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM dt-bindings: timer: renesas,rz-mtu3: Fix overflow/underflow interrupt names PM: hibernate: Use __get_safe_page() rather than touching the list PM: hibernate: Clean up sync_read handling in snapshot_write_next() rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects btrfs: don't arbitrarily slow down delalloc if we're committing thermal: intel: powerclamp: fix mismatch in get function for max_idle arm64: dts: qcom: ipq5332: Fix hwlock index for SMEM arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit ACPI: FPDT: properly handle invalid FPDT subtables arm64: dts: qcom: ipq9574: Fix hwlock index for SMEM arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size leds: trigger: netdev: Move size check in set_device_name mfd: qcom-spmi-pmic: Fix reference leaks in revid helper mfd: qcom-spmi-pmic: Fix revid implementation ima: annotate iint mutex to avoid lockdep false positive warnings ima: detect changes to the backing overlay file netfilter: nf_tables: split async and sync catchall in two functions ASoC: soc-dai: add flag to mute and unmute stream during trigger ASoC: codecs: wsa883x: make use of new mute_unmute_on_trigger flag selftests/resctrl: Fix uninitialized .sa_flags selftests/resctrl: Remove duplicate feature check from CMT test selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests hid: lenovo: Resend all settings on reset_resume for compact keyboards ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev quota: explicitly forbid quota files from being encrypted kernel/reboot: emergency_restart: Set correct system_state i2c: core: Run atomic i2c xfer when !preemptible selftests/clone3: Fix broken test under !CONFIG_TIME_NS tracing: Have the user copy of synthetic event address use correct context driver core: Release all resources during unbind before updating device links mcb: fix error handling for different scenarios when parsing dmaengine: stm32-mdma: correct desc prep when channel running s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() s390/cmma: fix detection of DAT pages mm/cma: use nth_page() in place of direct struct page manipulation mm/memory_hotplug: use pfn math in place of direct struct page manipulation mm: make PR_MDWE_REFUSE_EXEC_GAIN an unsigned long mtd: cfi_cmdset_0001: Byte swap OTP info cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails i3c: master: cdns: Fix reading status register i3c: master: svc: fix race condition in ibi work thread i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen i3c: master: svc: fix random hot join failure since timeout error cxl/region: Fix x1 root-decoder granularity calculations cxl/port: Fix delete_endpoint() vs parent unregistration race pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable pmdomain: amlogic: Fix mask for the second NNA mem PD domain pmdomain: imx: Make imx pgc power domain also set the fwnode PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card torture: Add a kthread-creation callback to _torture_create_kthread() torture: Add lock_torture writer_fifo module parameter torture: Make torture_hrtimeout_*() use TASK_IDLE torture: Move stutter_wait() timeouts to hrtimers torture: Make torture_hrtimeout_ns() take an hrtimer mode parameter rcutorture: Fix stuttering races and other issues mm/hugetlb: prepare hugetlb_follow_page_mask() for FOLL_PIN mm/hugetlb: use nth_page() in place of direct struct page manipulation parisc: Prevent booting 64-bit kernels on PA1.x machines parisc/pgtable: Do not drop upper 5 address bits of physical address parisc/power: Fix power soft-off when running on qemu xhci: Enable RPM on controllers that support low-power states fs: add ctime accessors infrastructure smb3: fix creating FIFOs when mounting with "sfu" mount option smb3: fix touch -h of symlink smb3: allow dumping session and tcon id to improve stats analysis and debugging smb3: fix caching of ctime on setxattr smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb: client: fix use-after-free in smb2_query_info_compound() smb: client: fix potential deadlock when releasing mids cifs: reconnect helper should set reconnect for the right channel cifs: force interface update before a fresh session setup cifs: do not reset chan_max if multichannel is not supported at mount cifs: Fix encryption of cleared, but unset rq_iter data buffers xfs: recovery should not clear di_flushiter unconditionally btrfs: zoned: wait for data BG to be finished on direct IO allocation ALSA: info: Fix potential deadlock at disconnection ALSA: hda/realtek: Enable Mute LED on HP 255 G8 ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek: Enable Mute LED on HP 