Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.28 upstream stable release
       from git://git.kernel.org/

            
Linux 6.1.28
netfilter: nf_tables: deactivate anonymous set from preparation phase
scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort()
debugobject: Ensure pool refill (again)
drm/amd/display (gcc13): fix enum mismatch
i40e: use int for i40e_status
i40e: Remove string printing for i40e_status
i40e: Remove unused i40e status codes
sfc (gcc13): synchronize ef100_enqueue_skb()'s return type
block/blk-iocost (gcc13): keep large values in a new enum
perf intel-pt: Fix CYC timestamps after standalone CBR
perf auxtrace: Fix address filter entire kernel size
wifi: ath11k: synchronize ath11k_mac_he_gi_to_nl80211_he_gi()'s return type
bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype
cifs: protect session status check in smb2_reconnect()
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
blk-iocost: avoid 64-bit division in ioc_timer_fn
dm: don't lock fs when the map is NULL in process of resume
dm ioctl: fix nested locking in table_clear() to remove deadlock concern
dm flakey: fix a crash with invalid table line
dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
dm clone: call kmem_cache_destroy() in dm_clone_init() error path
dm verity: fix error handling for check_at_most_once on FEC
vhost_vdpa: fix unmap process in no-batch mode
mm/mempolicy: correctly update prev when policy is equal on mbind
ia64: fix an addr to taddr in huge_pte_offset()
s390/dasd: fix hanging blockdevice after request requeue
btrfs: scrub: reject unsupported scrub flags
scripts/gdb: fix lx-timerlist for Python3
clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
clk: microchip: fix potential UAF in auxdev release callback
wifi: rtw89: fix potential race condition between napi_init and napi_enable
wifi: rtl8xxxu: RTL8192EU always needs full init
mailbox: zynqmp: Fix typo in IPI documentation
kcsan: Avoid READ_ONCE() in read_instrumented_memory()
mailbox: zynqmp: Fix IPI isr handling
mtd: spi-nor: core: Update flash's current address mode when changing address 
mode
mtd: core: fix error path for nvmem provider
mtd: core: fix nvmem error reporting
mtd: core: provide unique name for nvmem device, take two
kasan: hw_tags: avoid invalid virt_to_page()
md/raid5: Improve performance for sequential IO
md/raid10: fix null-ptr-deref in raid10_sync_request
drbd: correctly submit flush bio on barrier
mm: do not reclaim private data from pinned page
nilfs2: fix infinite loop in nilfs_mdt_get_block()
nilfs2: do not write dirty data after degenerating to read-only
ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop
ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED
ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41
ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6
ALSA: usb-audio: Add quirk for Pioneer DDJ-800
parisc: Ensure page alignment in flush functions
parisc: Fix argument pointer in real64_call_asm()
afs: Avoid endless loop if file is larger than expected
afs: Fix getattr to report server i_size on dirs, not local size
afs: Fix updating of i_size with dv jump from server
PM: hibernate: Do not get block device exclusively in test_resume mode
PM: hibernate: Turn snapshot_test into global variable
ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini
hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
hte: tegra: fix 'struct of_device_id' build error
mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE
mfd: ocelot-spi: Fix unsupported bulk read
mfd: tqmx86: Correct board names for TQMxE39x
mfd: tqmx86: Specify IO port register range more precisely
mfd: tqmx86: Do not access I2C_DETECT register through io_base
thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in 
mtk_thermal_probe
pinctrl-bcm2835.c: fix race condition when setting gpio dir
dmaengine: at_xdmac: do not enable all cyclic channels
dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
dmaengine: dw-edma: Fix to change for continuous transfer
dma: gpi: remove spurious unlock in gpi_ch_init
phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select()
phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and 
ulpi_port
soundwire: intel: don't save hw_params for use in prepare
soundwire: cadence: rename sdw_cdns_dai_dma_data as sdw_cdns_dai_runtime
pwm: mtk-disp: Configure double buffering before reading in .get_state()
pwm: mtk-disp: Disable shadow registers before setting backlight values
leds: tca6507: Fix error handling of using fwnode_property_read_string
dmaengine: mv_xor_v2: Fix an error code.
pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string
leds: TI_LMU_COMMON: select REGMAP instead of depending on it
pinctrl: renesas: r8a779g0: Fix ERROROUTC function names
pinctrl: renesas: r8a779g0: Fix Group 6/7 pin functions
pinctrl: renesas: r8a779g0: Fix Group 4/5 pin functions
pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group
pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration
ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
ext4: fix i_disksize exceeding i_size problem in paritally written case
SMB3: Close deferred file handles in case of handle lease break
SMB3: Add missing locks to protect deferred close file list
timekeeping: Fix references to nonexistent ktime_get_fast_ns()
openrisc: Properly store r31 to pt_regs on unhandled exceptions
clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when 
init fails
RDMA/mlx5: Use correct device num_ports when modify DC
SUNRPC: remove the maximum number of retries in call_bind_status
RDMA/mlx5: Fix flow counter query via DEVX
RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR
swiotlb: fix debugfs reporting of reserved memory pools
swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup
Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
clk: qcom: dispcc-qcm2290: Remove inexistent DSI1PHY clk
clk: qcom: dispcc-qcm2290: get rid of test clock
clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling
clk: qcom: lpassaudiocc-sc7280: Add required gdsc power domain clks in 
lpass_cc_sc7280_desc
clk: qcom: lpasscc-sc7280: Skip qdsp6ss clock registration
iommu/amd: Set page size bitmap during V2 domain allocation
NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
clk: imx: imx8ulp: Fix XBAR_DIVBUS and AD_SLOW clock parents
clk: imx: fracn-gppll: disable hardware select control
clk: imx: fracn-gppll: fix the rate table
IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
RDMA/srpt: Add a check for valid 'mad_agent' pointer
RDMA/cm: Trace icm_send_rej event before the cm state is reset
power: supply: rk817: Fix low SOC bugs
clk: qcom: gcc-sm6115: Mark RCGs shared where applicable
RDMA/siw: Remove namespace check from siw_netdev_event()
clk: add missing of_node_put() in "assigned-clocks" property parsing
power: supply: generic-adc-battery: fix unit scaling
iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN
fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
fs/ntfs3: Fix OOB read in indx_insert_into_buffer
fs/ntfs3: Add check for kmemdup
fs/ntfs3: Fix memory leak if ntfs_read_mft failed
RDMA/erdma: Use fixed hardware page size
rtc: k3: handle errors while enabling wake irq
rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
rtc: omap: include header for omap_rtc_power_off_program prototype
workqueue: Fix hung time report of worker pools
clk: qcom: gcc-qcm2290: Fix up gcc_sdcc2_apps_clk_src
RDMA/rdmavt: Delete unnecessary NULL check
clk: mediatek: mt8135: Properly use CLK_IS_CRITICAL flag
clk: mediatek: mt7622: Properly use CLK_IS_CRITICAL flag
clk: mediatek: Consistently use GATE_MTK() macro
clk: mediatek: mt2712: Add error handling to clk_mt2712_apmixed_probe()
RDMA/siw: Fix potential page_array out of range access
IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init
clk: at91: clk-sam9x60-pll: fix return value check
tracing/user_events: Ensure write index cannot be negative
sched/rt: Fix bad task migration for rt tasks
riscv: Fix ptdump when KASAN is enabled
Revert "objtool: Support addition to set CFA base"
perf/core: Fix hardlockup failure caused by perf throttle
sched/fair: Fix inaccurate tally of ttwu_move_affine
powerpc/rtas: use memmove for potentially overlapping buffer copy
macintosh: via-pmu-led: requires ATA to be set
powerpc/sysdev/tsi108: fix resource printk format warnings
powerpc/wii: fix resource printk format warnings
powerpc/mpc512x: fix resource printk format warning
powerpc/perf: Properly detect mpc7450 family
macintosh/windfarm_smu_sat: Add missing of_node_put()
selftests/powerpc/pmu: Fix sample field check in the 
mmcra_thresh_marked_sample_test
fbdev: mmp: Fix deferred clk handling in mmphw_probe()
virtio_ring: don't update event idx on get_buf
spmi: Add a check for remove callback when removing a SPMI driver
staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
spi: cadence-quadspi: use macro DEFINE_SIMPLE_DEV_PM_OPS
serial: 8250: Add missing wakeup event reporting
tty: serial: fsl_lpuart: adjust buffer length to the intended size
firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
usb: mtu3: fix kernel panic at qmu transfer done irq handler
usb: chipidea: fix missing goto in `ci_hdrc_probe`
usb: gadget: tegra-xudc: Fix crash in vbus_draw
sh: sq: Fix incorrect element size for allocating bitmap buffer
uapi/linux/const.h: prefer ISO-friendly __typeof__
scripts/gdb: raise error with reduced debugging information
i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
spi: cadence-quadspi: fix suspend-resume implementations
drm/panel: novatek-nt35950: Only unregister DSI1 if it exists
PCI/PM: Extend D3hot delay for NVIDIA HDA controllers
ASoC: fsl_mqs: move of_node_put() to the correct location
drm/panel: novatek-nt35950: Improve error handling
coresight: etm_pmu: Set the module field
cacheinfo: Check sib_leaf in cache_leaves_are_shared()
HID: amd_sfh: Handle "no sensors" enabled for SFH1.1
HID: amd_sfh: Increase sensor command timeout for SFH1.1
HID: amd_sfh: Correct the stop all command
HID: amd_sfh: Add support for shutdown operation
HID: amd_sfh: Fix illuminance value
HID: amd_sfh: Correct the sensor enable and disable command
HID: amd_sfh: Correct the structure fields
scripts/gdb: bail early if there are no generic PD
scripts/gdb: bail early if there are no clocks
ia64: salinfo: placate defined-but-not-used warning
ia64: mm/contig: fix section mismatch warning/error
PCI/EDR: Clear Device Status after EDR error recovery
of: Fix modalias string generation
vmci_host: fix a race condition in vmci_host_poll() causing GPF
spi: fsl-spi: Fix CPM/QE mode Litte Endian
interconnect: qcom: rpm: drop bogus pm domain attach
spi: qup: Don't skip cleanup in remove's error path
linux/vt_buffer.h: allow either builtin or modular for macros
ASoC: es8316: Handle optional IRQ assignment
PCI: imx6: Install the fault handler only on compatible match
ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE
usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove 
due to race condition
spi: imx: Don't skip cleanup in remove's error path
spi: atmel-quadspi: Free resources even if runtime resume failed in .remove()
spi: atmel-quadspi: Don't leak clk enable count in pm resume
serial: 8250_bcm7271: Fix arbitration handling
iio: light: max44009: add missing OF device matching
fpga: bridge: fix kernel-doc parameter description
serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are 
transmitted
usb: dwc3: gadget: Change condition for processing suspend event
usb: host: xhci-rcar: remove leftover quirk handling
pstore: Revert pmsg_lock back to a normal mutex
drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()
ASoC: cs35l41: Only disable internal boost
ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
net: amd: Fix link leak when verifying config failed
netlink: Use copy_to_user() for optval in netlink_getsockopt().
Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to 
unfinished work"
ipv4: Fix potential uninit variable access bug in __ip_make_skb()
net/sched: sch_fq: fix integer overflow of "credit"
net: dpaa: Fix uninitialized variable in dpaa_stop()
netfilter: nf_tables: don't write table validation state without mutex
bpf: Don't EFAULT for getsockopt with optval=NULL
bpf: Fix race between btf_put and btf_idr walk.
net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports
net/mlx5e: Nullify table pointer when failing to create
net/mlx5: Use recovery timeout on sync reset flow
Revert "net/mlx5: Remove "recovery" arg from mlx5_load_one() function"
net/mlx5: Suspend auxiliary devices only in case of PCI device suspend
net/mlx5: Remove "recovery" arg from mlx5_load_one() function
net/mlx5e: Fix error flow in representor failing to add vport rx rule
net/mlx5: E-switch, Don't destroy indirect table in split rule
net/mlx5: E-switch, Create per vport table based on devlink encap mode
net/mlx5e: Don't clone flow post action attributes second time
ixgbe: Enable setting RSS table to default values
ixgbe: Allow flow hash to be set via ethtool
wifi: iwlwifi: fw: fix memory leak in debugfs
netfilter: conntrack: fix wrong ct->timeout value
netfilter: conntrack: restore IPS_CONFIRMED out of 
nf_conntrack_hash_check_insert()
wifi: iwlwifi: mvm: check firmware response size
wifi: mt76: connac: fix txd multicast rate setting
wifi: mt76: mt7921e: stop chip reset worker in unregister hook
wifi: mt76: mt7921e: improve reliability of dma reset
wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe`
mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
wifi: mt76: fix 6GHz high channel not be scanned
wifi: mt76: mt7921e: fix probe timeout after reboot
wifi: mt76: add flexible polling wait-interval support
wifi: mt76: handle failure of vzalloc in mt7615_coredump_work
wifi: mt76: mt7915: expose device tree match table
wifi: iwlwifi: make the loop for card preparation effective
io_uring/rsrc: use nospec'ed indexes
jdb2: Don't refuse invalidation of already invalidated buffers
wifi: iwlwifi: fw: move memset before early return
wifi: iwlwifi: mvm: initialize seq variable
wifi: iwlwifi: yoyo: Fix possible division by zero
wifi: iwlwifi: yoyo: skip dump correctly on hw error
wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames
md/raid10: don't call bio_start_io_acct twice for bio which experienced read 
error
md/raid10: fix memleak of md thread
md/raid10: fix memleak for 'conf->bio_split'
md/raid10: fix leak of 'r10bio->remaining' for recovery
md/raid10: fix task hung in raid10d
f2fs: fix to check return value of inc_valid_block_count()
f2fs: fix to check return value of f2fs_do_truncate_blocks()
bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols
wifi: iwlwifi: trans: don't trigger d3 interrupt twice
wifi: iwlwifi: debug: fix crash in __iwl_err()
blk-mq: don't plug for head insertions in blk_execute_rq_nowait
selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach
selftests/bpf: Use read_perf_max_sample_freq() in perf_event_stackmap
nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
nvme: fix async event trace event
nvmet: fix I/O Command Set specific Identify Controller
nvmet: fix Identify Active Namespace ID list handling
nvmet: fix Identify Controller handling
nvmet: fix Identify Namespace handling
nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns()
bpf, sockmap: fix deadlocks in the sockhash and sockmap
wifi: ath11k: fix writing to unintended memory region
net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
net: ethernet: stmmac: dwmac-rk: rework optional clock handling
scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
bpf/btf: Fix is_int_ptr()
wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table
f2fs: fix to avoid use-after-free for cached IPU bio
xsk: Fix unaligned descriptor validation
crypto: drbg - Only fail when jent is unavailable in FIPS mode
bpftool: Fix bug for long instructions in program CFG dumps
selftests/bpf: Wait for receive in cg_storage_multi test
selftests: xsk: Deflakify STATS_RX_DROPPED test
selftests: xsk: Disable IPv6 on VETH1
selftests: xsk: Use correct UMEM size in testapp_invalid_desc
net: qrtr: correct types of trace event parameters
f2fs: fix iostat lock protection
wifi: rt2x00: Fix memory leak when handling surveys
scsi: hisi_sas: Handle NCQ error when IPTT is valid
scsi: libsas: Add sas_ata_device_link_abort()
wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
crypto: sa2ul - Select CRYPTO_DES
crypto: caam - Clear some memory in instantiate_rng
f2fs: fix scheduling while atomic in decompression path
f2fs: compress: fix to call f2fs_wait_on_page_writeback() in 
f2fs_write_raw_pages()
f2fs: apply zone capacity to all zone type
f2fs: fix uninitialized skipped_gc_rwsem
f2fs: handle dqget error in f2fs_transfer_project_quota()
net: sunhme: Fix uninitialized return code
scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
scsi: target: iscsit: Fix TAS handling during conn cleanup
scsi: target: Fix multiple LUN_RESET handling
scsi: target: iscsit: Stop/wait on cmds during conn close
scsi: target: iscsit: isert: Alloc per conn cmd counter
scsi: target: Pass in cmd counter to use during cmd setup
scsi: target: Move cmd counter allocation
scsi: target: Move sess cmd counter to new struct
scsi: target: core: Change the way target_xcopy_do_work() sets restiction on 
max I/O
bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation
netfilter: keep conntrack reference until IPsecv6 policy checks are done
net: dsa: qca8k: remove assignment of an_enabled in pcs_get_state()
libbpf: Fix ld_imm64 copy logic for ksym in light skeleton.
net/packet: convert po->auxdata to an atomic flag
net/packet: convert po->origdev to an atomic flag
net/packet: annotate accesses to po->xmit
vlan: partially enable SIOCSHWTSTAMP in container
net: pcs: xpcs: remove double-read of link state when using AN
bpf: Remove misleading spec_v1 check on var-offset stack read
selftests/bpf: Fix a fd leak in an error path in network_helpers.c
wifi: ath11k: fix deinitialization of firmware resources
scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
crypto: qat - fix concurrency issue when device state changes
bpf: fix precision propagation verbose logging
bpf: take into account liveness when propagating precision
wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
tools: bpftool: Remove invalid \' json escape
wifi: ath6kl: reduce WARN to dev_dbg() in callback
wifi: brcmfmac: support CQM RSSI notification with older firmware
wifi: ath11k: fix SAC bug on peer addition with sta band migration
wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
wifi: ath5k: Use platform_get_irq() to get the interrupt
wifi: ath11k: Use platform_get_irq() to get the interrupt
wifi: ath9k: hif_usb: fix memory leak of remain_skbs
wifi: ath6kl: minor fix for allocation size
platform/chrome: cros_typec_switch: Add missing fwnode_handle_put()
hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E
rpmsg: glink: Propagate TX failures in intentless mode as well
cpufreq: use correct unit when verify cur freq
ACPI: bus: Ensure that notify handlers are not running after removal
tick/common: Align tick period with the HZ tick.
drm/i915: Make intel_get_crtc_new_encoder() less oopsy
debugobject: Prevent init race with static objects
media: mediatek: vcodec: add remove function for decoder platform driver
media: mediatek: vcodec: fix decoder disable pm crash
perf/arm-cmn: Fix port detection for CMN-700
arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
regulator: stm32-pwr: fix of_iomap leak
media: venus: dec: Fix capture formats enumeration order
media: venus: dec: Fix handling of the start cmd
media: rc: gpio-ir-recv: Fix support for wake-up
drm/amd/display: Fix potential null dereference
media: hi846: Fix memleak in hi846_init_controls()
media: v4l: async: Return async sub-devices to subnotifier list
media: rcar_fdp1: Fix refcount leak in probe and remove function
media: platform: mtk-mdp3: fix potential frame size overflow in 
mdp_try_fmt_mplane()
media: saa7134: fix use after free bug in saa7134_finidev due to race condition
media: dm1105: Fix use after free bug in dm1105_remove due to race condition
platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init
platform/x86/amd: pmc: Utilize SMN index 0 for driver probe
platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read`
platform/x86/amd: pmc: Don't dump data after resume from s0i3 on picasso
platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso
platform/x86/amd: pmc: Don't try to read SMU version on Picasso
platform/x86/amd/pmf: Move out of BIOS SMN pair for driver probe
media: rkvdec: fix use after free bug in rkvdec_remove
media: cedrus: fix use after free bug in cedrus_remove due to race condition
media: mediatek: vcodec: change lat thread decode error condition
media: mediatek: vcodec: making sure queue_work successfully
media: mediatek: vcodec: remove unused lat_buf
media: mediatek: vcodec: add core decode done event
media: mediatek: vcodec: move lat_buf to the top of core list
media: mediatek: vcodec: using each instance lat_buf count replace core ready 
list
media: mediatek: vcodec: add params to record lat and core lat_buf count
media: mediatek: vcodec: Force capture queue format to MM21
media: mediatek: vcodec: Make MM21 the default capture format
media: mediatek: vcodec: Use 4K frame size when supported by stateful decoder
arm64: dts: sc7280: Rename qspi data12 as data23
arm64: dts: sc7180: Rename qspi data12 as data23
arm64: dts: qcom: msm8994-angler: removed clash with smem_region
arm64: dts: qcom: msm8994-angler: Fix cont_splash_mem mapping
x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
regulator: core: Avoid lockdep reports when resolving supplies
regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()
drm/ttm/pool: Fix ttm_pool_alloc error path
drm/ttm: optimize pool allocations a bit v2
arm64: dts: qcom: apq8096-db820c: drop unit address from PMI8994 regulator
arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 
regulator
arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator
arm64: dts: qcom: sc7180-trogdor-pazquel: correct trackpad supply
arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply
arm64: dts: qcom: sc7280-herobrine-villager: correct trackpad supply
gpu: host1x: Fix memory leak of device names
gpu: host1x: Fix potential double free if IOMMU is disabled
soc: renesas: renesas-soc: Release 'chipid' from ioremap()
soc: bcm: brcmstb: biuctrl: fix of_iomap leak
mailbox: mpfs: switch to txdone_poll
drm/mediatek: dp: Change the aux retries times when receiving AUX_DEFER
drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
ACPI: VIOT: Initialize the correct IOMMU fwspec
arm64: dts: mediatek: mt8192-asurada: Fix voltage constraint for Vgpu
cpufreq: qcom-cpufreq-hw: Revert adding cpufreq qos
cpufreq: mediatek: Raise proc and sram max voltage for MT7622/7623
cpufreq: mediatek: raise proc/sram max voltage for MT8516
cpufreq: mediatek: fix KP caused by handler usage after regulator_put/clk_put
cpufreq: mediatek: fix passing zero to 'PTR_ERR'
arm64: dts: apple: t8103: Disable unused PCIe ports
ARM: dts: stm32: fix spi1 pin assignment on stm32mp15
perf/arm-cmn: Move overlapping wp_combine field
firmware: arm_scmi: Fix xfers allocation on Rx channel
ARM: dts: gta04: fix excess dma channel usage
drm: rcar-du: Fix a NULL vs IS_ERR() bug
arm64: dts: qcom: sm8450: fix pcie1 gpios properties name
mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known 
override-init warnings
arm64: dts: qcom: sm8350-microsoft-surface: fix USB dual-role mode property
virt/coco/sev-guest: Double-buffer messages
drm: msm: adreno: Disable preemption on Adreno 510
drm/msm/adreno: drop bogus pm_runtime_set_active()
arm64: dts: ti: k3-am62a7: Correct L2 cache size to 512KB
arm64: dts: ti: k3-am625: Correct L2 cache size to 512KB
media: max9286: Free control handler
drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
firmware: qcom_scm: Clear download bit during reboot
media: av7110: prevent underflow in write_ts_to_decoder()
media: amphion: decoder implement display delay enable
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
media: bdisp: Add missing check for create_workqueue
x86/MCE/AMD: Use an u64 for bank_map
ARM: dts: qcom: sdx55: Fix the unit address of PCIe EP node
ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
arm64: dts: qcom: sm8450: Fix the PCI I/O port range
arm64: dts: qcom: sm8150: Fix the PCI I/O port range
arm64: dts: qcom: sm8250: Fix the PCI I/O port range
arm64: dts: qcom: msm8996: Fix the PCI I/O port range
arm64: dts: qcom: ipq6018: Fix the PCI I/O port range
arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
arm64: dts: qcom: sc7280: Fix the PCI I/O port range
arm64: dts: qcom: msm8998: Fix the PCI I/O port range
arm64: dts: qcom: sdm845: Fix the PCI I/O port range
arm64: dts: qcom: sdm845: correct dynamic power coefficients
arm64: dts: qcom: sc7280: fix EUD port properties
arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename
arm64: dts: broadcom: bcmbca: bcm4908: fix LED nodenames
arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name
arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property
arm64: dts: ti: k3-am62a7-sk: Fix DDR size to full 4GB
arm64: dts: ti: k3-am62-main: Fix GPIO numbers in DT
regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since 
booted
ARM: dts: qcom-apq8064: Fix opp table child name
EDAC/skx: Fix overflows on the DRAM row address mapping arrays
drm/msm/disp/dpu: check for crtc enable rather than crtc active to release 
shared resources
drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached
arm64: dts: renesas: r9a07g043: Update IRQ numbers for SSI channels
arm64: dts: renesas: r9a07g043: Introduce SOC_PERIPHERAL_IRQ() macro to specify 
interrupt property
arm64: dts: renesas: r9a07g054: Update IRQ numbers for SSI channels
arm64: dts: renesas: r9a07g044: Update IRQ numbers for SSI channels
arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007
drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux
drm/probe-helper: Cancel previous job before starting new one
drm/vgem: add missing mutex_destroy
drm/i915/dg2: Drop one PCI ID
drm/rockchip: Drop unbalanced obj unref
erofs: fix potential overflow calculating xattr_isize
erofs: initialize packed inode after root inode is assigned
erofs: stop parsing non-compact HEAD index if clusterofs is invalid
tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
tpm, tpm: Implement usage counter for locality
tpm, tpm_tis: Claim locality before writing interrupt registers
tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
tpm, tpm_tis: Do not skip reset of original interrupt vector
selinux: ensure av_permissions.h is built when needed
selinux: fix Makefile dependencies of flask.h
selftests/resctrl: Check for return value after write_schemata()
selftests/resctrl: Allow ->setup() to return errors
selftests/resctrl: Move ->setup() call outside of test specific branches
selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
kunit: fix bug in the order of lines in debugfs logs
kunit: improve KTAP compliance of KUnit test output
ASoC: dt-bindings: qcom,lpass-rx-macro: correct minItems for clocks
bus: mhi: host: Range check CHDBOFF and ERDBOFF
bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state
bus: mhi: host: Remove duplicate ee check for syserr
cxl/hdm: Fail upon detecting 0-sized decoders
xfs: don't consider future format versions valid
ceph: fix potential use-after-free bug when trimming caps
ubifs: Fix memory leak in do_rename
ubifs: Free memory for tmpfile name
ubi: Fix return value overwrite issue in try_write_vid_and_data()
ubifs: Fix memleak when insert_old_idx() failed
Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
RISC-V: Align SBI probe implementation with spec
iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
drm/amd/pm: re-enable the gfx imu when smu resume
swsmu/amdgpu_smu: Fix the wrong if-condition
tracing: Fix permissions for the buffer_percent file
riscv: mm: remove redundant parameter of create_fdt_early_page_table
i2c: omap: Fix standard mode false ACK readings
ACPI: video: Remove acpi_backlight=video quirk for Lenovo ThinkPad W530
ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
ksmbd: not allow guest user on multichannel
ksmbd: fix memleak in session setup
ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
ksmbd: call rcu_barrier() in ksmbd_server_exit()
ksmbd: fix racy issue under cocurrent smb2 tree disconnect
KVM: RISC-V: Retry fault if vma_lookup() results become invalid
drm/amd/display: fix a divided-by-zero error
drm/amd/display: fix PSR-SU/DSC interoperability support
drm/amd/display: limit timing for single dimm memory
drm/amd/display: Remove stutter only configurations
relayfs: fix out-of-bounds access in relay_file_read
KVM: arm64: vgic: Don't acquire its_lock before config_lock
KVM: arm64: Use config_lock to protect vgic state
KVM: arm64: Use config_lock to protect data ordered against KVM_RUN
KVM: arm64: Avoid lock inversion when setting the VM register width
KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON
KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
reiserfs: Add security prefix to xattr name in reiserfs_security_write()
rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
crypto: ccp - Don't initialize CCP for PSP 0x1649
crypto: arm64/aes-neonbs - fix crash with CFI enabled
crypto: safexcel - Cleanup ring IRQ workqueues on load failure
crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
ring-buffer: Sync IRQ works before buffer destruction
ring-buffer: Ensure proper resetting of atomic variables in 
ring_buffer_reset_online_cpus
pinctrl: qcom: lpass-lpi: set output value before enabling output
soundwire: qcom: correct setting ignore bit on v1.5.1
pwm: meson: Fix g12a ao clk81 name
pwm: meson: Fix axg ao mux parents
wifi: mt76: add missing locking to protect against concurrent rx/status calls
kheaders: Use array declaration instead of char
iio: addac: stx104: Fix race condition for stx104_write_raw()
iio: addac: stx104: Fix race condition when converting analog-to-digital
ipmi: fix SSIF not responding under certain cond.
ipmi:ssif: Add send_retries increment
MIPS: fw: Allow firmware to pass a empty env
fs: fix sysctls.c built
tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
serial: max310x: fix IO data corruption in batched operations
serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
serial: fix TIOCSRS485 locking
xhci: fix debugfs register accesses while suspended
tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
staging: iio: resolver: ads1210: fix config mode
blk-crypto: make blk_crypto_evict_key() more robust
blk-crypto: make blk_crypto_evict_key() return void
blk-mq: release crypto keyslot before reporting I/O complete
blk-crypto: Add a missing include directive
blk-crypto: move internal only declarations to blk-crypto-internal.h
blk-crypto: add a blk_crypto_config_supported_natively helper
blk-crypto: don't use struct request_queue for public interfaces
blk-stat: fix QUEUE_FLAG_STATS clear
media: ov8856: Do not check for for module version
posix-cpu-timers: Implement the missing timer_wait_running callback
tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
hwmon: (adt7475) Use device_property APIs when configuring polarity
hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
USB: dwc3: fix runtime pm imbalance on unbind
USB: dwc3: fix runtime pm imbalance on probe errors
usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive
usb: gadget: udc: core: Prevent redundant calls to pullup
usb: gadget: udc: core: Invoke usb_gadget_connect only when started
IMA: allow/fix UML builds
phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes
PCI: qcom: Fix the incorrect register usage in v2.7.0 config
PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
PCI: kirin: Select REGMAP_MMIO
powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU
arm64: Stash shadow stack pointer in the task struct on interrupt
arm64: Always load shadow stack pointer directly from the task struct
ASoC: amd: ps: update the acp clock source.
ASoC: amd: fix ACP version typo mistake
wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset
wireguard: timers: cast enum limits members to int in prints
x86/cpu: Add model number for Intel Arrow Lake processor
asm-generic/io.h: suppress endianness warnings for readq() and writeq()
tracing: Error if a trace event has an array for a __field()
wifi: ath11k: reduce the MHI timeout to 20s
platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list
net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II
scsi: mpi3mr: Handle soft reset in progress fault code (0xF002)
selftests mount: Fix mount_setattr_test builds failed
net: wwan: t7xx: do not compile with -Werror
ASoC: da7213.c: add missing pm_runtime_disable()
ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
iio: adc: palmas_gpadc: fix NULL dereference on rmmod
ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx (8A22)
x86/hyperv: Block root partition functionality in a Confidential VM
ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm
ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15
ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15

** Affects: linux-oem-6.1 (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux-oem-6.1 (Ubuntu Jammy)
     Importance: Undecided
         Status: New


** Tags: kernel-stable-tracking-bug

** Changed in: linux-oem-6.1 (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux-oem-6.1 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-6.1 in Ubuntu.
https://bugs.launchpad.net/bugs/2019966

Title:
  Jammy update: v6.1.28 upstream stable release

Status in linux-oem-6.1 package in Ubuntu:
  Confirmed
Status in linux-oem-6.1 source package in Jammy:
  New

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.1.28 upstream stable release
         from git://git.kernel.org/

              
  Linux 6.1.28
  netfilter: nf_tables: deactivate anonymous set from preparation phase
  scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort()
  debugobject: Ensure pool refill (again)
  drm/amd/display (gcc13): fix enum mismatch
  i40e: use int for i40e_status
  i40e: Remove string printing for i40e_status
  i40e: Remove unused i40e status codes
  sfc (gcc13): synchronize ef100_enqueue_skb()'s return type
  block/blk-iocost (gcc13): keep large values in a new enum
  perf intel-pt: Fix CYC timestamps after standalone CBR
  perf auxtrace: Fix address filter entire kernel size
  wifi: ath11k: synchronize ath11k_mac_he_gi_to_nl80211_he_gi()'s return type
  bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
  thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype
  cifs: protect session status check in smb2_reconnect()
  cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
  blk-iocost: avoid 64-bit division in ioc_timer_fn
  dm: don't lock fs when the map is NULL in process of resume
  dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  dm flakey: fix a crash with invalid table line
  dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
  dm clone: call kmem_cache_destroy() in dm_clone_init() error path
  dm verity: fix error handling for check_at_most_once on FEC
  vhost_vdpa: fix unmap process in no-batch mode
  mm/mempolicy: correctly update prev when policy is equal on mbind
  ia64: fix an addr to taddr in huge_pte_offset()
  s390/dasd: fix hanging blockdevice after request requeue
  btrfs: scrub: reject unsupported scrub flags
  scripts/gdb: fix lx-timerlist for Python3
  clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
  clk: microchip: fix potential UAF in auxdev release callback
  wifi: rtw89: fix potential race condition between napi_init and napi_enable
  wifi: rtl8xxxu: RTL8192EU always needs full init
  mailbox: zynqmp: Fix typo in IPI documentation
  kcsan: Avoid READ_ONCE() in read_instrumented_memory()
  mailbox: zynqmp: Fix IPI isr handling
  mtd: spi-nor: core: Update flash's current address mode when changing address 
mode
  mtd: core: fix error path for nvmem provider
  mtd: core: fix nvmem error reporting
  mtd: core: provide unique name for nvmem device, take two
  kasan: hw_tags: avoid invalid virt_to_page()
  md/raid5: Improve performance for sequential IO
  md/raid10: fix null-ptr-deref in raid10_sync_request
  drbd: correctly submit flush bio on barrier
  mm: do not reclaim private data from pinned page
  nilfs2: fix infinite loop in nilfs_mdt_get_block()
  nilfs2: do not write dirty data after degenerating to read-only
  ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop
  ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED
  ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41
  ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6
  ALSA: usb-audio: Add quirk for Pioneer DDJ-800
  parisc: Ensure page alignment in flush functions
  parisc: Fix argument pointer in real64_call_asm()
  afs: Avoid endless loop if file is larger than expected
  afs: Fix getattr to report server i_size on dirs, not local size
  afs: Fix updating of i_size with dv jump from server
  PM: hibernate: Do not get block device exclusively in test_resume mode
  PM: hibernate: Turn snapshot_test into global variable
  ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini
  hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
  hte: tegra: fix 'struct of_device_id' build error
  mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE
  mfd: ocelot-spi: Fix unsupported bulk read
  mfd: tqmx86: Correct board names for TQMxE39x
  mfd: tqmx86: Specify IO port register range more precisely
  mfd: tqmx86: Do not access I2C_DETECT register through io_base
  thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in 
mtk_thermal_probe
  pinctrl-bcm2835.c: fix race condition when setting gpio dir
  dmaengine: at_xdmac: do not enable all cyclic channels
  dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
  dmaengine: dw-edma: Fix to change for continuous transfer
  dma: gpi: remove spurious unlock in gpi_ch_init
  phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select()
  phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and 
ulpi_port
  soundwire: intel: don't save hw_params for use in prepare
  soundwire: cadence: rename sdw_cdns_dai_dma_data as sdw_cdns_dai_runtime
  pwm: mtk-disp: Configure double buffering before reading in .get_state()
  pwm: mtk-disp: Disable shadow registers before setting backlight values
  leds: tca6507: Fix error handling of using fwnode_property_read_string
  dmaengine: mv_xor_v2: Fix an error code.
  pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string
  leds: TI_LMU_COMMON: select REGMAP instead of depending on it
  pinctrl: renesas: r8a779g0: Fix ERROROUTC function names
  pinctrl: renesas: r8a779g0: Fix Group 6/7 pin functions
  pinctrl: renesas: r8a779g0: Fix Group 4/5 pin functions
  pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group
  pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration
  ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
  ext4: fix i_disksize exceeding i_size problem in paritally written case
  SMB3: Close deferred file handles in case of handle lease break
  SMB3: Add missing locks to protect deferred close file list
  timekeeping: Fix references to nonexistent ktime_get_fast_ns()
  openrisc: Properly store r31 to pt_regs on unhandled exceptions
  clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when 
init fails
  RDMA/mlx5: Use correct device num_ports when modify DC
  SUNRPC: remove the maximum number of retries in call_bind_status
  RDMA/mlx5: Fix flow counter query via DEVX
  RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR
  swiotlb: fix debugfs reporting of reserved memory pools
  swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup
  Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  clk: qcom: dispcc-qcm2290: Remove inexistent DSI1PHY clk
  clk: qcom: dispcc-qcm2290: get rid of test clock
  clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling
  clk: qcom: lpassaudiocc-sc7280: Add required gdsc power domain clks in 
lpass_cc_sc7280_desc
  clk: qcom: lpasscc-sc7280: Skip qdsp6ss clock registration
  iommu/amd: Set page size bitmap during V2 domain allocation
  NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
  clk: imx: imx8ulp: Fix XBAR_DIVBUS and AD_SLOW clock parents
  clk: imx: fracn-gppll: disable hardware select control
  clk: imx: fracn-gppll: fix the rate table
  IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
  IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
  RDMA/srpt: Add a check for valid 'mad_agent' pointer
  RDMA/cm: Trace icm_send_rej event before the cm state is reset
  power: supply: rk817: Fix low SOC bugs
  clk: qcom: gcc-sm6115: Mark RCGs shared where applicable
  RDMA/siw: Remove namespace check from siw_netdev_event()
  clk: add missing of_node_put() in "assigned-clocks" property parsing
  power: supply: generic-adc-battery: fix unit scaling
  iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN
  fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
  fs/ntfs3: Fix OOB read in indx_insert_into_buffer
  fs/ntfs3: Add check for kmemdup
  fs/ntfs3: Fix memory leak if ntfs_read_mft failed
  RDMA/erdma: Use fixed hardware page size
  rtc: k3: handle errors while enabling wake irq
  rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
  RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
  rtc: omap: include header for omap_rtc_power_off_program prototype
  workqueue: Fix hung time report of worker pools
  clk: qcom: gcc-qcm2290: Fix up gcc_sdcc2_apps_clk_src
  RDMA/rdmavt: Delete unnecessary NULL check
  clk: mediatek: mt8135: Properly use CLK_IS_CRITICAL flag
  clk: mediatek: mt7622: Properly use CLK_IS_CRITICAL flag
  clk: mediatek: Consistently use GATE_MTK() macro
  clk: mediatek: mt2712: Add error handling to clk_mt2712_apmixed_probe()
  RDMA/siw: Fix potential page_array out of range access
  IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init
  clk: at91: clk-sam9x60-pll: fix return value check
  tracing/user_events: Ensure write index cannot be negative
  sched/rt: Fix bad task migration for rt tasks
  riscv: Fix ptdump when KASAN is enabled
  Revert "objtool: Support addition to set CFA base"
  perf/core: Fix hardlockup failure caused by perf throttle
  sched/fair: Fix inaccurate tally of ttwu_move_affine
  powerpc/rtas: use memmove for potentially overlapping buffer copy
  macintosh: via-pmu-led: requires ATA to be set
  powerpc/sysdev/tsi108: fix resource printk format warnings
  powerpc/wii: fix resource printk format warnings
  powerpc/mpc512x: fix resource printk format warning
  powerpc/perf: Properly detect mpc7450 family
  macintosh/windfarm_smu_sat: Add missing of_node_put()
  selftests/powerpc/pmu: Fix sample field check in the 
mmcra_thresh_marked_sample_test
  fbdev: mmp: Fix deferred clk handling in mmphw_probe()
  virtio_ring: don't update event idx on get_buf
  spmi: Add a check for remove callback when removing a SPMI driver
  staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  spi: cadence-quadspi: use macro DEFINE_SIMPLE_DEV_PM_OPS
  serial: 8250: Add missing wakeup event reporting
  tty: serial: fsl_lpuart: adjust buffer length to the intended size
  firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  usb: mtu3: fix kernel panic at qmu transfer done irq handler
  usb: chipidea: fix missing goto in `ci_hdrc_probe`
  usb: gadget: tegra-xudc: Fix crash in vbus_draw
  sh: sq: Fix incorrect element size for allocating bitmap buffer
  uapi/linux/const.h: prefer ISO-friendly __typeof__
  scripts/gdb: raise error with reduced debugging information
  i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
  i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
  spi: cadence-quadspi: fix suspend-resume implementations
  drm/panel: novatek-nt35950: Only unregister DSI1 if it exists
  PCI/PM: Extend D3hot delay for NVIDIA HDA controllers
  ASoC: fsl_mqs: move of_node_put() to the correct location
  drm/panel: novatek-nt35950: Improve error handling
  coresight: etm_pmu: Set the module field
  cacheinfo: Check sib_leaf in cache_leaves_are_shared()
  HID: amd_sfh: Handle "no sensors" enabled for SFH1.1
  HID: amd_sfh: Increase sensor command timeout for SFH1.1
  HID: amd_sfh: Correct the stop all command
  HID: amd_sfh: Add support for shutdown operation
  HID: amd_sfh: Fix illuminance value
  HID: amd_sfh: Correct the sensor enable and disable command
  HID: amd_sfh: Correct the structure fields
  scripts/gdb: bail early if there are no generic PD
  scripts/gdb: bail early if there are no clocks
  ia64: salinfo: placate defined-but-not-used warning
  ia64: mm/contig: fix section mismatch warning/error
  PCI/EDR: Clear Device Status after EDR error recovery
  of: Fix modalias string generation
  vmci_host: fix a race condition in vmci_host_poll() causing GPF
  spi: fsl-spi: Fix CPM/QE mode Litte Endian
  interconnect: qcom: rpm: drop bogus pm domain attach
  spi: qup: Don't skip cleanup in remove's error path
  linux/vt_buffer.h: allow either builtin or modular for macros
  ASoC: es8316: Handle optional IRQ assignment
  PCI: imx6: Install the fault handler only on compatible match
  ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE
  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove 
due to race condition
  spi: imx: Don't skip cleanup in remove's error path
  spi: atmel-quadspi: Free resources even if runtime resume failed in .remove()
  spi: atmel-quadspi: Don't leak clk enable count in pm resume
  serial: 8250_bcm7271: Fix arbitration handling
  iio: light: max44009: add missing OF device matching
  fpga: bridge: fix kernel-doc parameter description
  serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are 
transmitted
  usb: dwc3: gadget: Change condition for processing suspend event
  usb: host: xhci-rcar: remove leftover quirk handling
  pstore: Revert pmsg_lock back to a normal mutex
  drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
  drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()
  ASoC: cs35l41: Only disable internal boost
  ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
  tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
  net: amd: Fix link leak when verifying config failed
  netlink: Use copy_to_user() for optval in netlink_getsockopt().
  Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to 
unfinished work"
  ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  net/sched: sch_fq: fix integer overflow of "credit"
  net: dpaa: Fix uninitialized variable in dpaa_stop()
  netfilter: nf_tables: don't write table validation state without mutex
  bpf: Don't EFAULT for getsockopt with optval=NULL
  bpf: Fix race between btf_put and btf_idr walk.
  net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports
  net/mlx5e: Nullify table pointer when failing to create
  net/mlx5: Use recovery timeout on sync reset flow
  Revert "net/mlx5: Remove "recovery" arg from mlx5_load_one() function"
  net/mlx5: Suspend auxiliary devices only in case of PCI device suspend
  net/mlx5: Remove "recovery" arg from mlx5_load_one() function
  net/mlx5e: Fix error flow in representor failing to add vport rx rule
  net/mlx5: E-switch, Don't destroy indirect table in split rule
  net/mlx5: E-switch, Create per vport table based on devlink encap mode
  net/mlx5e: Don't clone flow post action attributes second time
  ixgbe: Enable setting RSS table to default values
  ixgbe: Allow flow hash to be set via ethtool
  wifi: iwlwifi: fw: fix memory leak in debugfs
  netfilter: conntrack: fix wrong ct->timeout value
  netfilter: conntrack: restore IPS_CONFIRMED out of 
nf_conntrack_hash_check_insert()
  wifi: iwlwifi: mvm: check firmware response size
  wifi: mt76: connac: fix txd multicast rate setting
  wifi: mt76: mt7921e: stop chip reset worker in unregister hook
  wifi: mt76: mt7921e: improve reliability of dma reset
  wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe`
  mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
  wifi: mt76: fix 6GHz high channel not be scanned
  wifi: mt76: mt7921e: fix probe timeout after reboot
  wifi: mt76: add flexible polling wait-interval support
  wifi: mt76: handle failure of vzalloc in mt7615_coredump_work
  wifi: mt76: mt7915: expose device tree match table
  wifi: iwlwifi: make the loop for card preparation effective
  io_uring/rsrc: use nospec'ed indexes
  jdb2: Don't refuse invalidation of already invalidated buffers
  wifi: iwlwifi: fw: move memset before early return
  wifi: iwlwifi: mvm: initialize seq variable
  wifi: iwlwifi: yoyo: Fix possible division by zero
  wifi: iwlwifi: yoyo: skip dump correctly on hw error
  wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames
  md/raid10: don't call bio_start_io_acct twice for bio which experienced read 
error
  md/raid10: fix memleak of md thread
  md/raid10: fix memleak for 'conf->bio_split'
  md/raid10: fix leak of 'r10bio->remaining' for recovery
  md/raid10: fix task hung in raid10d
  f2fs: fix to check return value of inc_valid_block_count()
  f2fs: fix to check return value of f2fs_do_truncate_blocks()
  bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
  wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols
  wifi: iwlwifi: trans: don't trigger d3 interrupt twice
  wifi: iwlwifi: debug: fix crash in __iwl_err()
  blk-mq: don't plug for head insertions in blk_execute_rq_nowait
  selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach
  selftests/bpf: Use read_perf_max_sample_freq() in perf_event_stackmap
  nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
  nvme: fix async event trace event
  nvmet: fix I/O Command Set specific Identify Controller
  nvmet: fix Identify Active Namespace ID list handling
  nvmet: fix Identify Controller handling
  nvmet: fix Identify Namespace handling
  nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns()
  bpf, sockmap: fix deadlocks in the sockhash and sockmap
  wifi: ath11k: fix writing to unintended memory region
  net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
  net: ethernet: stmmac: dwmac-rk: rework optional clock handling
  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  bpf/btf: Fix is_int_ptr()
  wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table
  f2fs: fix to avoid use-after-free for cached IPU bio
  xsk: Fix unaligned descriptor validation
  crypto: drbg - Only fail when jent is unavailable in FIPS mode
  bpftool: Fix bug for long instructions in program CFG dumps
  selftests/bpf: Wait for receive in cg_storage_multi test
  selftests: xsk: Deflakify STATS_RX_DROPPED test
  selftests: xsk: Disable IPv6 on VETH1
  selftests: xsk: Use correct UMEM size in testapp_invalid_desc
  net: qrtr: correct types of trace event parameters
  f2fs: fix iostat lock protection
  wifi: rt2x00: Fix memory leak when handling surveys
  scsi: hisi_sas: Handle NCQ error when IPTT is valid
  scsi: libsas: Add sas_ata_device_link_abort()
  wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
  wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
  crypto: sa2ul - Select CRYPTO_DES
  crypto: caam - Clear some memory in instantiate_rng
  f2fs: fix scheduling while atomic in decompression path
  f2fs: compress: fix to call f2fs_wait_on_page_writeback() in 
f2fs_write_raw_pages()
  f2fs: apply zone capacity to all zone type
  f2fs: fix uninitialized skipped_gc_rwsem
  f2fs: handle dqget error in f2fs_transfer_project_quota()
  net: sunhme: Fix uninitialized return code
  scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
  scsi: target: iscsit: Fix TAS handling during conn cleanup
  scsi: target: Fix multiple LUN_RESET handling
  scsi: target: iscsit: Stop/wait on cmds during conn close
  scsi: target: iscsit: isert: Alloc per conn cmd counter
  scsi: target: Pass in cmd counter to use during cmd setup
  scsi: target: Move cmd counter allocation
  scsi: target: Move sess cmd counter to new struct
  scsi: target: core: Change the way target_xcopy_do_work() sets restiction on 
max I/O
  bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation
  netfilter: keep conntrack reference until IPsecv6 policy checks are done
  net: dsa: qca8k: remove assignment of an_enabled in pcs_get_state()
  libbpf: Fix ld_imm64 copy logic for ksym in light skeleton.
