Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.99 upstream stable release
from git://git.kernel.org/
HID: asus: use spinlock to protect concurrent accesses
HID: asus: use spinlock to safely schedule workers
powerpc/mm: Rearrange if-else block to avoid clang warning
ARM: OMAP2+: Fix memory leak in realtime_counter_init()
arm64: dts: qcom: qcs404: use symbol names for PCIe resets
arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up
arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k
arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings
arm64: dts: imx8m: Align SoC unique ID node unit address
ARM: zynq: Fix refcount leak in zynq_early_slcr_init
arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
arm64: dts: qcom: sc7180: correct SPMI bus address cells
arm64: dts: qcom: sc7280: correct SPMI bus address cells
arm64: dts: meson-gx: Fix Ethernet MAC address unit name
arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
arm64: dts: msm8992-bullhead: add memory hole region
arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size
arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem
arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes
arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size
arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()
ARM: bcm2835_defconfig: Enable the framebuffer
ARM: s3c: fix s3c64xx_set_timer_source prototype
arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
ARM: imx: Call ida_simple_remove() for ida_simple_get
arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names
property
arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node
name
arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names
arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip
locking/rwsem: Optimize down_read_trylock() under highly contended case
locking/rwsem: Disable preemption in all down_read*() and up_read() code paths
arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN
ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
ARM: dts: imx7s: correct iomuxc gpr mux controller cells
arm64: dts: mt8192: Fix CPU map for single-cluster SoC
arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
blk-mq: avoid sleep in blk_mq_alloc_request_hctx
blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
blk-mq: correct stale comment of .get_budget
arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM
and MPSS memory regions
s390/dasd: Fix potential memleak in dasd_eckd_init()
sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()
sched/rt: pick_next_rt_entity(): check list_entry
x86/perf/zhaoxin: Add stepping check for ZXC
KEYS: asymmetric: Fix ECDSA use via keyctl uapi
arm64: dts: qcom: pmk8350: Specify PBS register for PON
arm64: dts: qcom: pmk8350: Use the correct PON compatible
block: bio-integrity: Copy flags when bio_integrity_payload is cloned
wifi: rsi: Fix memory leak in rsi_coex_attach()
wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
wifi: libertas: fix memory leak in lbs_init_adapter()
wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
wifi: rtlwifi: Fix global-out-of-bounds bug in
_rtl8812ae_phy_set_txpower_limit()
libbpf: Fix btf__align_of() by taking into account field offsets
wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
wifi: ipw2200: fix memory leak in ipw_wdev_init()
wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
crypto: x86/ghash - fix unaligned access in ghash_setkey()
ACPICA: Drop port I/O validation for some regions
genirq: Fix the return type of kstat_cpu_irqs_sum()
rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
lib/mpi: Fix buffer overrun when SG is too long
crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
ACPICA: nsrepair: handle cases without a return value correctly
thermal/drivers/tsens: Drop msm8976-specific defines
thermal/drivers/tsens: Add compat string for the qcom,msm8960
thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
thermal/drivers/tsens: fix slope values for msm8939
thermal/drivers/tsens: limit num_sensors to 9 for msm8939
wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
wifi: orinoco: check return value of hermes_write_wordrec()
wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback
function
ath9k: hif_usb: simplify if-if to if-else
ath9k: htc: clean up statistics macros
wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()
wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data()
ACPI: battery: Fix missing NUL-termination with large strings
crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
crypto: essiv - Handle EBUSY correctly
crypto: seqiv - Handle EBUSY correctly
powercap: fix possible name leak in powercap_register_zone()
x86: Mark stop_this_cpu() __noreturn
x86/microcode: Rip out the OLD_INTERFACE
UBUNTU: [Config] updateconfigs for MICROCODE_OLD_INTERFACE
x86/microcode: Default-disable late loading
x86/microcode: Print previous version of microcode after reload
x86/microcode: Add a parameter to microcode_check() to store CPU capabilities
x86/microcode: Check CPU capabilities after late microcode update correctly
x86/microcode: Adjust late loading result reporting message
crypto: xts - Handle EBUSY correctly
leds: led-class: Add missing put_device() to led_put()
crypto: ccp - Refactor out sev_fw_alloc()
crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
bpftool: profile online CPUs instead of possible
mt76: mt7915: fix polling firmware-own status
net/mlx5: Enhance debug print in page allocation failure
irqchip: Fix refcount leak in platform_irqchip_probe
irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
s390/mem_detect: fix detect_memory() error handling
s390/vmem: fix empty page tables cleanup under KASAN
net: add sock_init_data_uid()
tun: tun_chr_open(): correctly initialize socket uid
tap: tap_open(): correctly initialize socket uid
OPP: fix error checking in opp_migrate_dentry()
Bluetooth: L2CAP: Fix potential user-after-free
Bluetooth: hci_qca: get wakeup status from serdev device handle
s390/ap: fix status returned by ap_aqic()
s390/ap: fix status returned by ap_qact()
libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
crypto: rsa-pkcs1pad - Use akcipher_request_complete
m68k: /proc/hardware should depend on PROC_FS
RISC-V: time: initialize hrtimer based broadcast clock event device
wifi: iwl3945: Add missing check for create_singlethread_workqueue
wifi: iwl4965: Add missing check for create_singlethread_workqueue()
wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
selftests/bpf: Fix out-of-srctree build
ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models
ACPI: resource: Do IRQ override on all TongFang GMxRGxx
crypto: crypto4xx - Call dma_unmap_page when done
wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
thermal/drivers/hisi: Drop second sensor hi3660
can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus
error
bpf: Fix global subprog context argument resolution logic
irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
selftests/net: Interpret UDP_GRO cmsg data as an int value
l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
net: bcmgenet: fix MoCA LED control
sefltests: netdevsim: wait for devlink instance after netns removal
drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec
UBUNTU: [Config] updateconfigs for DRM_MXSFB
drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
drm/bridge: megachips: Fix error handling in i2c_register_driver()
drm/vkms: Fix memory leak in vkms_init()
drm/vkms: Fix null-ptr-deref in vkms_release()
drm/vc4: dpi: Add option for inverting pixel clock and output enable
drm/vc4: dpi: Fix format mapping for RGB565
drm: tidss: Fix pixel format definition
gpu: ipu-v3: common: Add of_node_put() for reference returned by
of_graph_get_port_by_id()
hwmon: (ftsteutates) Fix scaling of measurements
drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
drm/vc4: hvs: Set AXI panic modes
drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
drm/vc4: hdmi: Correct interlaced timings again
drm/msm: clean event_thread->worker in case of an error
scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription
scsi: qla2xxx: Fix exchange oversubscription
scsi: qla2xxx: Fix exchange oversubscription for management commands
ASoC: fsl_sai: Update to modern clocking terminology
ASoC: fsl_sai: initialize is_dsp_mode flag
drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
ALSA: hda/ca0132: minor fix for allocation size
drm/msm/gem: Add check for kmalloc
drm/msm/dpu: Disallow unallocated resources to be returned
drm/bridge: lt9611: fix sleep mode setup
drm/bridge: lt9611: fix HPD reenablement
drm/bridge: lt9611: fix polarity programming
drm/bridge: lt9611: fix programming of video modes
drm/bridge: lt9611: fix clock calculation
drm/bridge: lt9611: pass a pointer to the of node
drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags
drm/msm/dsi: Allow 2 CTRLs on v2.5.0
drm/msm: use strscpy instead of strncpy
drm/msm/dpu: Add check for cstate
drm/msm/dpu: Add check for pstates
drm/msm/mdp5: Add check for kzalloc
pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
pinctrl: mediatek: fix coding style
pinctrl: mediatek: Initialize variable pullen and pullup to zero
pinctrl: mediatek: Initialize variable *buf to zero
gpu: host1x: Don't skip assigning syncpoints to channels
drm/tegra: firewall: Check for is_addr_reg existence in IMM check
drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update()
drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
drm/mediatek: Use NULL instead of 0 for NULL pointer
drm/mediatek: Drop unbalanced obj unref
drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
drm/mediatek: Clean dangling pointer on bind error path
ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
gpio: vf610: connect GPIO label to dev name
spi: dw_bt1: fix MUX_MMIO dependencies
ASoC: mchp-spdifrx: fix controls which rely on rsr register
ASoC: mchp-spdifrx: fix return value in case completion times out
ASoC: mchp-spdifrx: fix controls that works with completion mechanism
ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
ASoC: rsnd: fixup #endif position
ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
ASoC: dt-bindings: meson: fix gx-card codec node regex
hwmon: (ltc2945) Handle error case in ltc2945_value_store
drm/amdgpu: fix enum odm_combine_mode mismatch
scsi: mpt3sas: Fix a memory leak
scsi: aic94xx: Add missing check for dma_map_single()
HID: multitouch: Add quirks for flipped axes
HID: retain initial quirks set up when creating HID devices
ASoC: codecs: Change bulk clock voting to optional voting in digital codecs
ASoC: codecs: rx-macro: move clk provider to managed variants
ASoC: codecs: tx-macro: move clk provider to managed variants
ASoC: codecs: rx-macro: move to individual clks from bulk
ASoC: codecs: tx-macro: move to individual clks from bulk
ASoC: codecs: lpass: fix incorrect mclk rate
spi: bcm63xx-hsspi: Fix multi-bit mode setting
hwmon: (mlxreg-fan) Return zero speed for broken fan
ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
dm: remove flush_scheduled_work() during local_exit()
NFSv4: keep state manager thread active if swap is enabled
nfs4trace: fix state manager flag printing
NFS: fix disabling of swap
spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
HID: bigben: use spinlock to protect concurrent accesses
HID: bigben_worker() remove unneeded check on report_field
HID: bigben: use spinlock to safely schedule workers
hid: bigben_probe(): validate report count
drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt()
nfsd: fix race to check ls_layouts
cifs: Fix lost destroy smbd connection when MR allocate failed
cifs: Fix warning and UAF when destroy the MR list
gfs2: jdata writepage fix
perf llvm: Fix inadvertent file creation
leds: led-core: Fix refcount leak in of_led_get()
perf inject: Use perf_data__read() for auxtrace
perf intel-pt: Add documentation for Event Trace and TNT disable
perf intel-pt: Add link to the perf wiki's Intel PT page
perf intel-pt: Add support for emulated ptwrite
perf intel-pt: Do not try to queue auxtrace data on pipe
perf tools: Fix auto-complete on aarch64
sparc: allow PM configs for sparc32 COMPILE_TEST
printf: fix errname.c list
objtool: add UACCESS exceptions for __tsan_volatile_read/write
mfd: cs5535: Don't build on UML
mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0
UBUNTU: [Config] updateconfigs for HISI_DMA
dmaengine: HISI_DMA should depend on ARCH_HISI
iio: light: tsl2563: Do not hardcode interrupt trigger type
usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe()
i2c: designware: fix i2c_dw_clk_rate() return size to be u32
soundwire: cadence: Don't overflow the command FIFOs
driver core: fix potential null-ptr-deref in device_add()
kobject: modify kobject_get_path() to take a const *
kobject: Fix slab-out-of-bounds in fill_kobj_path()
alpha/boot/tools/objstrip: fix the check for ELF header
media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL
media: uvcvideo: Remove s_ctrl and g_ctrl
media: uvcvideo: refactor __uvc_ctrl_add_mapping
media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS
media: uvcvideo: Use control names from framework
media: uvcvideo: Check controls flags before accessing them
media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible()
coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR
coresight: cti: Prevent negative values of enable count
coresight: cti: Add PM runtime call in enable_store
ACPI: resource: Add helper function acpi_dev_get_memory_resources()
usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources()
usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count
PCI/IOV: Enlarge virtfn sysfs name buffer
PCI: switchtec: Return -EFAULT for copy_to_user() errors
tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown()
tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown()
serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init()
Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in
set_protocol"
eeprom: idt_89hpesx: Fix error handling in idt_init()
applicom: Fix PCI device refcount leak in applicom_init()
firmware: stratix10-svc: add missing gen_pool_destroy() in
stratix10_svc_drv_probe()
VMCI: check context->notify_page after call to get_user_pages_fast() to avoid
GPF
misc/mei/hdcp: Use correct macros to initialize uuid_le
driver core: fix resource leak in device_add()
drivers: base: transport_class: fix possible memory leak
drivers: base: transport_class: fix resource leak when transport_add_device()
fails
firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
fotg210-udc: Add missing completion handler
dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers
usb: early: xhci-dbc: Fix a potential out-of-bound memory access
tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case
RDMA/cxgb4: add null-ptr-check after ip_dev_find()
usb: musb: mediatek: don't unregister something that wasn't registered
usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link()
usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func
usb: gadget: configfs: remove using list iterator after loop body as a ptr
usb: gadget: configfs: Restrict symlink creation is UDC already binded
iommu/vt-d: Set No Execute Enable bit in PASID table entry
power: supply: remove faulty cooling logic
RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
usb: max-3421: Fix setting of I/O pins
RDMA/irdma: Cap MSIX used to online CPUs + 1
serial: fsl_lpuart: fix RS485 RTS polariy inverse issue
tty: serial: imx: Handle RS485 DE signal active high
tty: serial: imx: disable Ageing Timer interrupt request irq
dmaengine: dw-edma: Fix readq_ch() return value truncation
phy: rockchip-typec: fix tcphy_get_mode error case
iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()
iommu: Fix error unwind in iommu_group_alloc()
dmaengine: sf-pdma: pdma_desc memory leak fix
dmaengine: dw-axi-dmac: Do not dereference NULL structure
iommu/vt-d: Fix error handling in sva enable/disable paths
iommu/vt-d: Remove duplicate identity domain flag
iommu/vt-d: Check FL and SL capability sanity in scalable mode
iommu/vt-d: Use second level for GPA->HPA translation
iommu/vt-d: Allow to use flush-queue when first level is default
IB/hfi1: Fix math bugs in hfi1_can_pin_pages()
IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
media: ti: cal: fix possible memory leak in cal_ctx_create()
media: platform: ti: Add missing check for devm_regulator_get
powerpc: Remove linker flag from KBUILD_AFLAGS
s390/vdso: remove -nostdlib compiler flag
s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64
builddeb: clean generated package content
media: max9286: Fix memleak in max9286_v4l2_register()
media: ov2740: Fix memleak in ov2740_init_controls()
media: ov5675: Fix memleak in ov5675_init_controls()
media: i2c: ov772x: Fix memleak in ov772x_probe()
media: i2c: imx219: Split common registers from mode tables
media: i2c: imx219: Fix binning for RAW8 capture
media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data
media: v4l2-jpeg: ignore the unknown APP14 marker
media: imx-jpeg: Apply clk_bulk api instead of operating specific clk
media: i2c: ov7670: 0 instead of -EINVAL was returned
media: usb: siano: Fix use after free bugs caused by do_submit_urb
media: saa7134: Use video_unregister_device for radio_dev
rpmsg: glink: Avoid infinite loop on intent for missing channel
udf: Define EFSCORRUPTED error code
ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
blk-iocost: fix divide by 0 error in calc_lcoefs()
trace/blktrace: fix memory leak with using debugfs_lookup()
wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()
rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
wifi: ath11k: debugfs: fix to work with multiple PCI devices
thermal: intel: Fix unsigned comparison with less than zero
timers: Prevent union confusion from unexpected restart_syscall()
x86/bugs: Reset speculation control settings on init
wifi: brcmfmac: ensure CLM version is null-terminated to prevent
stack-out-of-bounds
wifi: mt7601u: fix an integer underflow
inet: fix fast path in __inet_hash_connect()
ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB
ice: add missing checks for PF vsi type
ACPI: Don't build ACPICA with '-Os'
thermal: intel: intel_pch: Add support for Wellsburg PCH
clocksource: Suspend the watchdog temporarily when high read latency detected
crypto: hisilicon: Wipe entire pool on error
net: bcmgenet: Add a check for oversized packets
m68k: Check syscall_trace_enter() return code
netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()
wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
ACPI: video: Fix Lenovo Ideapad Z570 DMI match
net/mlx5: fw_tracer: Fix debug print
coda: Avoid partial allocation of sig_inputArgs
uaccess: Add minimum bounds check on kernel buffer size
s390/idle: mark arch_cpu_idle() noinstr
time/debug: Fix memory leak with using debugfs_lookup()
PM: domains: fix memory leak with using debugfs_lookup()
PM: EM: fix memory leak with using debugfs_lookup()
Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
hv_netvsc: Check status in SEND_RNDIS_PKT completion message
scm: add user copy checks to put_cmsg()
drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h
write
drm/amd/display: Fix potential null-deref in dm_resume
drm/omap: dsi: Fix excessive stack usage
HID: Add Mapping for System Microphone Mute
drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
drm/radeon: free iio for atombios when driver shutdown
scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
Revert "fbcon: don't lose the console font across generic->chip driver switch"
drm: amd: display: Fix memory leakage
drm/msm/dsi: Add missing check for alloc_ordered_workqueue
docs/scripts/gdb: add necessary make scripts_gdb step
ASoC: soc-compress: Reposition and add pcm_mutex
ASoC: kirkwood: Iterate over array indexes instead of using pointer math
regulator: max77802: Bounds check regulator id against opmode
regulator: s5m8767: Bounds check id indexing into arrays
gfs2: Improve gfs2_make_fs_rw error handling
hwmon: (coretemp) Simplify platform device handling
pinctrl: at91: use devm_kasprintf() to avoid potential leaks
scsi: snic: Fix memory leak with using debugfs_lookup()
HID: logitech-hidpp: Don't restart communication if not necessary
drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
dm thin: add cond_resched() to various workqueue loops
dm cache: add cond_resched() to various workqueue loops
nfsd: zero out pointers after putting nfsd_files on COPY setup error
drm/shmem-helper: Revert accidental non-GPL export
wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
firmware: coreboot: framebuffer: Ignore reserved pixel color bits
block: don't allow multiple bios for IOCB_NOWAIT issue
rtc: pm8xxx: fix set-alarm race
ipmi:ssif: resend_msg() cannot fail
ipmi_ssif: Rename idle state and check
s390/extmem: return correct segment type in __segment_load()
s390: discard .interp section
s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
s390/kprobes: fix current_kprobe never cleared after kprobes reenter
cifs: Fix uninitialized memory read in smb3_qfs_tcon()
btrfs: hold block group refcount during async discard
locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath
ksmbd: fix wrong data area length for smb2 lock request
ksmbd: do not allow the actual frame length to be smaller than the rfc1002
length
ARM: dts: exynos: correct HDMI phy compatible in Exynos4
hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
fs: hfsplus: fix UAF issue in hfsplus_put_super
exfat: fix reporting fs error when reading dir beyond EOF
exfat: fix unexpected EOF while reading dir
exfat: redefine DIR_DELETED as the bad cluster number
exfat: fix inode->i_blocks for non-512 byte sector size device
fs: dlm: don't set stop rx flag after node reset
fs: dlm: move sending fin message into state change handling
fs: dlm: send FIN ack back in right cases
f2fs: fix information leak in f2fs_move_inline_dirents()
f2fs: fix cgroup writeback accounting with fs-layer encryption
ocfs2: fix defrag path triggering jbd2 ASSERT
ocfs2: fix non-auto defrag path not working issue
selftests/landlock: Skip overlayfs tests when not supported
selftests/landlock: Test ptrace as much as possible with Yama
udf: Truncate added extents on failed expansion
udf: Do not bother merging very long extents
udf: Do not update file length for failed writes to inline files
udf: Preserve link count of system files
udf: Detect system inodes linked into directory hierarchy
udf: Fix file corruption when appending just after end of preallocated extent
RDMA/siw: Fix user page pinning accounting
KVM: Destroy target device if coalesced MMIO unregistration fails
KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
KVM: SVM: hyper-v: placate modpost section mismatch error
KVM: s390: disable migration mode when dirty tracking is disabled
x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
x86/reboot: Disable virtualization in an emergency if SVM is supported
x86/reboot: Disable SVM, not just VMX, when stopping CPUs
x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
x86/microcode/AMD: Add a @cpu parameter to the reloading functions
x86/microcode/AMD: Fix mixed steppings support
x86/speculation: Allow enabling STIBP with legacy IBRS
Documentation/hw-vuln: Document the interaction between IBRS and STIBP
brd: return 0/-error from brd_insert_page()
ima: Align ima_file_mmap() parameters with mmap_file LSM hook
irqdomain: Fix association race
irqdomain: Fix disassociation race
irqdomain: Look for existing mapping only once
irqdomain: Drop bogus fwspec-mapping error handling
irqdomain: Fix domain registration race
crypto: qat - fix out-of-bounds read
io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
io_uring: mark task TASK_RUNNING before handling resume/task work
io_uring: add a conditional reschedule to the IOPOLL cancelation loop
io_uring/rsrc: disallow multi-source reg buffers
io_uring: remove MSG_NOSIGNAL from recvmsg
io_uring/poll: allow some retries for poll triggering spuriously
ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
jbd2: fix data missing when reusing bh which is ready to be checkpointed
ext4: optimize ea_inode block expansion
ext4: refuse to create ea block when umounted
mtd: spi-nor: sfdp: Fix index value for SCCR dwords
mtd: spi-nor: spansion: Consider reserved bits in CFR5 register
mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
dm: send just one event on resize, not two
dm: add cond_resched() to dm_wq_work()
wifi: rtl8xxxu: Use a longer retry limit of 48
wifi: ath11k: allow system suspend to survive ath11k
wifi: cfg80211: Fix use after free for wext
qede: fix interrupt coalescing configuration
thermal: intel: powerclamp: Fix cur_state for multi package system
dm flakey: fix logic when corrupting a bio
dm flakey: don't corrupt the zero page
dm flakey: fix a bug with 32-bit highmem systems
ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node
ARM: dts: exynos: correct TMU phandle in Exynos4210
ARM: dts: exynos: correct TMU phandle in Exynos4
ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
ARM: dts: exynos: correct TMU phandle in Exynos5250
ARM: dts: exynos: correct TMU phandle in Odroid XU
ARM: dts: exynos: correct TMU phandle in Odroid HC1
fuse: add inode/permission checks to fileattr_get/fileattr_set
rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
ceph: update the time stamps and try to drop the suid/sgid
alpha: fix FEN fault handling
dax/kmem: Fix leak of memory-hotplug resources
mips: fix syscall_get_nr
media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
remoteproc/mtk_scp: Move clk ops outside send_lock
docs: gdbmacros: print newest record
mm: memcontrol: deprecate charge moving
mm/thp: check and bail out if page in deferred queue already
ktest.pl: Give back console on Ctrt^C on monitor
ktest.pl: Fix missing "end_monitor" when machine check fails
ktest.pl: Add RUN_TIMEOUT option with default unlimited
ring-buffer: Handle race between rb_move_tail and rb_check_pages
tools/bootconfig: fix single & used for logical condition
scsi: qla2xxx: Fix link failure in NPIV environment
scsi: qla2xxx: Check if port is online before sending ELS
scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
scsi: qla2xxx: Remove unintended flag clearing
scsi: qla2xxx: Fix erroneous link down
scsi: qla2xxx: Remove increment of interface err cnt
scsi: ses: Don't attach if enclosure has no components
scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
scsi: ses: Fix possible desc_ptr out-of-bounds accesses
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
RISC-V: add a spin_shadow_stack declaration
riscv: mm: fix regression due to update_mmu_cache change
riscv: jump_label: Fixup unaligned arch_static_branch function
riscv, mm: Perform BPF exhandler fixup on page fault
riscv: ftrace: Remove wasted nops for !RISCV_ISA_C
riscv: ftrace: Reduce the detour code size to half
MIPS: DTS: CI20: fix otg power gpio
PCI/PM: Observe reset delay irrespective of bridge_d3
PCI: hotplug: Allow marking devices as disconnected during bind/unbind
PCI: Avoid FLR for AMD FCH AHCI adapters
iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode
vfio/type1: prevent underflow of locked_vm via exec()
vfio/type1: track locked_vm per dma
vfio/type1: restore locked_vm
drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
drm/radeon: Fix eDP for single-display iMac11,2
drm/edid: fix AVI infoframe aspect ratio handling
perf intel-pt: pkt-decoder: Add CFE and EVD packets
qede: avoid uninitialized entries in coal_entry array
media: uvcvideo: Fix memory leak of object map on error exit path
iommu/vt-d: Fix an unbalanced rcu_read_lock/rcu_read_unlock()
arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
wifi: ath9k: use proper statements in conditionals
kbuild: Port silent mode detection to future gnu make.
Linux 5.15.99
UBUNTU: Upstream stable to v5.15.99
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.15.99 upstream stable release
+ from git://git.kernel.org/
- v5.15.99 upstream stable release
- from git://git.kernel.org/
+ HID: asus: use spinlock to protect concurrent accesses
+ HID: asus: use spinlock to safely schedule workers
+ powerpc/mm: Rearrange if-else block to avoid clang warning
+ ARM: OMAP2+: Fix memory leak in realtime_counter_init()
+ arm64: dts: qcom: qcs404: use symbol names for PCIe resets
+ arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up
+ arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k
+ arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings
+ arm64: dts: imx8m: Align SoC unique ID node unit address
+ ARM: zynq: Fix refcount leak in zynq_early_slcr_init
+ arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
+ arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
+ arm64: dts: qcom: sc7180: correct SPMI bus address cells
+ arm64: dts: qcom: sc7280: correct SPMI bus address cells
+ arm64: dts: meson-gx: Fix Ethernet MAC address unit name
+ arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
+ arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
+ arm64: dts: msm8992-bullhead: add memory hole region
+ arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size
+ arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem
+ arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
+ arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes
+ arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size
+ arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
+ arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
+ arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
+ arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
+ arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
+ ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()
+ ARM: bcm2835_defconfig: Enable the framebuffer
+ ARM: s3c: fix s3c64xx_set_timer_source prototype
+ arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
+ ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
+ ARM: imx: Call ida_simple_remove() for ida_simple_get
+ arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
+ arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
+ arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
+ arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names
property
+ arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
+ arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node
name
+ arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
+ arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names
+ arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
+ arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
+ arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip
+ locking/rwsem: Optimize down_read_trylock() under highly contended case
+ locking/rwsem: Disable preemption in all down_read*() and up_read() code paths
+ arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
+ arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN
+ ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
+ ARM: dts: imx7s: correct iomuxc gpr mux controller cells
+ arm64: dts: mt8192: Fix CPU map for single-cluster SoC
+ arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
+ blk-mq: avoid sleep in blk_mq_alloc_request_hctx
+ blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
+ blk-mq: correct stale comment of .get_budget
+ arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM
and MPSS memory regions
+ s390/dasd: Fix potential memleak in dasd_eckd_init()
+ sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()
+ sched/rt: pick_next_rt_entity(): check list_entry
+ x86/perf/zhaoxin: Add stepping check for ZXC
+ KEYS: asymmetric: Fix ECDSA use via keyctl uapi
+ arm64: dts: qcom: pmk8350: Specify PBS register for PON
+ arm64: dts: qcom: pmk8350: Use the correct PON compatible
+ block: bio-integrity: Copy flags when bio_integrity_payload is cloned
+ wifi: rsi: Fix memory leak in rsi_coex_attach()
+ wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
+ wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
+ wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
+ wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
+ wifi: libertas: fix memory leak in lbs_init_adapter()
+ wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
+ wifi: rtlwifi: Fix global-out-of-bounds bug in
_rtl8812ae_phy_set_txpower_limit()
+ libbpf: Fix btf__align_of() by taking into account field offsets
+ wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
+ wifi: ipw2200: fix memory leak in ipw_wdev_init()
+ wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
+ wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
+ wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
+ wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
+ wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
+ wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
+ wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
+ wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
+ crypto: x86/ghash - fix unaligned access in ghash_setkey()
+ ACPICA: Drop port I/O validation for some regions
+ genirq: Fix the return type of kstat_cpu_irqs_sum()
+ rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
+ rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
+ rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
+ lib/mpi: Fix buffer overrun when SG is too long
+ crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
+ ACPICA: nsrepair: handle cases without a return value correctly
+ thermal/drivers/tsens: Drop msm8976-specific defines
+ thermal/drivers/tsens: Add compat string for the qcom,msm8960
+ thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
+ thermal/drivers/tsens: fix slope values for msm8939
+ thermal/drivers/tsens: limit num_sensors to 9 for msm8939
+ wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
+ wifi: orinoco: check return value of hermes_write_wordrec()
+ wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback
function
+ ath9k: hif_usb: simplify if-if to if-else
+ ath9k: htc: clean up statistics macros
+ wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
+ wifi: ath9k: Fix potential stack-out-of-bounds write in
ath9k_wmi_rsp_callback()
+ wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
+ wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data()
+ ACPI: battery: Fix missing NUL-termination with large strings
+ crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
+ crypto: essiv - Handle EBUSY correctly
+ crypto: seqiv - Handle EBUSY correctly
+ powercap: fix possible name leak in powercap_register_zone()
+ x86: Mark stop_this_cpu() __noreturn
+ x86/microcode: Rip out the OLD_INTERFACE
+ UBUNTU: [Config] updateconfigs for MICROCODE_OLD_INTERFACE
+ x86/microcode: Default-disable late loading
+ x86/microcode: Print previous version of microcode after reload
+ x86/microcode: Add a parameter to microcode_check() to store CPU capabilities
+ x86/microcode: Check CPU capabilities after late microcode update correctly
+ x86/microcode: Adjust late loading result reporting message
+ crypto: xts - Handle EBUSY correctly
+ leds: led-class: Add missing put_device() to led_put()
+ crypto: ccp - Refactor out sev_fw_alloc()
+ crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
+ bpftool: profile online CPUs instead of possible
+ mt76: mt7915: fix polling firmware-own status
+ net/mlx5: Enhance debug print in page allocation failure
+ irqchip: Fix refcount leak in platform_irqchip_probe
+ irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
+ irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
+ irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
+ s390/mem_detect: fix detect_memory() error handling
+ s390/vmem: fix empty page tables cleanup under KASAN
+ net: add sock_init_data_uid()
+ tun: tun_chr_open(): correctly initialize socket uid
+ tap: tap_open(): correctly initialize socket uid
+ OPP: fix error checking in opp_migrate_dentry()
+ Bluetooth: L2CAP: Fix potential user-after-free
+ Bluetooth: hci_qca: get wakeup status from serdev device handle
+ s390/ap: fix status returned by ap_aqic()
+ s390/ap: fix status returned by ap_qact()
+ libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
+ rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
+ crypto: rsa-pkcs1pad - Use akcipher_request_complete
+ m68k: /proc/hardware should depend on PROC_FS
+ RISC-V: time: initialize hrtimer based broadcast clock event device
+ wifi: iwl3945: Add missing check for create_singlethread_workqueue
+ wifi: iwl4965: Add missing check for create_singlethread_workqueue()
+ wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
+ selftests/bpf: Fix out-of-srctree build
+ ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models
+ ACPI: resource: Do IRQ override on all TongFang GMxRGxx
+ crypto: crypto4xx - Call dma_unmap_page when done
+ wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
+ thermal/drivers/hisi: Drop second sensor hi3660
+ can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a
bus error
+ bpf: Fix global subprog context argument resolution logic
+ irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
+ irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
+ selftests/net: Interpret UDP_GRO cmsg data as an int value
+ l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
+ net: bcmgenet: fix MoCA LED control
+ sefltests: netdevsim: wait for devlink instance after netns removal
+ drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
+ drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
+ drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec
+ UBUNTU: [Config] updateconfigs for DRM_MXSFB
+ drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
+ drm/bridge: megachips: Fix error handling in i2c_register_driver()
+ drm/vkms: Fix memory leak in vkms_init()
+ drm/vkms: Fix null-ptr-deref in vkms_release()
+ drm/vc4: dpi: Add option for inverting pixel clock and output enable
+ drm/vc4: dpi: Fix format mapping for RGB565
+ drm: tidss: Fix pixel format definition
+ gpu: ipu-v3: common: Add of_node_put() for reference returned by
of_graph_get_port_by_id()
+ hwmon: (ftsteutates) Fix scaling of measurements
+ drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
+ pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
+ pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
+ pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
+ drm/vc4: hvs: Set AXI panic modes
+ drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
+ drm/vc4: hdmi: Correct interlaced timings again
+ drm/msm: clean event_thread->worker in case of an error
+ scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription
+ scsi: qla2xxx: Fix exchange oversubscription
+ scsi: qla2xxx: Fix exchange oversubscription for management commands
+ ASoC: fsl_sai: Update to modern clocking terminology
+ ASoC: fsl_sai: initialize is_dsp_mode flag
+ drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
+ ALSA: hda/ca0132: minor fix for allocation size
+ drm/msm/gem: Add check for kmalloc
+ drm/msm/dpu: Disallow unallocated resources to be returned
+ drm/bridge: lt9611: fix sleep mode setup
+ drm/bridge: lt9611: fix HPD reenablement
+ drm/bridge: lt9611: fix polarity programming
+ drm/bridge: lt9611: fix programming of video modes
+ drm/bridge: lt9611: fix clock calculation
+ drm/bridge: lt9611: pass a pointer to the of node
+ drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
+ drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags
+ drm/msm/dsi: Allow 2 CTRLs on v2.5.0
+ drm/msm: use strscpy instead of strncpy
+ drm/msm/dpu: Add check for cstate
+ drm/msm/dpu: Add check for pstates
+ drm/msm/mdp5: Add check for kzalloc
+ pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
+ pinctrl: mediatek: fix coding style
+ pinctrl: mediatek: Initialize variable pullen and pullup to zero
+ pinctrl: mediatek: Initialize variable *buf to zero
+ gpu: host1x: Don't skip assigning syncpoints to channels
+ drm/tegra: firewall: Check for is_addr_reg existence in IMM check
+ drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update()
+ drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
+ drm/mediatek: Use NULL instead of 0 for NULL pointer
+ drm/mediatek: Drop unbalanced obj unref
+ drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
+ drm/mediatek: Clean dangling pointer on bind error path
+ ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
+ gpio: vf610: connect GPIO label to dev name
+ spi: dw_bt1: fix MUX_MMIO dependencies
+ ASoC: mchp-spdifrx: fix controls which rely on rsr register
+ ASoC: mchp-spdifrx: fix return value in case completion times out
+ ASoC: mchp-spdifrx: fix controls that works with completion mechanism
+ ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
+ ASoC: rsnd: fixup #endif position
+ ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
+ ASoC: dt-bindings: meson: fix gx-card codec node regex
+ hwmon: (ltc2945) Handle error case in ltc2945_value_store
+ drm/amdgpu: fix enum odm_combine_mode mismatch
+ scsi: mpt3sas: Fix a memory leak
+ scsi: aic94xx: Add missing check for dma_map_single()
+ HID: multitouch: Add quirks for flipped axes
+ HID: retain initial quirks set up when creating HID devices
+ ASoC: codecs: Change bulk clock voting to optional voting in digital codecs
+ ASoC: codecs: rx-macro: move clk provider to managed variants
+ ASoC: codecs: tx-macro: move clk provider to managed variants
+ ASoC: codecs: rx-macro: move to individual clks from bulk
+ ASoC: codecs: tx-macro: move to individual clks from bulk
+ ASoC: codecs: lpass: fix incorrect mclk rate
+ spi: bcm63xx-hsspi: Fix multi-bit mode setting
+ hwmon: (mlxreg-fan) Return zero speed for broken fan
+ ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
+ dm: remove flush_scheduled_work() during local_exit()
+ NFSv4: keep state manager thread active if swap is enabled
+ nfs4trace: fix state manager flag printing
+ NFS: fix disabling of swap
+ spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
+ ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
+ HID: bigben: use spinlock to protect concurrent accesses
+ HID: bigben_worker() remove unneeded check on report_field
+ HID: bigben: use spinlock to safely schedule workers
+ hid: bigben_probe(): validate report count
+ drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt()
+ nfsd: fix race to check ls_layouts
+ cifs: Fix lost destroy smbd connection when MR allocate failed
+ cifs: Fix warning and UAF when destroy the MR list
+ gfs2: jdata writepage fix
+ perf llvm: Fix inadvertent file creation
+ leds: led-core: Fix refcount leak in of_led_get()
+ perf inject: Use perf_data__read() for auxtrace
+ perf intel-pt: Add documentation for Event Trace and TNT disable
+ perf intel-pt: Add link to the perf wiki's Intel PT page
+ perf intel-pt: Add support for emulated ptwrite
+ perf intel-pt: Do not try to queue auxtrace data on pipe
+ perf tools: Fix auto-complete on aarch64
+ sparc: allow PM configs for sparc32 COMPILE_TEST
+ printf: fix errname.c list
+ objtool: add UACCESS exceptions for __tsan_volatile_read/write
+ mfd: cs5535: Don't build on UML
+ mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
+ dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0
+ UBUNTU: [Config] updateconfigs for HISI_DMA
+ dmaengine: HISI_DMA should depend on ARCH_HISI
+ iio: light: tsl2563: Do not hardcode interrupt trigger type
+ usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe()
+ i2c: designware: fix i2c_dw_clk_rate() return size to be u32
+ soundwire: cadence: Don't overflow the command FIFOs
+ driver core: fix potential null-ptr-deref in device_add()
+ kobject: modify kobject_get_path() to take a const *
+ kobject: Fix slab-out-of-bounds in fill_kobj_path()
+ alpha/boot/tools/objstrip: fix the check for ELF header
+ media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL
+ media: uvcvideo: Remove s_ctrl and g_ctrl
+ media: uvcvideo: refactor __uvc_ctrl_add_mapping
+ media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS
+ media: uvcvideo: Use control names from framework
+ media: uvcvideo: Check controls flags before accessing them
+ media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible()
+ coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR
+ coresight: cti: Prevent negative values of enable count
+ coresight: cti: Add PM runtime call in enable_store
+ ACPI: resource: Add helper function acpi_dev_get_memory_resources()
+ usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources()
+ usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count
+ PCI/IOV: Enlarge virtfn sysfs name buffer
+ PCI: switchtec: Return -EFAULT for copy_to_user() errors
+ tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown()
+ tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown()
+ serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init()
+ Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in
set_protocol"
+ eeprom: idt_89hpesx: Fix error handling in idt_init()
+ applicom: Fix PCI device refcount leak in applicom_init()
+ firmware: stratix10-svc: add missing gen_pool_destroy() in
stratix10_svc_drv_probe()
+ VMCI: check context->notify_page after call to get_user_pages_fast() to avoid
GPF
+ misc/mei/hdcp: Use correct macros to initialize uuid_le
+ driver core: fix resource leak in device_add()
+ drivers: base: transport_class: fix possible memory leak
+ drivers: base: transport_class: fix resource leak when transport_add_device()
fails
+ firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
+ fotg210-udc: Add missing completion handler
+ dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers
+ usb: early: xhci-dbc: Fix a potential out-of-bound memory access
+ tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case
+ RDMA/cxgb4: add null-ptr-check after ip_dev_find()
+ usb: musb: mediatek: don't unregister something that wasn't registered
+ usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link()
+ usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func
+ usb: gadget: configfs: remove using list iterator after loop body as a ptr
+ usb: gadget: configfs: Restrict symlink creation is UDC already binded
+ iommu/vt-d: Set No Execute Enable bit in PASID table entry
+ power: supply: remove faulty cooling logic
+ RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
+ usb: max-3421: Fix setting of I/O pins
+ RDMA/irdma: Cap MSIX used to online CPUs + 1
+ serial: fsl_lpuart: fix RS485 RTS polariy inverse issue
+ tty: serial: imx: Handle RS485 DE signal active high
+ tty: serial: imx: disable Ageing Timer interrupt request irq
+ dmaengine: dw-edma: Fix readq_ch() return value truncation
+ phy: rockchip-typec: fix tcphy_get_mode error case
+ iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()
+ iommu: Fix error unwind in iommu_group_alloc()
+ dmaengine: sf-pdma: pdma_desc memory leak fix
+ dmaengine: dw-axi-dmac: Do not dereference NULL structure
+ iommu/vt-d: Fix error handling in sva enable/disable paths
+ iommu/vt-d: Remove duplicate identity domain flag
+ iommu/vt-d: Check FL and SL capability sanity in scalable mode
+ iommu/vt-d: Use second level for GPA->HPA translation
+ iommu/vt-d: Allow to use flush-queue when first level is default
+ IB/hfi1: Fix math bugs in hfi1_can_pin_pages()
+ IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
+ remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
+ media: ti: cal: fix possible memory leak in cal_ctx_create()
+ media: platform: ti: Add missing check for devm_regulator_get
+ powerpc: Remove linker flag from KBUILD_AFLAGS
+ s390/vdso: remove -nostdlib compiler flag
+ s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64
+ builddeb: clean generated package content
+ media: max9286: Fix memleak in max9286_v4l2_register()
+ media: ov2740: Fix memleak in ov2740_init_controls()
+ media: ov5675: Fix memleak in ov5675_init_controls()
+ media: i2c: ov772x: Fix memleak in ov772x_probe()
+ media: i2c: imx219: Split common registers from mode tables
+ media: i2c: imx219: Fix binning for RAW8 capture
+ media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data
+ media: v4l2-jpeg: ignore the unknown APP14 marker
+ media: imx-jpeg: Apply clk_bulk api instead of operating specific clk
+ media: i2c: ov7670: 0 instead of -EINVAL was returned
+ media: usb: siano: Fix use after free bugs caused by do_submit_urb
+ media: saa7134: Use video_unregister_device for radio_dev
+ rpmsg: glink: Avoid infinite loop on intent for missing channel
+ udf: Define EFSCORRUPTED error code
+ ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
+ blk-iocost: fix divide by 0 error in calc_lcoefs()
+ trace/blktrace: fix memory leak with using debugfs_lookup()
+ wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
+ wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
+ rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
+ rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()
+ rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
+ wifi: ath11k: debugfs: fix to work with multiple PCI devices
+ thermal: intel: Fix unsigned comparison with less than zero
+ timers: Prevent union confusion from unexpected restart_syscall()
+ x86/bugs: Reset speculation control settings on init
+ wifi: brcmfmac: ensure CLM version is null-terminated to prevent
stack-out-of-bounds
+ wifi: mt7601u: fix an integer underflow
+ inet: fix fast path in __inet_hash_connect()
+ ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB
+ ice: add missing checks for PF vsi type
+ ACPI: Don't build ACPICA with '-Os'
+ thermal: intel: intel_pch: Add support for Wellsburg PCH
+ clocksource: Suspend the watchdog temporarily when high read latency detected
+ crypto: hisilicon: Wipe entire pool on error
+ net: bcmgenet: Add a check for oversized packets
+ m68k: Check syscall_trace_enter() return code
+ netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()
+ wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
+ ACPI: video: Fix Lenovo Ideapad Z570 DMI match
+ net/mlx5: fw_tracer: Fix debug print
+ coda: Avoid partial allocation of sig_inputArgs
+ uaccess: Add minimum bounds check on kernel buffer size
+ s390/idle: mark arch_cpu_idle() noinstr
+ time/debug: Fix memory leak with using debugfs_lookup()
+ PM: domains: fix memory leak with using debugfs_lookup()
+ PM: EM: fix memory leak with using debugfs_lookup()
+ Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
+ hv_netvsc: Check status in SEND_RNDIS_PKT completion message
+ scm: add user copy checks to put_cmsg()
+ drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h
write
+ drm/amd/display: Fix potential null-deref in dm_resume
+ drm/omap: dsi: Fix excessive stack usage
+ HID: Add Mapping for System Microphone Mute
+ drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
+ drm/radeon: free iio for atombios when driver shutdown
+ scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
+ Revert "fbcon: don't lose the console font across generic->chip driver switch"
+ drm: amd: display: Fix memory leakage
+ drm/msm/dsi: Add missing check for alloc_ordered_workqueue
+ docs/scripts/gdb: add necessary make scripts_gdb step
+ ASoC: soc-compress: Reposition and add pcm_mutex
+ ASoC: kirkwood: Iterate over array indexes instead of using pointer math
+ regulator: max77802: Bounds check regulator id against opmode
+ regulator: s5m8767: Bounds check id indexing into arrays
+ gfs2: Improve gfs2_make_fs_rw error handling
+ hwmon: (coretemp) Simplify platform device handling
+ pinctrl: at91: use devm_kasprintf() to avoid potential leaks
+ scsi: snic: Fix memory leak with using debugfs_lookup()
+ HID: logitech-hidpp: Don't restart communication if not necessary
+ drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
+ dm thin: add cond_resched() to various workqueue loops
+ dm cache: add cond_resched() to various workqueue loops
+ nfsd: zero out pointers after putting nfsd_files on COPY setup error
+ drm/shmem-helper: Revert accidental non-GPL export
+ wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
+ firmware: coreboot: framebuffer: Ignore reserved pixel color bits
+ block: don't allow multiple bios for IOCB_NOWAIT issue
+ rtc: pm8xxx: fix set-alarm race
+ ipmi:ssif: resend_msg() cannot fail
+ ipmi_ssif: Rename idle state and check
+ s390/extmem: return correct segment type in __segment_load()
+ s390: discard .interp section
+ s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
+ s390/kprobes: fix current_kprobe never cleared after kprobes reenter
+ cifs: Fix uninitialized memory read in smb3_qfs_tcon()
+ btrfs: hold block group refcount during async discard
+ locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath
+ ksmbd: fix wrong data area length for smb2 lock request
+ ksmbd: do not allow the actual frame length to be smaller than the rfc1002
length
+ ARM: dts: exynos: correct HDMI phy compatible in Exynos4
+ hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
+ fs: hfsplus: fix UAF issue in hfsplus_put_super
+ exfat: fix reporting fs error when reading dir beyond EOF
+ exfat: fix unexpected EOF while reading dir
+ exfat: redefine DIR_DELETED as the bad cluster number
+ exfat: fix inode->i_blocks for non-512 byte sector size device
+ fs: dlm: don't set stop rx flag after node reset
+ fs: dlm: move sending fin message into state change handling
+ fs: dlm: send FIN ack back in right cases
+ f2fs: fix information leak in f2fs_move_inline_dirents()
+ f2fs: fix cgroup writeback accounting with fs-layer encryption
+ ocfs2: fix defrag path triggering jbd2 ASSERT
+ ocfs2: fix non-auto defrag path not working issue
+ selftests/landlock: Skip overlayfs tests when not supported
+ selftests/landlock: Test ptrace as much as possible with Yama
+ udf: Truncate added extents on failed expansion
+ udf: Do not bother merging very long extents
+ udf: Do not update file length for failed writes to inline files
+ udf: Preserve link count of system files
+ udf: Detect system inodes linked into directory hierarchy
+ udf: Fix file corruption when appending just after end of preallocated extent
+ RDMA/siw: Fix user page pinning accounting
+ KVM: Destroy target device if coalesced MMIO unregistration fails
+ KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
+ KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
+ KVM: SVM: hyper-v: placate modpost section mismatch error
+ KVM: s390: disable migration mode when dirty tracking is disabled
+ x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
+ x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
+ x86/reboot: Disable virtualization in an emergency if SVM is supported
+ x86/reboot: Disable SVM, not just VMX, when stopping CPUs
+ x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
+ x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe
range
+ x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
+ x86/microcode/AMD: Add a @cpu parameter to the reloading functions
+ x86/microcode/AMD: Fix mixed steppings support
+ x86/speculation: Allow enabling STIBP with legacy IBRS
+ Documentation/hw-vuln: Document the interaction between IBRS and STIBP