255 G10 ALSA: hda/realtek: Add quirks for HP Laptops Revert ncsi: Propagate carrier gain/loss events to the NCSI controller Revert "i2c: pxa: move to generic GPIO recovery" lsm: fix default return value for vm_enough_memory lsm: fix default return value for inode_getsecctx sbsa_gwdt: Calculate timeout with 64-bit math i2c: designware: Disable TX_EMPTY irq while waiting for block length byte s390/ap: fix AP bus crash on early config change callback invocation net: ethtool: Fix documentation of ethtool_sprintf() net: dsa: lan9303: consequently nested-lock physical MDIO net: phylink: initialize carrier state at creation gfs2: don't withdraw if init_threads() got interrupted i2c: i801: fix potential race in i801_block_transaction_byte_by_byte f2fs: do not return EFSCORRUPTED, but try to run online repair f2fs: set the default compress_level on ioctl f2fs: avoid format-overflow warning f2fs: split initial and dynamic conditions for extent_cache media: lirc: drop trailing space from scancode transmit media: sharp: fix sharp encoding media: venus: hfi_parser: Add check to keep the number of codecs within range media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi: add checks to handle capabilities from firmware media: ccs: Correctly initialise try compose rectangle drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection drm/mediatek/dp: fix memory leak on ->get_edid callback error path dm-bufio: fix no-sleep mode dm-verity: don't use blocking calls from tasklets nfsd: fix file memleak on client_opens_release NFSD: Update nfsd_cache_append() to use xdr_stream LoongArch: Mark __percpu functions as always inline riscv: Using TOOLCHAIN_HAS_ZIHINTPAUSE marco replace zihintpause riscv: put interrupt entries into .irqentry.text riscv: mm: Update the comment of CONFIG_PAGE_OFFSET riscv: correct pt_level name via pgtable_l5/4_enabled riscv: kprobes: allow writing to x0 mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 mm: fix for negative counter: nr_file_hugepages mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mptcp: deal with large GSO size mptcp: add validity check for sending RM_ADDR mptcp: fix setsockopt(IP_TOS) subflow locking selftests: mptcp: fix fastclose with csum failure mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER media: qcom: camss: Fix pm_domain_on sequence in probe media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix VFE-480 vfe_disable_output() media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 media: qcom: camss: Fix invalid clock enable bit disjunction media: qcom: camss: Fix csid-gen2 for test pattern generator ext4: fix race between writepages and remount ext4: make sure allocate pending entry not fail ext4: apply umask if ACL support is disabled ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: mark buffer new if it is unwritten to avoid stale data exposure ext4: correct return value of ext4_convert_meta_bg ext4: correct the start block of counting reserved clusters ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: add missed brelse in update_backups ext4: properly sync file size update after O_SYNC direct IO ext4: fix racy may inline data check in dio write drm/amd/pm: Handle non-terminated overdrive commands. drm: bridge: it66121: ->get_edid callback must not return err pointers drm/i915/mtl: Support HBR3 rate with C10 phy and eDP in MTL drm/i915: Bump GLK CDCLK frequency when driving multiple pipes drm/i915: Fix potential spectre vulnerability drm/i915: Flush WC GGTT only on required platforms drm/amdgpu/smu13: drop compute workload workaround drm/amdgpu: don't use pci_is_thunderbolt_attached() drm/amdgpu: fix GRBM read timeout when do mes_self_test drm/amdgpu: add a retry for IP discovery init drm/amdgpu: don't use ATRM for external devices drm/amdgpu: fix error handling in amdgpu_vm_init drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: lower CS errors to debug severity drm/amdgpu: Fix possible null pointer dereference drm/amd/display: Guard against invalid RPTR/WPTR being set drm/amd/display: Fix DSC not Enabled on Direct MST Sink drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() drm/amd/display: Enable fast plane updates on DCN3.2 and above drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox powerpc/powernv: Fix fortify source warnings in opal-prd.c tracing: Have trace_event_file have ref counters net/mlx5e: Avoid referencing skb after free-ing in drop path of mlx5e_sq_xmit_wqe net/mlx5e: Track xmit submission to PTP WQ after populating metadata map Linux 6.5.13 UBUNTU: Upstream stable to v6.5.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2051142/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp