** Changed in: linux (Ubuntu Kinetic)
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2018948

Title:
  Kinetic update: upstream stable patchset 2023-05-08

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Kinetic:
  Fix Committed

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2023-05-08

                  Ported from the following upstream stable releases:
                          v5.15.98,
                          v5.15.99, v6.1.16

         from git://git.kernel.org/

  HID: asus: use spinlock to protect concurrent accesses
  HID: asus: use spinlock to safely schedule workers
  powerpc/mm: Rearrange if-else block to avoid clang warning
  ARM: OMAP2+: Fix memory leak in realtime_counter_init()
  arm64: dts: qcom: qcs404: use symbol names for PCIe resets
  arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up
  arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k
  arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings
  arm64: dts: imx8m: Align SoC unique ID node unit address
  ARM: zynq: Fix refcount leak in zynq_early_slcr_init
  arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
  arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
  arm64: dts: qcom: sc7180: correct SPMI bus address cells
  arm64: dts: qcom: sc7280: correct SPMI bus address cells
  arm64: dts: meson-gx: Fix Ethernet MAC address unit name
  arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
  arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
  arm64: dts: msm8992-bullhead: add memory hole region
  arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size
  arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem
  arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
  arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
  arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
  arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
  arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
  arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
  ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()
  ARM: bcm2835_defconfig: Enable the framebuffer
  ARM: s3c: fix s3c64xx_set_timer_source prototype
  arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
  ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
  ARM: imx: Call ida_simple_remove() for ida_simple_get
  arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
  arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
  arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
  arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names 
property
  arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
  arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node 
name
  arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
  arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names
  arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
  arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
  arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip
  locking/rwsem: Disable preemption in all down_read*() and up_read() code paths
  arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
  arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN
  ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
  ARM: dts: imx7s: correct iomuxc gpr mux controller cells
  arm64: dts: mt8192: Fix CPU map for single-cluster SoC
  arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
  blk-mq: avoid sleep in blk_mq_alloc_request_hctx
  blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
  blk-mq: correct stale comment of .get_budget
  arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM 
and MPSS memory regions
  s390/dasd: Fix potential memleak in dasd_eckd_init()
  sched/rt: pick_next_rt_entity(): check list_entry
  x86/perf/zhaoxin: Add stepping check for ZXC
  KEYS: asymmetric: Fix ECDSA use via keyctl uapi
  arm64: dts: qcom: pmk8350: Specify PBS register for PON
  arm64: dts: qcom: pmk8350: Use the correct PON compatible
  block: bio-integrity: Copy flags when bio_integrity_payload is cloned
  wifi: rsi: Fix memory leak in rsi_coex_attach()
  wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
  wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
  wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
  wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
  wifi: libertas: fix memory leak in lbs_init_adapter()
  wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
  wifi: rtlwifi: Fix global-out-of-bounds bug in 
_rtl8812ae_phy_set_txpower_limit()
  libbpf: Fix btf__align_of() by taking into account field offsets
  wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
  wifi: ipw2200: fix memory leak in ipw_wdev_init()
  wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
  wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
  wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
  wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
  wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
  wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
  wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
  wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
  crypto: x86/ghash - fix unaligned access in ghash_setkey()
  ACPICA: Drop port I/O validation for some regions
  genirq: Fix the return type of kstat_cpu_irqs_sum()
  rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
  rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
  rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
  lib/mpi: Fix buffer overrun when SG is too long
  crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
  ACPICA: nsrepair: handle cases without a return value correctly
  thermal/drivers/tsens: Drop msm8976-specific defines
  thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
  thermal/drivers/tsens: fix slope values for msm8939
  thermal/drivers/tsens: limit num_sensors to 9 for msm8939
  wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
  wifi: orinoco: check return value of hermes_write_wordrec()
  wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback 
function
  ath9k: htc: clean up statistics macros
  wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
  wifi: ath9k: Fix potential stack-out-of-bounds write in 
ath9k_wmi_rsp_callback()
  wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
  wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data()
  ACPI: battery: Fix missing NUL-termination with large strings
  crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
  crypto: essiv - Handle EBUSY correctly
  crypto: seqiv - Handle EBUSY correctly
  powercap: fix possible name leak in powercap_register_zone()
  x86/microcode: Print previous version of microcode after reload
  x86/microcode: Add a parameter to microcode_check() to store CPU capabilities
  x86/microcode: Check CPU capabilities after late microcode update correctly
  x86/microcode: Adjust late loading result reporting message
  crypto: xts - Handle EBUSY correctly
  leds: led-class: Add missing put_device() to led_put()
  crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
  bpftool: profile online CPUs instead of possible
  net/mlx5: Enhance debug print in page allocation failure
  irqchip: Fix refcount leak in platform_irqchip_probe
  irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
  irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
  irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
  s390/mem_detect: fix detect_memory() error handling
  s390/vmem: fix empty page tables cleanup under KASAN
  net: add sock_init_data_uid()
  tun: tun_chr_open(): correctly initialize socket uid
  tap: tap_open(): correctly initialize socket uid
  OPP: fix error checking in opp_migrate_dentry()
  Bluetooth: L2CAP: Fix potential user-after-free
  Bluetooth: hci_qca: get wakeup status from serdev device handle
  s390/ap: fix status returned by ap_aqic()
  s390/ap: fix status returned by ap_qact()
  libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
  rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
  crypto: rsa-pkcs1pad - Use akcipher_request_complete
  m68k: /proc/hardware should depend on PROC_FS
  RISC-V: time: initialize hrtimer based broadcast clock event device
  wifi: iwl3945: Add missing check for create_singlethread_workqueue
  wifi: iwl4965: Add missing check for create_singlethread_workqueue()
  wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
  selftests/bpf: Fix out-of-srctree build
  ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models
  ACPI: resource: Do IRQ override on all TongFang GMxRGxx
  crypto: crypto4xx - Call dma_unmap_page when done
  wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
  thermal/drivers/hisi: Drop second sensor hi3660
  can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a 
bus error
  bpf: Fix global subprog context argument resolution logic
  irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
  irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
  selftests/net: Interpret UDP_GRO cmsg data as an int value
  l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
  net: bcmgenet: fix MoCA LED control
  sefltests: netdevsim: wait for devlink instance after netns removal
  drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
  drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
  drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec
  UBUNTU: [Config] updateconfigs for DRM_MXSFB
  drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
  drm/bridge: megachips: Fix error handling in i2c_register_driver()
  drm/vkms: Fix memory leak in vkms_init()
  drm/vkms: Fix null-ptr-deref in vkms_release()
  drm/vc4: dpi: Add option for inverting pixel clock and output enable
  drm/vc4: dpi: Fix format mapping for RGB565
  drm: tidss: Fix pixel format definition
  gpu: ipu-v3: common: Add of_node_put() for reference returned by 
of_graph_get_port_by_id()
  hwmon: (ftsteutates) Fix scaling of measurements
  drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
  pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
  pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
  pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
  drm/vc4: hvs: Set AXI panic modes
  drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
  drm/vc4: hdmi: Correct interlaced timings again
  drm/msm: clean event_thread->worker in case of an error
  scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription
  scsi: qla2xxx: Fix exchange oversubscription
  scsi: qla2xxx: Fix exchange oversubscription for management commands
  ASoC: fsl_sai: initialize is_dsp_mode flag
  drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
  ALSA: hda/ca0132: minor fix for allocation size
  drm/msm/gem: Add check for kmalloc
  drm/msm/dpu: Disallow unallocated resources to be returned
  drm/bridge: lt9611: fix sleep mode setup
  drm/bridge: lt9611: fix HPD reenablement
  drm/bridge: lt9611: fix polarity programming
  drm/bridge: lt9611: fix programming of video modes
  drm/bridge: lt9611: fix clock calculation
  drm/bridge: lt9611: pass a pointer to the of node
  drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
  drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags
  drm/msm/dsi: Allow 2 CTRLs on v2.5.0
  drm/msm: use strscpy instead of strncpy
  drm/msm/dpu: Add check for cstate
  drm/msm/dpu: Add check for pstates
  drm/msm/mdp5: Add check for kzalloc
  pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
  pinctrl: mediatek: Initialize variable pullen and pullup to zero
  pinctrl: mediatek: Initialize variable *buf to zero
  gpu: host1x: Don't skip assigning syncpoints to channels
  drm/tegra: firewall: Check for is_addr_reg existence in IMM check
  drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update()
  drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
  drm/mediatek: Use NULL instead of 0 for NULL pointer
  drm/mediatek: Drop unbalanced obj unref
  drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
  drm/mediatek: Clean dangling pointer on bind error path
  ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
  gpio: vf610: connect GPIO label to dev name
  spi: dw_bt1: fix MUX_MMIO dependencies
  ASoC: mchp-spdifrx: fix controls which rely on rsr register
  ASoC: mchp-spdifrx: fix return value in case completion times out
  ASoC: mchp-spdifrx: fix controls that works with completion mechanism
  ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
  ASoC: rsnd: fixup #endif position
  ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
  ASoC: dt-bindings: meson: fix gx-card codec node regex
  hwmon: (ltc2945) Handle error case in ltc2945_value_store
  drm/amdgpu: fix enum odm_combine_mode mismatch
  scsi: mpt3sas: Fix a memory leak
  scsi: aic94xx: Add missing check for dma_map_single()
  HID: multitouch: Add quirks for flipped axes
  HID: retain initial quirks set up when creating HID devices
  ASoC: codecs: lpass: fix incorrect mclk rate
  spi: bcm63xx-hsspi: Fix multi-bit mode setting
  hwmon: (mlxreg-fan) Return zero speed for broken fan
  ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
  dm: remove flush_scheduled_work() during local_exit()
  nfs4trace: fix state manager flag printing
  NFS: fix disabling of swap
  spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
  ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
  HID: bigben: use spinlock to protect concurrent accesses
  HID: bigben_worker() remove unneeded check on report_field
  HID: bigben: use spinlock to safely schedule workers
  hid: bigben_probe(): validate report count
  drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt()
  nfsd: fix race to check ls_layouts
  cifs: Fix lost destroy smbd connection when MR allocate failed
  cifs: Fix warning and UAF when destroy the MR list
  gfs2: jdata writepage fix
  perf llvm: Fix inadvertent file creation
  leds: led-core: Fix refcount leak in of_led_get()
  perf inject: Use perf_data__read() for auxtrace
  perf intel-pt: Do not try to queue auxtrace data on pipe
  perf tools: Fix auto-complete on aarch64
  sparc: allow PM configs for sparc32 COMPILE_TEST
  printf: fix errname.c list
  objtool: add UACCESS exceptions for __tsan_volatile_read/write
  mfd: cs5535: Don't build on UML
  mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
  dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0
  UBUNTU: [Config] updateconfigs for HISI_DMA
  dmaengine: HISI_DMA should depend on ARCH_HISI
  iio: light: tsl2563: Do not hardcode interrupt trigger type
  usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe()
  i2c: designware: fix i2c_dw_clk_rate() return size to be u32
  soundwire: cadence: Don't overflow the command FIFOs
  driver core: fix potential null-ptr-deref in device_add()
  kobject: modify kobject_get_path() to take a const *
  kobject: Fix slab-out-of-bounds in fill_kobj_path()
  alpha/boot/tools/objstrip: fix the check for ELF header
  media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible()
  coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR
  coresight: cti: Prevent negative values of enable count
  coresight: cti: Add PM runtime call in enable_store
  ACPI: resource: Add helper function acpi_dev_get_memory_resources()
  usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources()
  usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count
  PCI/IOV: Enlarge virtfn sysfs name buffer
  PCI: switchtec: Return -EFAULT for copy_to_user() errors
  tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown()
  tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown()
  serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init()
  Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in 
set_protocol"
  eeprom: idt_89hpesx: Fix error handling in idt_init()
  applicom: Fix PCI device refcount leak in applicom_init()
  firmware: stratix10-svc: add missing gen_pool_destroy() in 
stratix10_svc_drv_probe()
  VMCI: check context->notify_page after call to get_user_pages_fast() to avoid 
GPF
  misc/mei/hdcp: Use correct macros to initialize uuid_le
  driver core: fix resource leak in device_add()
  drivers: base: transport_class: fix possible memory leak
  drivers: base: transport_class: fix resource leak when transport_add_device() 
fails
  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
  fotg210-udc: Add missing completion handler
  dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers
  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
  tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case
  RDMA/cxgb4: add null-ptr-check after ip_dev_find()
  usb: musb: mediatek: don't unregister something that wasn't registered
  usb: gadget: configfs: Restrict symlink creation is UDC already binded
  iommu/vt-d: Set No Execute Enable bit in PASID table entry
  power: supply: remove faulty cooling logic
  RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
  usb: max-3421: Fix setting of I/O pins
  RDMA/irdma: Cap MSIX used to online CPUs + 1
  serial: fsl_lpuart: fix RS485 RTS polariy inverse issue
  tty: serial: imx: Handle RS485 DE signal active high
  tty: serial: imx: disable Ageing Timer interrupt request irq
  dmaengine: dw-edma: Fix readq_ch() return value truncation
  phy: rockchip-typec: fix tcphy_get_mode error case
  iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()
  iommu: Fix error unwind in iommu_group_alloc()
  dmaengine: sf-pdma: pdma_desc memory leak fix
  dmaengine: dw-axi-dmac: Do not dereference NULL structure
  iommu/vt-d: Fix error handling in sva enable/disable paths
  iommu/vt-d: Allow to use flush-queue when first level is default
  IB/hfi1: Fix math bugs in hfi1_can_pin_pages()
  IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
  remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
  media: ti: cal: fix possible memory leak in cal_ctx_create()
  media: platform: ti: Add missing check for devm_regulator_get
  powerpc: Remove linker flag from KBUILD_AFLAGS
  s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64
  builddeb: clean generated package content
  media: max9286: Fix memleak in max9286_v4l2_register()
  media: ov2740: Fix memleak in ov2740_init_controls()
  media: ov5675: Fix memleak in ov5675_init_controls()
  media: i2c: ov772x: Fix memleak in ov772x_probe()
  media: i2c: imx219: Split common registers from mode tables
  media: i2c: imx219: Fix binning for RAW8 capture
  media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data
  media: v4l2-jpeg: ignore the unknown APP14 marker
  media: imx-jpeg: Apply clk_bulk api instead of operating specific clk
  media: i2c: ov7670: 0 instead of -EINVAL was returned
  media: usb: siano: Fix use after free bugs caused by do_submit_urb
  media: saa7134: Use video_unregister_device for radio_dev
  rpmsg: glink: Avoid infinite loop on intent for missing channel
  udf: Define EFSCORRUPTED error code
  ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
  blk-iocost: fix divide by 0 error in calc_lcoefs()
  trace/blktrace: fix memory leak with using debugfs_lookup()
  wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
  wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
  rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
  rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()
  rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
  wifi: ath11k: debugfs: fix to work with multiple PCI devices
  thermal: intel: Fix unsigned comparison with less than zero
  timers: Prevent union confusion from unexpected restart_syscall()
  x86/bugs: Reset speculation control settings on init
  wifi: brcmfmac: ensure CLM version is null-terminated to prevent 
stack-out-of-bounds
  wifi: mt7601u: fix an integer underflow
  inet: fix fast path in __inet_hash_connect()
  ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB
  ice: add missing checks for PF vsi type
  ACPI: Don't build ACPICA with '-Os'
  thermal: intel: intel_pch: Add support for Wellsburg PCH
  clocksource: Suspend the watchdog temporarily when high read latency detected
  crypto: hisilicon: Wipe entire pool on error
  net: bcmgenet: Add a check for oversized packets
  m68k: Check syscall_trace_enter() return code
  netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()
  tools/power/x86/intel-speed-select: Add Emerald Rapid quirk
  wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
  ACPI: video: Fix Lenovo Ideapad Z570 DMI match
  net/mlx5: fw_tracer: Fix debug print
  coda: Avoid partial allocation of sig_inputArgs
  uaccess: Add minimum bounds check on kernel buffer size
  s390/idle: mark arch_cpu_idle() noinstr
  time/debug: Fix memory leak with using debugfs_lookup()
  PM: domains: fix memory leak with using debugfs_lookup()
  PM: EM: fix memory leak with using debugfs_lookup()
  Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
  hv_netvsc: Check status in SEND_RNDIS_PKT completion message
  scm: add user copy checks to put_cmsg()
  drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h 
write
  drm/amd/display: Fix potential null-deref in dm_resume
  drm/omap: dsi: Fix excessive stack usage
  HID: Add Mapping for System Microphone Mute
  drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
  drm/radeon: free iio for atombios when driver shutdown
  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
  Revert "fbcon: don't lose the console font across generic->chip driver switch"
  drm: amd: display: Fix memory leakage
  drm/msm/dsi: Add missing check for alloc_ordered_workqueue
  docs/scripts/gdb: add necessary make scripts_gdb step
  ASoC: soc-compress: Reposition and add pcm_mutex
  ASoC: kirkwood: Iterate over array indexes instead of using pointer math
  regulator: max77802: Bounds check regulator id against opmode
  regulator: s5m8767: Bounds check id indexing into arrays
  gfs2: Improve gfs2_make_fs_rw error handling
  hwmon: (coretemp) Simplify platform device handling
  pinctrl: at91: use devm_kasprintf() to avoid potential leaks
  scsi: snic: Fix memory leak with using debugfs_lookup()
  HID: logitech-hidpp: Don't restart communication if not necessary
  drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
  dm thin: add cond_resched() to various workqueue loops
  dm cache: add cond_resched() to various workqueue loops
  nfsd: zero out pointers after putting nfsd_files on COPY setup error
  drm/shmem-helper: Revert accidental non-GPL export
  wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
  firmware: coreboot: framebuffer: Ignore reserved pixel color bits
  block: don't allow multiple bios for IOCB_NOWAIT issue
  rtc: pm8xxx: fix set-alarm race
  ipmi:ssif: resend_msg() cannot fail
  ipmi_ssif: Rename idle state and check
  s390/extmem: return correct segment type in __segment_load()
  s390: discard .interp section
  s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
  s390/kprobes: fix current_kprobe never cleared after kprobes reenter
  cifs: Fix uninitialized memory read in smb3_qfs_tcon()
  btrfs: hold block group refcount during async discard
  locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath
  ksmbd: fix wrong data area length for smb2 lock request
  ksmbd: do not allow the actual frame length to be smaller than the rfc1002 
length
  ARM: dts: exynos: correct HDMI phy compatible in Exynos4
  hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
  fs: hfsplus: fix UAF issue in hfsplus_put_super
  exfat: fix reporting fs error when reading dir beyond EOF
  exfat: fix unexpected EOF while reading dir
  exfat: redefine DIR_DELETED as the bad cluster number
  exfat: fix inode->i_blocks for non-512 byte sector size device
  fs: dlm: don't set stop rx flag after node reset
  fs: dlm: move sending fin message into state change handling
  fs: dlm: send FIN ack back in right cases
  f2fs: fix information leak in f2fs_move_inline_dirents()
  f2fs: fix cgroup writeback accounting with fs-layer encryption
  ocfs2: fix defrag path triggering jbd2 ASSERT
  ocfs2: fix non-auto defrag path not working issue
  selftests/landlock: Skip overlayfs tests when not supported
  selftests/landlock: Test ptrace as much as possible with Yama
  udf: Truncate added extents on failed expansion
  udf: Do not bother merging very long extents
  udf: Do not update file length for failed writes to inline files
  udf: Preserve link count of system files
  udf: Detect system inodes linked into directory hierarchy
  udf: Fix file corruption when appending just after end of preallocated extent
  RDMA/siw: Fix user page pinning accounting
  KVM: Destroy target device if coalesced MMIO unregistration fails
  KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
  KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
  KVM: SVM: hyper-v: placate modpost section mismatch error
  KVM: s390: disable migration mode when dirty tracking is disabled
  x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
  x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
  x86/reboot: Disable virtualization in an emergency if SVM is supported
  x86/reboot: Disable SVM, not just VMX, when stopping CPUs
  x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe 
range
  x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
  x86/microcode/AMD: Add a @cpu parameter to the reloading functions
  x86/microcode/AMD: Fix mixed steppings support
  x86/speculation: Allow enabling STIBP with legacy IBRS
  Documentation/hw-vuln: Document the interaction between IBRS and STIBP
  brd: return 0/-error from brd_insert_page()
  ima: Align ima_file_mmap() parameters with mmap_file LSM hook
  irqdomain: Fix association race
  irqdomain: Fix disassociation race
  irqdomain: Look for existing mapping only once
  irqdomain: Drop bogus fwspec-mapping error handling
  irqdomain: Fix domain registration race
  crypto: qat - fix out-of-bounds read
  io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
  io_uring: mark task TASK_RUNNING before handling resume/task work
  io_uring: add a conditional reschedule to the IOPOLL cancelation loop
  io_uring/rsrc: disallow multi-source reg buffers
  io_uring: remove MSG_NOSIGNAL from recvmsg
  io_uring/poll: allow some retries for poll triggering spuriously
  ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
  ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
  jbd2: fix data missing when reusing bh which is ready to be checkpointed
  ext4: optimize ea_inode block expansion
  ext4: refuse to create ea block when umounted
  mtd: spi-nor: sfdp: Fix index value for SCCR dwords
  mtd: spi-nor: spansion: Consider reserved bits in CFR5 register
  mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
  dm: send just one event on resize, not two
  dm: add cond_resched() to dm_wq_work()
  wifi: rtl8xxxu: Use a longer retry limit of 48
  wifi: ath11k: allow system suspend to survive ath11k
  wifi: cfg80211: Fix use after free for wext
  qede: fix interrupt coalescing configuration
  thermal: intel: powerclamp: Fix cur_state for multi package system
  dm flakey: fix logic when corrupting a bio
  dm flakey: don't corrupt the zero page
  dm flakey: fix a bug with 32-bit highmem systems
  ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node
  ARM: dts: exynos: correct TMU phandle in Exynos4210
  ARM: dts: exynos: correct TMU phandle in Exynos4
  ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
  ARM: dts: exynos: correct TMU phandle in Exynos5250
  ARM: dts: exynos: correct TMU phandle in Odroid XU
  ARM: dts: exynos: correct TMU phandle in Odroid HC1
  fuse: add inode/permission checks to fileattr_get/fileattr_set
  rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
  ceph: update the time stamps and try to drop the suid/sgid
  alpha: fix FEN fault handling
  dax/kmem: Fix leak of memory-hotplug resources
  mips: fix syscall_get_nr
  media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
  remoteproc/mtk_scp: Move clk ops outside send_lock
  docs: gdbmacros: print newest record
  mm: memcontrol: deprecate charge moving
  mm/thp: check and bail out if page in deferred queue already
  ktest.pl: Give back console on Ctrt^C on monitor
  ktest.pl: Fix missing "end_monitor" when machine check fails
  ktest.pl: Add RUN_TIMEOUT option with default unlimited
  ring-buffer: Handle race between rb_move_tail and rb_check_pages
  tools/bootconfig: fix single & used for logical condition
  scsi: qla2xxx: Fix link failure in NPIV environment
  scsi: qla2xxx: Check if port is online before sending ELS
  scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
  scsi: qla2xxx: Remove unintended flag clearing
  scsi: qla2xxx: Fix erroneous link down
  scsi: qla2xxx: Remove increment of interface err cnt
  scsi: ses: Don't attach if enclosure has no components
  scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
  scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
  scsi: ses: Fix possible desc_ptr out-of-bounds accesses
  scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
  RISC-V: add a spin_shadow_stack declaration
  riscv: mm: fix regression due to update_mmu_cache change
  riscv: jump_label: Fixup unaligned arch_static_branch function
  riscv, mm: Perform BPF exhandler fixup on page fault
  riscv: ftrace: Remove wasted nops for !RISCV_ISA_C
  riscv: ftrace: Reduce the detour code size to half
  MIPS: DTS: CI20: fix otg power gpio
  PCI/PM: Observe reset delay irrespective of bridge_d3
  PCI: hotplug: Allow marking devices as disconnected during bind/unbind
  PCI: Avoid FLR for AMD FCH AHCI adapters
  iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode
  vfio/type1: prevent underflow of locked_vm via exec()
  vfio/type1: track locked_vm per dma
  vfio/type1: restore locked_vm
  drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
  drm/radeon: Fix eDP for single-display iMac11,2
  drm/edid: fix AVI infoframe aspect ratio handling
  qede: avoid uninitialized entries in coal_entry array
  arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
  wifi: ath9k: use proper statements in conditionals
  kbuild: Port silent mode detection to future gnu make.
  arm64: dts: qcom: sm6350: Fix up the ramoops node
  arm64: dts: mediatek: mt8192: Fix systimer 13 MHz clock description
  arm64: dts: mediatek: mt8195: Fix systimer 13 MHz clock description
  x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC
  arm64: dts: meson-gxl: jethub-j80: Fix WiFi MAC address node
  arm64: dts: meson-gxl: jethub-j80: Fix Bluetooth MAC node name
  arm64: tegra: Fix duplicate regulator on Jetson TX1
  arm64: dts: mediatek: mt8192: Mark scp_adsp clock as broken
  arm64: dts: meson: radxa-zero: allow usb otg mode
  arm64: dts: mt8195: Fix CPU map for single-cluster SoC
  arm64: dts: mediatek: mt7986: Fix watchdog compatible
  ARM: dts: stm32: Update part number NVMEM description on stm32mp131
  blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
  blk-mq: Fix potential io hung for shared sbitmap per tagset
  arm64: dts: qcom: sm8350: drop incorrect cells from serial
  arm64: dts: qcom: msm8953: correct TLMM gpio-ranges
  block: Fix io statistics for cgroup in throttle path
  wifi: mt76: mt7915: add missing of_node_put()
  wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host
  wifi: mt76: mt7915: check return value before accessing free_block_num
  wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr()
  wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read()
  wifi: rtw89: 8852c: rfk: correct DACK setting
  wifi: rtw89: 8852c: rfk: correct DPK settings
  wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init()
  libbpf: Fix invalid return address register in s390
  kselftest/arm64: Fix syscall-abi for systems without 128 bit SME
  workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex
  s390/early: fix sclp_early_sccb variable lifetime
  s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue()
  x86/signal: Fix the value returned by strict_sas_size()
  wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie()
  wifi: rtw89: Add missing check for alloc_workqueue
  s390/bpf: Add expoline to tail calls
  wifi: iwlwifi: mei: fix compilation errors in rfkill()
  kselftest/arm64: Fix enumeration of systems without 128 bit SME
  can: rcar_canfd: Fix R-Car V3U GAFLCFG field accesses
  wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after 
init_work
  wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
  wifi: mt76: add memory barrier to SDIO queue kick
  cpufreq: davinci: Fix clk use after free
  net: ipa: generic command param fix
  crypto: octeontx2 - Fix objects shared between several modules
  tools/lib/thermal: Fix thermal_sampling_exit()
  selftests/bpf: Fix map_kptr test.
  net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
  net: lan966x: Fix possible deadlock inside PTP
  net/mlx4_en: Introduce flexible array to silence overflow warning
  drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init()
  drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4
  scsi: qla2xxx: edif: Fix clang warning
  scsi: ufs: exynos: Fix DMA alignment for PAGE_SIZE != 4096
  habanalabs: bugs fixes in timestamps buff alloc
  dt-bindings: display: mediatek: Fix the fallback for 
mediatek,mt8186-disp-ccorr
  ASoC: topology: Properly access value coming from topology file
  regmap: apply reg_base and reg_downshift for single register ops
  hwmon: (asus-ec-sensors) add missing mutex path
  UBUNTU: [Config] updateconfigs for SND_HDA_CTL_DEV_ID
  ALSA: hda: Fix the control element identification for multiple codecs
  ASoC: qcom: q6apm-lpass-dai: unprepare stream if its already prepared
  ASoC: qcom: q6apm-dai: fix race condition while updating the position pointer
  ASoC: qcom: q6apm-dai: Add SNDRV_PCM_INFO_BATCH flag
  nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open
  NFSD: copy the whole verifier in nfsd_copy_write_verifier
  cifs: use tcon allocation functions even for dummy tcon
  tools/tracing/rtla: osnoise_hist: use total duration for average calculation
  perf test bpf: Skip test if kernel-debuginfo is not present
  perf record: Fix segfault with --overwrite and --max-size
  RDMA/hns: Fix refcount leak in hns_roce_mmap
  mei: pxp: Use correct macros to initialize uuid_le
  misc: fastrpc: Fix an error handling path in fastrpc_rpmsg_probe()
  driver core: location: Free struct acpi_pld_info *pld before return false
  PCI: mt7621: Delay phy ports initialization
  driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links
  mtd: mtdpart: Don't create platform device that'll never probe
  usb: host: fsl-mph-dr-of: reuse device_set_of_node_from_dev
  PCI: Fix dropping valid root bus resources with .end = zero
  dmaengine: ptdma: check for null desc before calling pt_cmd_callback
  RDMA/rxe: Fix missing memory barriers in rxe_queue.h
  media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in 
imx7_csi_init()
  media: camss: csiphy-3ph: avoid undefined behavior
  media: drivers/media/v4l2-core/v4l2-h264 : add detection of null pointers
  rpmsg: glink: Release driver_override
  block: clear bio->bi_bdev when putting a bio back in the cache
  block: be a bit more careful in checking for NULL bdev while polling
  ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms'
  io_uring: Replace 0-length array with flexible array
  io_uring: fix fget leak when fs don't support nowait buffered read
  scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization
  scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()
  scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi
  ksmbd: fix possible memory leak in smb2_lock()
  f2fs: fix kernel crash due to null io->bio
  KVM: VMX: Fix crash due to uninitialized current_vmcs
  KVM: x86: Purge "highest ISR" cache when updating APICv state
  KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is disabled
  KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID
  KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target
  virt/sev-guest: Return -EIO if certificate buffer is not large enough
  ima: fix error handling logic when file measurement failed
  irqdomain: Refactor __irq_domain_alloc_irqs()
  irqdomain: Fix mapping-creation race
  mm/damon/paddr: fix missing folio_put()
  cxl/pmem: Fix nvdimm registration races
  cpuidle: add ARCH_SUSPEND_POSSIBLE dependencies
  hwmon: (peci/cputemp) Fix off-by-one in coretemp_label allocation
  hwmon: (nct6775) Fix incorrect parenthesization in nct6775_write_fan_div()
  ARM: dts: qcom: sdx65: Add Qcom SMMU-500 as the fallback for IOMMU node
  UBUNTU: [Config] updateconfigs for HUGETLB_PAGE_OPTIMIZE_VMEMMAP_DEFAULT_ON
  arm64: mm: hugetlb: Disable HUGETLB_PAGE_OPTIMIZE_VMEMMAP
  panic: fix the panic_print NMI backtrace setting
  kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
  scsi: aacraid: Allocate cmd_priv with scsicmd
  riscv: Avoid enabling interrupts in die()
  PCI: Unify delay handling for reset and resume
  bus: mhi: ep: Only send -ENOTCONN status if client driver is available
  bus: mhi: ep: Move chan->lock to the start of processing queued ch ring
  bus: mhi: ep: Save channel state locally during suspend and resume
  iommu/vt-d: Fix PASID directory pointer coherency
  vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR
  drm/i915: Don't use stolen memory for ring buffers with LLC
  drm/i915: Don't use BAR mappings for ring buffers with LLC
  UBUNTU: Upstream stable to v5.15.99, v6.1.16

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2018948/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to