+ brd: return 0/-error from brd_insert_page()
+ ima: Align ima_file_mmap() parameters with mmap_file LSM hook
+ irqdomain: Fix association race
+ irqdomain: Fix disassociation race
+ irqdomain: Look for existing mapping only once
+ irqdomain: Drop bogus fwspec-mapping error handling
+ irqdomain: Fix domain registration race
+ crypto: qat - fix out-of-bounds read
+ io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
+ io_uring: mark task TASK_RUNNING before handling resume/task work
+ io_uring: add a conditional reschedule to the IOPOLL cancelation loop
+ io_uring/rsrc: disallow multi-source reg buffers
+ io_uring: remove MSG_NOSIGNAL from recvmsg
+ io_uring/poll: allow some retries for poll triggering spuriously
+ ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
+ ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
+ jbd2: fix data missing when reusing bh which is ready to be checkpointed
+ ext4: optimize ea_inode block expansion
+ ext4: refuse to create ea block when umounted
+ mtd: spi-nor: sfdp: Fix index value for SCCR dwords
+ mtd: spi-nor: spansion: Consider reserved bits in CFR5 register
+ mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
+ dm: send just one event on resize, not two
+ dm: add cond_resched() to dm_wq_work()
+ wifi: rtl8xxxu: Use a longer retry limit of 48
+ wifi: ath11k: allow system suspend to survive ath11k
+ wifi: cfg80211: Fix use after free for wext
+ qede: fix interrupt coalescing configuration
+ thermal: intel: powerclamp: Fix cur_state for multi package system
+ dm flakey: fix logic when corrupting a bio
+ dm flakey: don't corrupt the zero page
+ dm flakey: fix a bug with 32-bit highmem systems
+ ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node
+ ARM: dts: exynos: correct TMU phandle in Exynos4210
+ ARM: dts: exynos: correct TMU phandle in Exynos4
+ ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
+ ARM: dts: exynos: correct TMU phandle in Exynos5250
+ ARM: dts: exynos: correct TMU phandle in Odroid XU
+ ARM: dts: exynos: correct TMU phandle in Odroid HC1
+ fuse: add inode/permission checks to fileattr_get/fileattr_set
+ rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
+ ceph: update the time stamps and try to drop the suid/sgid
+ alpha: fix FEN fault handling
+ dax/kmem: Fix leak of memory-hotplug resources
+ mips: fix syscall_get_nr
+ media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
+ remoteproc/mtk_scp: Move clk ops outside send_lock
+ docs: gdbmacros: print newest record
+ mm: memcontrol: deprecate charge moving
+ mm/thp: check and bail out if page in deferred queue already
+ ktest.pl: Give back console on Ctrt^C on monitor
+ ktest.pl: Fix missing "end_monitor" when machine check fails
+ ktest.pl: Add RUN_TIMEOUT option with default unlimited
+ ring-buffer: Handle race between rb_move_tail and rb_check_pages
+ tools/bootconfig: fix single & used for logical condition
+ scsi: qla2xxx: Fix link failure in NPIV environment
+ scsi: qla2xxx: Check if port is online before sending ELS
+ scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
+ scsi: qla2xxx: Remove unintended flag clearing
+ scsi: qla2xxx: Fix erroneous link down
+ scsi: qla2xxx: Remove increment of interface err cnt
+ scsi: ses: Don't attach if enclosure has no components
+ scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
+ scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
+ scsi: ses: Fix possible desc_ptr out-of-bounds accesses
+ scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
+ RISC-V: add a spin_shadow_stack declaration
+ riscv: mm: fix regression due to update_mmu_cache change
+ riscv: jump_label: Fixup unaligned arch_static_branch function
+ riscv, mm: Perform BPF exhandler fixup on page fault
+ riscv: ftrace: Remove wasted nops for !RISCV_ISA_C
+ riscv: ftrace: Reduce the detour code size to half
+ MIPS: DTS: CI20: fix otg power gpio
+ PCI/PM: Observe reset delay irrespective of bridge_d3
+ PCI: hotplug: Allow marking devices as disconnected during bind/unbind
+ PCI: Avoid FLR for AMD FCH AHCI adapters
+ iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode
+ vfio/type1: prevent underflow of locked_vm via exec()
+ vfio/type1: track locked_vm per dma
+ vfio/type1: restore locked_vm
+ drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
+ drm/radeon: Fix eDP for single-display iMac11,2
+ drm/edid: fix AVI infoframe aspect ratio handling
+ perf intel-pt: pkt-decoder: Add CFE and EVD packets
+ qede: avoid uninitialized entries in coal_entry array
+ media: uvcvideo: Fix memory leak of object map on error exit path
+ iommu/vt-d: Fix an unbalanced rcu_read_lock/rcu_read_unlock()
+ arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
+ wifi: ath9k: use proper statements in conditionals
+ kbuild: Port silent mode detection to future gnu make.
+ Linux 5.15.99
+ UBUNTU: Upstream stable to v5.15.99
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2018438
Title:
Jammy update: v5.15.99 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.99 upstream stable release
from git://git.kernel.org/
HID: asus: use spinlock to protect concurrent accesses
HID: asus: use spinlock to safely schedule workers
powerpc/mm: Rearrange if-else block to avoid clang warning
ARM: OMAP2+: Fix memory leak in realtime_counter_init()
arm64: dts: qcom: qcs404: use symbol names for PCIe resets
arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up
arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k
arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings
arm64: dts: imx8m: Align SoC unique ID node unit address
ARM: zynq: Fix refcount leak in zynq_early_slcr_init
arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
arm64: dts: qcom: sc7180: correct SPMI bus address cells
arm64: dts: qcom: sc7280: correct SPMI bus address cells
arm64: dts: meson-gx: Fix Ethernet MAC address unit name
arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
arm64: dts: msm8992-bullhead: add memory hole region
arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size
arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem
arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes
arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size
arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()
ARM: bcm2835_defconfig: Enable the framebuffer
ARM: s3c: fix s3c64xx_set_timer_source prototype
arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
ARM: imx: Call ida_simple_remove() for ida_simple_get
arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names
property
arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node
name
arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names
arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip
locking/rwsem: Optimize down_read_trylock() under highly contended case
locking/rwsem: Disable preemption in all down_read*() and up_read() code paths
arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN
ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
ARM: dts: imx7s: correct iomuxc gpr mux controller cells
arm64: dts: mt8192: Fix CPU map for single-cluster SoC
arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
blk-mq: avoid sleep in blk_mq_alloc_request_hctx
blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
blk-mq: correct stale comment of .get_budget
arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM
and MPSS memory regions
s390/dasd: Fix potential memleak in dasd_eckd_init()
sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()
sched/rt: pick_next_rt_entity(): check list_entry
x86/perf/zhaoxin: Add stepping check for ZXC
KEYS: asymmetric: Fix ECDSA use via keyctl uapi
arm64: dts: qcom: pmk8350: Specify PBS register for PON
arm64: dts: qcom: pmk8350: Use the correct PON compatible
block: bio-integrity: Copy flags when bio_integrity_payload is cloned
wifi: rsi: Fix memory leak in rsi_coex_attach()
wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
wifi: libertas: fix memory leak in lbs_init_adapter()
wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
wifi: rtlwifi: Fix global-out-of-bounds bug in
_rtl8812ae_phy_set_txpower_limit()
libbpf: Fix btf__align_of() by taking into account field offsets
wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
wifi: ipw2200: fix memory leak in ipw_wdev_init()
wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
crypto: x86/ghash - fix unaligned access in ghash_setkey()
ACPICA: Drop port I/O validation for some regions
genirq: Fix the return type of kstat_cpu_irqs_sum()
rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
lib/mpi: Fix buffer overrun when SG is too long
crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
ACPICA: nsrepair: handle cases without a return value correctly
thermal/drivers/tsens: Drop msm8976-specific defines
thermal/drivers/tsens: Add compat string for the qcom,msm8960
thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
thermal/drivers/tsens: fix slope values for msm8939
thermal/drivers/tsens: limit num_sensors to 9 for msm8939
wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
wifi: orinoco: check return value of hermes_write_wordrec()
wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback
function
ath9k: hif_usb: simplify if-if to if-else
ath9k: htc: clean up statistics macros
wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
wifi: ath9k: Fix potential stack-out-of-bounds write in
ath9k_wmi_rsp_callback()
wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data()
ACPI: battery: Fix missing NUL-termination with large strings
crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
crypto: essiv - Handle EBUSY correctly
crypto: seqiv - Handle EBUSY correctly
powercap: fix possible name leak in powercap_register_zone()
x86: Mark stop_this_cpu() __noreturn
x86/microcode: Rip out the OLD_INTERFACE
UBUNTU: [Config] updateconfigs for MICROCODE_OLD_INTERFACE
x86/microcode: Default-disable late loading
x86/microcode: Print previous version of microcode after reload
x86/microcode: Add a parameter to microcode_check() to store CPU capabilities
x86/microcode: Check CPU capabilities after late microcode update correctly
x86/microcode: Adjust late loading result reporting message
crypto: xts - Handle EBUSY correctly
leds: led-class: Add missing put_device() to led_put()
crypto: ccp - Refactor out sev_fw_alloc()
crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
bpftool: profile online CPUs instead of possible
mt76: mt7915: fix polling firmware-own status
net/mlx5: Enhance debug print in page allocation failure
irqchip: Fix refcount leak in platform_irqchip_probe
irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
s390/mem_detect: fix detect_memory() error handling
s390/vmem: fix empty page tables cleanup under KASAN
net: add sock_init_data_uid()
tun: tun_chr_open(): correctly initialize socket uid
tap: tap_open(): correctly initialize socket uid
OPP: fix error checking in opp_migrate_dentry()
Bluetooth: L2CAP: Fix potential user-after-free
Bluetooth: hci_qca: get wakeup status from serdev device handle
s390/ap: fix status returned by ap_aqic()
s390/ap: fix status returned by ap_qact()
libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
crypto: rsa-pkcs1pad - Use akcipher_request_complete
m68k: /proc/hardware should depend on PROC_FS
RISC-V: time: initialize hrtimer based broadcast clock event device
wifi: iwl3945: Add missing check for create_singlethread_workqueue
wifi: iwl4965: Add missing check for create_singlethread_workqueue()
wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
selftests/bpf: Fix out-of-srctree build
ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models
ACPI: resource: Do IRQ override on all TongFang GMxRGxx
crypto: crypto4xx - Call dma_unmap_page when done
wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
thermal/drivers/hisi: Drop second sensor hi3660
can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a
bus error
bpf: Fix global subprog context argument resolution logic
irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
selftests/net: Interpret UDP_GRO cmsg data as an int value
l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
net: bcmgenet: fix MoCA LED control
sefltests: netdevsim: wait for devlink instance after netns removal
drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec
UBUNTU: [Config] updateconfigs for DRM_MXSFB
drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
drm/bridge: megachips: Fix error handling in i2c_register_driver()
drm/vkms: Fix memory leak in vkms_init()
drm/vkms: Fix null-ptr-deref in vkms_release()
drm/vc4: dpi: Add option for inverting pixel clock and output enable
drm/vc4: dpi: Fix format mapping for RGB565
drm: tidss: Fix pixel format definition
gpu: ipu-v3: common: Add of_node_put() for reference returned by
of_graph_get_port_by_id()
hwmon: (ftsteutates) Fix scaling of measurements
drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
drm/vc4: hvs: Set AXI panic modes
drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
drm/vc4: hdmi: Correct interlaced timings again
drm/msm: clean event_thread->worker in case of an error
scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription
scsi: qla2xxx: Fix exchange oversubscription
scsi: qla2xxx: Fix exchange oversubscription for management commands
ASoC: fsl_sai: Update to modern clocking terminology
ASoC: fsl_sai: initialize is_dsp_mode flag
drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
ALSA: hda/ca0132: minor fix for allocation size
drm/msm/gem: Add check for kmalloc
drm/msm/dpu: Disallow unallocated resources to be returned
drm/bridge: lt9611: fix sleep mode setup
drm/bridge: lt9611: fix HPD reenablement
drm/bridge: lt9611: fix polarity programming
drm/bridge: lt9611: fix programming of video modes
drm/bridge: lt9611: fix clock calculation
drm/bridge: lt9611: pass a pointer to the of node
drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags
drm/msm/dsi: Allow 2 CTRLs on v2.5.0
drm/msm: use strscpy instead of strncpy
drm/msm/dpu: Add check for cstate
drm/msm/dpu: Add check for pstates
drm/msm/mdp5: Add check for kzalloc
pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
pinctrl: mediatek: fix coding style
pinctrl: mediatek: Initialize variable pullen and pullup to zero
pinctrl: mediatek: Initialize variable *buf to zero
gpu: host1x: Don't skip assigning syncpoints to channels
drm/tegra: firewall: Check for is_addr_reg existence in IMM check
drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update()
drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
drm/mediatek: Use NULL instead of 0 for NULL pointer
drm/mediatek: Drop unbalanced obj unref
drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
drm/mediatek: Clean dangling pointer on bind error path
ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
gpio: vf610: connect GPIO label to dev name
spi: dw_bt1: fix MUX_MMIO dependencies
ASoC: mchp-spdifrx: fix controls which rely on rsr register
ASoC: mchp-spdifrx: fix return value in case completion times out
ASoC: mchp-spdifrx: fix controls that works with completion mechanism
ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
ASoC: rsnd: fixup #endif position
ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
ASoC: dt-bindings: meson: fix gx-card codec node regex
hwmon: (ltc2945) Handle error case in ltc2945_value_store
drm/amdgpu: fix enum odm_combine_mode mismatch
scsi: mpt3sas: Fix a memory leak
scsi: aic94xx: Add missing check for dma_map_single()
HID: multitouch: Add quirks for flipped axes
HID: retain initial quirks set up when creating HID devices
ASoC: codecs: Change bulk clock voting to optional voting in digital codecs
ASoC: codecs: rx-macro: move clk provider to managed variants
ASoC: codecs: tx-macro: move clk provider to managed variants
ASoC: codecs: rx-macro: move to individual clks from bulk
ASoC: codecs: tx-macro: move to individual clks from bulk
ASoC: codecs: lpass: fix incorrect mclk rate
spi: bcm63xx-hsspi: Fix multi-bit mode setting
hwmon: (mlxreg-fan) Return zero speed for broken fan
ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
dm: remove flush_scheduled_work() during local_exit()
NFSv4: keep state manager thread active if swap is enabled
nfs4trace: fix state manager flag printing
NFS: fix disabling of swap
spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
HID: bigben: use spinlock to protect concurrent accesses
HID: bigben_worker() remove unneeded check on report_field
HID: bigben: use spinlock to safely schedule workers
hid: bigben_probe(): validate report count
drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt()
nfsd: fix race to check ls_layouts
cifs: Fix lost destroy smbd connection when MR allocate failed
cifs: Fix warning and UAF when destroy the MR list
gfs2: jdata writepage fix
perf llvm: Fix inadvertent file creation
leds: led-core: Fix refcount leak in of_led_get()
perf inject: Use perf_data__read() for auxtrace
perf intel-pt: Add documentation for Event Trace and TNT disable
perf intel-pt: Add link to the perf wiki's Intel PT page
perf intel-pt: Add support for emulated ptwrite
perf intel-pt: Do not try to queue auxtrace data on pipe
perf tools: Fix auto-complete on aarch64
sparc: allow PM configs for sparc32 COMPILE_TEST
printf: fix errname.c list
objtool: add UACCESS exceptions for __tsan_volatile_read/write
mfd: cs5535: Don't build on UML
mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0
UBUNTU: [Config] updateconfigs for HISI_DMA
dmaengine: HISI_DMA should depend on ARCH_HISI
iio: light: tsl2563: Do not hardcode interrupt trigger type
usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe()
i2c: designware: fix i2c_dw_clk_rate() return size to be u32
soundwire: cadence: Don't overflow the command FIFOs
driver core: fix potential null-ptr-deref in device_add()
kobject: modify kobject_get_path() to take a const *
kobject: Fix slab-out-of-bounds in fill_kobj_path()
alpha/boot/tools/objstrip: fix the check for ELF header
media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL
media: uvcvideo: Remove s_ctrl and g_ctrl
media: uvcvideo: refactor __uvc_ctrl_add_mapping
media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS
media: uvcvideo: Use control names from framework
media: uvcvideo: Check controls flags before accessing them
media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible()
coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR
coresight: cti: Prevent negative values of enable count
coresight: cti: Add PM runtime call in enable_store
ACPI: resource: Add helper function acpi_dev_get_memory_resources()
usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources()
usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count
PCI/IOV: Enlarge virtfn sysfs name buffer
PCI: switchtec: Return -EFAULT for copy_to_user() errors
tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown()
tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown()
serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init()
Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in
set_protocol"
eeprom: idt_89hpesx: Fix error handling in idt_init()
applicom: Fix PCI device refcount leak in applicom_init()
firmware: stratix10-svc: add missing gen_pool_destroy() in
stratix10_svc_drv_probe()
VMCI: check context->notify_page after call to get_user_pages_fast() to avoid
GPF
misc/mei/hdcp: Use correct macros to initialize uuid_le
driver core: fix resource leak in device_add()
drivers: base: transport_class: fix possible memory leak
drivers: base: transport_class: fix resource leak when transport_add_device()
fails
firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
fotg210-udc: Add missing completion handler
dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers
usb: early: xhci-dbc: Fix a potential out-of-bound memory access
tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case
RDMA/cxgb4: add null-ptr-check after ip_dev_find()
usb: musb: mediatek: don't unregister something that wasn't registered
usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link()
usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func
usb: gadget: configfs: remove using list iterator after loop body as a ptr
usb: gadget: configfs: Restrict symlink creation is UDC already binded
iommu/vt-d: Set No Execute Enable bit in PASID table entry
power: supply: remove faulty cooling logic
RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
usb: max-3421: Fix setting of I/O pins
RDMA/irdma: Cap MSIX used to online CPUs + 1
serial: fsl_lpuart: fix RS485 RTS polariy inverse issue
tty: serial: imx: Handle RS485 DE signal active high
tty: serial: imx: disable Ageing Timer interrupt request irq
dmaengine: dw-edma: Fix readq_ch() return value truncation
phy: rockchip-typec: fix tcphy_get_mode error case
iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()
iommu: Fix error unwind in iommu_group_alloc()
dmaengine: sf-pdma: pdma_desc memory leak fix
dmaengine: dw-axi-dmac: Do not dereference NULL structure
iommu/vt-d: Fix error handling in sva enable/disable paths
iommu/vt-d: Remove duplicate identity domain flag
iommu/vt-d: Check FL and SL capability sanity in scalable mode
iommu/vt-d: Use second level for GPA->HPA translation
iommu/vt-d: Allow to use flush-queue when first level is default
IB/hfi1: Fix math bugs in hfi1_can_pin_pages()
IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
media: ti: cal: fix possible memory leak in cal_ctx_create()
media: platform: ti: Add missing check for devm_regulator_get
powerpc: Remove linker flag from KBUILD_AFLAGS
s390/vdso: remove -nostdlib compiler flag
s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64
builddeb: clean generated package content
media: max9286: Fix memleak in max9286_v4l2_register()
media: ov2740: Fix memleak in ov2740_init_controls()
media: ov5675: Fix memleak in ov5675_init_controls()
media: i2c: ov772x: Fix memleak in ov772x_probe()
media: i2c: imx219: Split common registers from mode tables
media: i2c: imx219: Fix binning for RAW8 capture
media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data
media: v4l2-jpeg: ignore the unknown APP14 marker
media: imx-jpeg: Apply clk_bulk api instead of operating specific clk
media: i2c: ov7670: 0 instead of -EINVAL was returned
media: usb: siano: Fix use after free bugs caused by do_submit_urb
media: saa7134: Use video_unregister_device for radio_dev
rpmsg: glink: Avoid infinite loop on intent for missing channel
udf: Define EFSCORRUPTED error code
ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
blk-iocost: fix divide by 0 error in calc_lcoefs()
trace/blktrace: fix memory leak with using debugfs_lookup()
wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()
rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
wifi: ath11k: debugfs: fix to work with multiple PCI devices
thermal: intel: Fix unsigned comparison with less than zero
timers: Prevent union confusion from unexpected restart_syscall()
x86/bugs: Reset speculation control settings on init
wifi: brcmfmac: ensure CLM version is null-terminated to prevent
stack-out-of-bounds
wifi: mt7601u: fix an integer underflow
inet: fix fast path in __inet_hash_connect()
ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB
ice: add missing checks for PF vsi type
ACPI: Don't build ACPICA with '-Os'
thermal: intel: intel_pch: Add support for Wellsburg PCH
clocksource: Suspend the watchdog temporarily when high read latency detected
crypto: hisilicon: Wipe entire pool on error
net: bcmgenet: Add a check for oversized packets
m68k: Check syscall_trace_enter() return code
netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()
wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
ACPI: video: Fix Lenovo Ideapad Z570 DMI match
net/mlx5: fw_tracer: Fix debug print
coda: Avoid partial allocation of sig_inputArgs
uaccess: Add minimum bounds check on kernel buffer size
s390/idle: mark arch_cpu_idle() noinstr
time/debug: Fix memory leak with using debugfs_lookup()
PM: domains: fix memory leak with using debugfs_lookup()
PM: EM: fix memory leak with using debugfs_lookup()
Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
hv_netvsc: Check status in SEND_RNDIS_PKT completion message
scm: add user copy checks to put_cmsg()
drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h
write
drm/amd/display: Fix potential null-deref in dm_resume
drm/omap: dsi: Fix excessive stack usage
HID: Add Mapping for System Microphone Mute
drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
drm/radeon: free iio for atombios when driver shutdown
scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
Revert "fbcon: don't lose the console font across generic->chip driver switch"
drm: amd: display: Fix memory leakage
drm/msm/dsi: Add missing check for alloc_ordered_workqueue
docs/scripts/gdb: add necessary make scripts_gdb step
ASoC: soc-compress: Reposition and add pcm_mutex
ASoC: kirkwood: Iterate over array indexes instead of using pointer math
regulator: max77802: Bounds check regulator id against opmode
regulator: s5m8767: Bounds check id indexing into arrays
gfs2: Improve gfs2_make_fs_rw error handling
hwmon: (coretemp) Simplify platform device handling
pinctrl: at91: use devm_kasprintf() to avoid potential leaks
scsi: snic: Fix memory leak with using debugfs_lookup()
HID: logitech-hidpp: Don't restart communication if not necessary
drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
dm thin: add cond_resched() to various workqueue loops
dm cache: add cond_resched() to various workqueue loops
nfsd: zero out pointers after putting nfsd_files on COPY setup error
drm/shmem-helper: Revert accidental non-GPL export
wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
firmware: coreboot: framebuffer: Ignore reserved pixel color bits
block: don't allow multiple bios for IOCB_NOWAIT issue
rtc: pm8xxx: fix set-alarm race
ipmi:ssif: resend_msg() cannot fail
ipmi_ssif: Rename idle state and check
s390/extmem: return correct segment type in __segment_load()
s390: discard .interp section
s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
s390/kprobes: fix current_kprobe never cleared after kprobes reenter
cifs: Fix uninitialized memory read in smb3_qfs_tcon()
btrfs: hold block group refcount during async discard
locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath
ksmbd: fix wrong data area length for smb2 lock request
ksmbd: do not allow the actual frame length to be smaller than the rfc1002
length
ARM: dts: exynos: correct HDMI phy compatible in Exynos4
hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
fs: hfsplus: fix UAF issue in hfsplus_put_super
exfat: fix reporting fs error when reading dir beyond EOF
exfat: fix unexpected EOF while reading dir
exfat: redefine DIR_DELETED as the bad cluster number
exfat: fix inode->i_blocks for non-512 byte sector size device
fs: dlm: don't set stop rx flag after node reset
fs: dlm: move sending fin message into state change handling
fs: dlm: send FIN ack back in right cases
f2fs: fix information leak in f2fs_move_inline_dirents()
f2fs: fix cgroup writeback accounting with fs-layer encryption
ocfs2: fix defrag path triggering jbd2 ASSERT
ocfs2: fix non-auto defrag path not working issue
selftests/landlock: Skip overlayfs tests when not supported
selftests/landlock: Test ptrace as much as possible with Yama
udf: Truncate added extents on failed expansion
udf: Do not bother merging very long extents
udf: Do not update file length for failed writes to inline files
udf: Preserve link count of system files
udf: Detect system inodes linked into directory hierarchy
udf: Fix file corruption when appending just after end of preallocated extent
RDMA/siw: Fix user page pinning accounting
KVM: Destroy target device if coalesced MMIO unregistration fails
KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
KVM: SVM: hyper-v: placate modpost section mismatch error
KVM: s390: disable migration mode when dirty tracking is disabled
x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
x86/reboot: Disable virtualization in an emergency if SVM is supported
x86/reboot: Disable SVM, not just VMX, when stopping CPUs
x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe
range
x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
x86/microcode/AMD: Add a @cpu parameter to the reloading functions
x86/microcode/AMD: Fix mixed steppings support
x86/speculation: Allow enabling STIBP with legacy IBRS
Documentation/hw-vuln: Document the interaction between IBRS and STIBP
brd: return 0/-error from brd_insert_page()
ima: Align ima_file_mmap() parameters with mmap_file LSM hook
irqdomain: Fix association race
irqdomain: Fix disassociation race
irqdomain: Look for existing mapping only once
irqdomain: Drop bogus fwspec-mapping error handling
irqdomain: Fix domain registration race
crypto: qat - fix out-of-bounds read
io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
io_uring: mark task TASK_RUNNING before handling resume/task work
io_uring: add a conditional reschedule to the IOPOLL cancelation loop
io_uring/rsrc: disallow multi-source reg buffers
io_uring: remove MSG_NOSIGNAL from recvmsg
io_uring/poll: allow some retries for poll triggering spuriously
ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
jbd2: fix data missing when reusing bh which is ready to be checkpointed
ext4: optimize ea_inode block expansion
ext4: refuse to create ea block when umounted
mtd: spi-nor: sfdp: Fix index value for SCCR dwords
mtd: spi-nor: spansion: Consider reserved bits in CFR5 register
mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
dm: send just one event on resize, not two
dm: add cond_resched() to dm_wq_work()
wifi: rtl8xxxu: Use a longer retry limit of 48
wifi: ath11k: allow system suspend to survive ath11k
wifi: cfg80211: Fix use after free for wext
qede: fix interrupt coalescing configuration
thermal: intel: powerclamp: Fix cur_state for multi package system
dm flakey: fix logic when corrupting a bio
dm flakey: don't corrupt the zero page
dm flakey: fix a bug with 32-bit highmem systems
ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node
ARM: dts: exynos: correct TMU phandle in Exynos4210
ARM: dts: exynos: correct TMU phandle in Exynos4
ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
ARM: dts: exynos: correct TMU phandle in Exynos5250
ARM: dts: exynos: correct TMU phandle in Odroid XU
ARM: dts: exynos: correct TMU phandle in Odroid HC1
fuse: add inode/permission checks to fileattr_get/fileattr_set
rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
ceph: update the time stamps and try to drop the suid/sgid
alpha: fix FEN fault handling
dax/kmem: Fix leak of memory-hotplug resources
mips: fix syscall_get_nr
media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
remoteproc/mtk_scp: Move clk ops outside send_lock
docs: gdbmacros: print newest record
mm: memcontrol: deprecate charge moving
mm/thp: check and bail out if page in deferred queue already
ktest.pl: Give back console on Ctrt^C on monitor
ktest.pl: Fix missing "end_monitor" when machine check fails
ktest.pl: Add RUN_TIMEOUT option with default unlimited
ring-buffer: Handle race between rb_move_tail and rb_check_pages
tools/bootconfig: fix single & used for logical condition
scsi: qla2xxx: Fix link failure in NPIV environment
scsi: qla2xxx: Check if port is online before sending ELS
scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
scsi: qla2xxx: Remove unintended flag clearing
scsi: qla2xxx: Fix erroneous link down
scsi: qla2xxx: Remove increment of interface err cnt
scsi: ses: Don't attach if enclosure has no components
scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
scsi: ses: Fix possible desc_ptr out-of-bounds accesses
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
RISC-V: add a spin_shadow_stack declaration
riscv: mm: fix regression due to update_mmu_cache change
riscv: jump_label: Fixup unaligned arch_static_branch function
riscv, mm: Perform BPF exhandler fixup on page fault
riscv: ftrace: Remove wasted nops for !RISCV_ISA_C
riscv: ftrace: Reduce the detour code size to half
MIPS: DTS: CI20: fix otg power gpio
PCI/PM: Observe reset delay irrespective of bridge_d3
PCI: hotplug: Allow marking devices as disconnected during bind/unbind
PCI: Avoid FLR for AMD FCH AHCI adapters
iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode
vfio/type1: prevent underflow of locked_vm via exec()
vfio/type1: track locked_vm per dma
vfio/type1: restore locked_vm
drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
drm/radeon: Fix eDP for single-display iMac11,2
drm/edid: fix AVI infoframe aspect ratio handling
perf intel-pt: pkt-decoder: Add CFE and EVD packets
qede: avoid uninitialized entries in coal_entry array
media: uvcvideo: Fix memory leak of object map on error exit path
iommu/vt-d: Fix an unbalanced rcu_read_lock/rcu_read_unlock()
arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
wifi: ath9k: use proper statements in conditionals
kbuild: Port silent mode detection to future gnu make.
Linux 5.15.99
UBUNTU: Upstream stable to v5.15.99
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2018438/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