  net/packet: convert po->auxdata to an atomic flag
  net/packet: convert po->origdev to an atomic flag
  net/packet: annotate accesses to po->xmit
  vlan: partially enable SIOCSHWTSTAMP in container
  net: pcs: xpcs: remove double-read of link state when using AN
  bpf: Remove misleading spec_v1 check on var-offset stack read
  selftests/bpf: Fix a fd leak in an error path in network_helpers.c
  wifi: ath11k: fix deinitialization of firmware resources
  scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
  crypto: qat - fix concurrency issue when device state changes
  bpf: fix precision propagation verbose logging
  bpf: take into account liveness when propagating precision
  wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
  wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
  tools: bpftool: Remove invalid \' json escape
  wifi: ath6kl: reduce WARN to dev_dbg() in callback
  wifi: brcmfmac: support CQM RSSI notification with older firmware
  wifi: ath11k: fix SAC bug on peer addition with sta band migration
  wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
  wifi: ath5k: Use platform_get_irq() to get the interrupt
  wifi: ath11k: Use platform_get_irq() to get the interrupt
  wifi: ath9k: hif_usb: fix memory leak of remain_skbs
  wifi: ath6kl: minor fix for allocation size
  platform/chrome: cros_typec_switch: Add missing fwnode_handle_put()
  hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E
  rpmsg: glink: Propagate TX failures in intentless mode as well
  cpufreq: use correct unit when verify cur freq
  ACPI: bus: Ensure that notify handlers are not running after removal
  tick/common: Align tick period with the HZ tick.
  drm/i915: Make intel_get_crtc_new_encoder() less oopsy
  debugobject: Prevent init race with static objects
  media: mediatek: vcodec: add remove function for decoder platform driver
  media: mediatek: vcodec: fix decoder disable pm crash
  perf/arm-cmn: Fix port detection for CMN-700
  arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
  x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
  regulator: stm32-pwr: fix of_iomap leak
  media: venus: dec: Fix capture formats enumeration order
  media: venus: dec: Fix handling of the start cmd
  media: rc: gpio-ir-recv: Fix support for wake-up
  drm/amd/display: Fix potential null dereference
  media: hi846: Fix memleak in hi846_init_controls()
  media: v4l: async: Return async sub-devices to subnotifier list
  media: rcar_fdp1: Fix refcount leak in probe and remove function
  media: platform: mtk-mdp3: fix potential frame size overflow in 
mdp_try_fmt_mplane()
  media: saa7134: fix use after free bug in saa7134_finidev due to race 
condition
  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init
  platform/x86/amd: pmc: Utilize SMN index 0 for driver probe
  platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read`
  platform/x86/amd: pmc: Don't dump data after resume from s0i3 on picasso
  platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso
  platform/x86/amd: pmc: Don't try to read SMU version on Picasso
  platform/x86/amd/pmf: Move out of BIOS SMN pair for driver probe
  media: rkvdec: fix use after free bug in rkvdec_remove
  media: cedrus: fix use after free bug in cedrus_remove due to race condition
  media: mediatek: vcodec: change lat thread decode error condition
  media: mediatek: vcodec: making sure queue_work successfully
  media: mediatek: vcodec: remove unused lat_buf
  media: mediatek: vcodec: add core decode done event
  media: mediatek: vcodec: move lat_buf to the top of core list
  media: mediatek: vcodec: using each instance lat_buf count replace core ready 
list
  media: mediatek: vcodec: add params to record lat and core lat_buf count
  media: mediatek: vcodec: Force capture queue format to MM21
  media: mediatek: vcodec: Make MM21 the default capture format
  media: mediatek: vcodec: Use 4K frame size when supported by stateful decoder
  arm64: dts: sc7280: Rename qspi data12 as data23
  arm64: dts: sc7180: Rename qspi data12 as data23
  arm64: dts: qcom: msm8994-angler: removed clash with smem_region
  arm64: dts: qcom: msm8994-angler: Fix cont_splash_mem mapping
  x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
  regulator: core: Avoid lockdep reports when resolving supplies
  regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()
  drm/ttm/pool: Fix ttm_pool_alloc error path
  drm/ttm: optimize pool allocations a bit v2
  arm64: dts: qcom: apq8096-db820c: drop unit address from PMI8994 regulator
  arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 
regulator
  arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator
  arm64: dts: qcom: sc7180-trogdor-pazquel: correct trackpad supply
  arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply
  arm64: dts: qcom: sc7280-herobrine-villager: correct trackpad supply
  gpu: host1x: Fix memory leak of device names
  gpu: host1x: Fix potential double free if IOMMU is disabled
  soc: renesas: renesas-soc: Release 'chipid' from ioremap()
  soc: bcm: brcmstb: biuctrl: fix of_iomap leak
  mailbox: mpfs: switch to txdone_poll
  drm/mediatek: dp: Change the aux retries times when receiving AUX_DEFER
  drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
  ACPI: VIOT: Initialize the correct IOMMU fwspec
  arm64: dts: mediatek: mt8192-asurada: Fix voltage constraint for Vgpu
  cpufreq: qcom-cpufreq-hw: Revert adding cpufreq qos
  cpufreq: mediatek: Raise proc and sram max voltage for MT7622/7623
  cpufreq: mediatek: raise proc/sram max voltage for MT8516
  cpufreq: mediatek: fix KP caused by handler usage after regulator_put/clk_put
  cpufreq: mediatek: fix passing zero to 'PTR_ERR'
  arm64: dts: apple: t8103: Disable unused PCIe ports
  ARM: dts: stm32: fix spi1 pin assignment on stm32mp15
  perf/arm-cmn: Move overlapping wp_combine field
  firmware: arm_scmi: Fix xfers allocation on Rx channel
  ARM: dts: gta04: fix excess dma channel usage
  drm: rcar-du: Fix a NULL vs IS_ERR() bug
  arm64: dts: qcom: sm8450: fix pcie1 gpios properties name
  mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
  ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
  drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known 
override-init warnings
  arm64: dts: qcom: sm8350-microsoft-surface: fix USB dual-role mode property
  virt/coco/sev-guest: Double-buffer messages
  drm: msm: adreno: Disable preemption on Adreno 510
  drm/msm/adreno: drop bogus pm_runtime_set_active()
  arm64: dts: ti: k3-am62a7: Correct L2 cache size to 512KB
  arm64: dts: ti: k3-am625: Correct L2 cache size to 512KB
  media: max9286: Free control handler
  drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
  firmware: qcom_scm: Clear download bit during reboot
  media: av7110: prevent underflow in write_ts_to_decoder()
  media: amphion: decoder implement display delay enable
  media: platform: mtk-mdp3: Add missing check and free for ida_alloc
  media: bdisp: Add missing check for create_workqueue
  x86/MCE/AMD: Use an u64 for bank_map
  ARM: dts: qcom: sdx55: Fix the unit address of PCIe EP node
  ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
  ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
  arm64: dts: qcom: sm8450: Fix the PCI I/O port range
  arm64: dts: qcom: sm8150: Fix the PCI I/O port range
  arm64: dts: qcom: sm8250: Fix the PCI I/O port range
  arm64: dts: qcom: msm8996: Fix the PCI I/O port range
  arm64: dts: qcom: ipq6018: Fix the PCI I/O port range
  arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
  arm64: dts: qcom: sc7280: Fix the PCI I/O port range
  arm64: dts: qcom: msm8998: Fix the PCI I/O port range
  arm64: dts: qcom: sdm845: Fix the PCI I/O port range
  arm64: dts: qcom: sdm845: correct dynamic power coefficients
  arm64: dts: qcom: sc7280: fix EUD port properties
  arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
  arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename
  arm64: dts: broadcom: bcmbca: bcm4908: fix LED nodenames
  arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name
  arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property
  arm64: dts: ti: k3-am62a7-sk: Fix DDR size to full 4GB
  arm64: dts: ti: k3-am62-main: Fix GPIO numbers in DT
  regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since 
booted
  ARM: dts: qcom-apq8064: Fix opp table child name
  EDAC/skx: Fix overflows on the DRAM row address mapping arrays
  drm/msm/disp/dpu: check for crtc enable rather than crtc active to release 
shared resources
  drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached
  arm64: dts: renesas: r9a07g043: Update IRQ numbers for SSI channels
  arm64: dts: renesas: r9a07g043: Introduce SOC_PERIPHERAL_IRQ() macro to 
specify interrupt property
  arm64: dts: renesas: r9a07g054: Update IRQ numbers for SSI channels
  arm64: dts: renesas: r9a07g044: Update IRQ numbers for SSI channels
  arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
  arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
  soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
  tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007
  drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux
  drm/probe-helper: Cancel previous job before starting new one
  drm/vgem: add missing mutex_destroy
  drm/i915/dg2: Drop one PCI ID
  drm/rockchip: Drop unbalanced obj unref
  erofs: fix potential overflow calculating xattr_isize
  erofs: initialize packed inode after root inode is assigned
  erofs: stop parsing non-compact HEAD index if clusterofs is invalid
  tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
  tpm, tpm: Implement usage counter for locality
  tpm, tpm_tis: Claim locality before writing interrupt registers
  tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
  tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
  tpm, tpm_tis: Do not skip reset of original interrupt vector
  selinux: ensure av_permissions.h is built when needed
  selinux: fix Makefile dependencies of flask.h
  selftests/resctrl: Check for return value after write_schemata()
  selftests/resctrl: Allow ->setup() to return errors
  selftests/resctrl: Move ->setup() call outside of test specific branches
  selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
  rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
  kunit: fix bug in the order of lines in debugfs logs
  kunit: improve KTAP compliance of KUnit test output
  ASoC: dt-bindings: qcom,lpass-rx-macro: correct minItems for clocks
  bus: mhi: host: Range check CHDBOFF and ERDBOFF
  bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state
  bus: mhi: host: Remove duplicate ee check for syserr
  cxl/hdm: Fail upon detecting 0-sized decoders
  xfs: don't consider future format versions valid
  ceph: fix potential use-after-free bug when trimming caps
  ubifs: Fix memory leak in do_rename
  ubifs: Free memory for tmpfile name
  ubi: Fix return value overwrite issue in try_write_vid_and_data()
  ubifs: Fix memleak when insert_old_idx() failed
  Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
  RISC-V: Align SBI probe implementation with spec
  iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
  drm/amd/pm: re-enable the gfx imu when smu resume
  swsmu/amdgpu_smu: Fix the wrong if-condition
  tracing: Fix permissions for the buffer_percent file
  riscv: mm: remove redundant parameter of create_fdt_early_page_table
  i2c: omap: Fix standard mode false ACK readings
  ACPI: video: Remove acpi_backlight=video quirk for Lenovo ThinkPad W530
  ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
  ksmbd: not allow guest user on multichannel
  ksmbd: fix memleak in session setup
  ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
  ksmbd: call rcu_barrier() in ksmbd_server_exit()
  ksmbd: fix racy issue under cocurrent smb2 tree disconnect
  KVM: RISC-V: Retry fault if vma_lookup() results become invalid
  drm/amd/display: fix a divided-by-zero error
  drm/amd/display: fix PSR-SU/DSC interoperability support
  drm/amd/display: limit timing for single dimm memory
  drm/amd/display: Remove stutter only configurations
  relayfs: fix out-of-bounds access in relay_file_read
  KVM: arm64: vgic: Don't acquire its_lock before config_lock
  KVM: arm64: Use config_lock to protect vgic state
  KVM: arm64: Use config_lock to protect data ordered against KVM_RUN
  KVM: arm64: Avoid lock inversion when setting the VM register width
  KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON
  KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
  reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
  crypto: ccp - Don't initialize CCP for PSP 0x1649
  crypto: arm64/aes-neonbs - fix crash with CFI enabled
  crypto: safexcel - Cleanup ring IRQ workqueues on load failure
  crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
  ring-buffer: Sync IRQ works before buffer destruction
  ring-buffer: Ensure proper resetting of atomic variables in 
ring_buffer_reset_online_cpus
  pinctrl: qcom: lpass-lpi: set output value before enabling output
  soundwire: qcom: correct setting ignore bit on v1.5.1
  pwm: meson: Fix g12a ao clk81 name
  pwm: meson: Fix axg ao mux parents
  wifi: mt76: add missing locking to protect against concurrent rx/status calls
  kheaders: Use array declaration instead of char
  iio: addac: stx104: Fix race condition for stx104_write_raw()
  iio: addac: stx104: Fix race condition when converting analog-to-digital
  ipmi: fix SSIF not responding under certain cond.
  ipmi:ssif: Add send_retries increment
  MIPS: fw: Allow firmware to pass a empty env
  fs: fix sysctls.c built
  tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
  serial: max310x: fix IO data corruption in batched operations
  serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  serial: fix TIOCSRS485 locking
  xhci: fix debugfs register accesses while suspended
  tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  staging: iio: resolver: ads1210: fix config mode
  blk-crypto: make blk_crypto_evict_key() more robust
  blk-crypto: make blk_crypto_evict_key() return void
  blk-mq: release crypto keyslot before reporting I/O complete
  blk-crypto: Add a missing include directive
  blk-crypto: move internal only declarations to blk-crypto-internal.h
  blk-crypto: add a blk_crypto_config_supported_natively helper
  blk-crypto: don't use struct request_queue for public interfaces
  blk-stat: fix QUEUE_FLAG_STATS clear
  media: ov8856: Do not check for for module version
  posix-cpu-timers: Implement the missing timer_wait_running callback
  tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
  hwmon: (adt7475) Use device_property APIs when configuring polarity
  hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
  USB: dwc3: fix runtime pm imbalance on unbind
  USB: dwc3: fix runtime pm imbalance on probe errors
  usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive
  usb: gadget: udc: core: Prevent redundant calls to pullup
  usb: gadget: udc: core: Invoke usb_gadget_connect only when started
  IMA: allow/fix UML builds
  phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes
  PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
  PCI: kirin: Select REGMAP_MMIO
  powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU
  arm64: Stash shadow stack pointer in the task struct on interrupt
  arm64: Always load shadow stack pointer directly from the task struct
  ASoC: amd: ps: update the acp clock source.
  ASoC: amd: fix ACP version typo mistake
  wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset
  wireguard: timers: cast enum limits members to int in prints
  x86/cpu: Add model number for Intel Arrow Lake processor
  asm-generic/io.h: suppress endianness warnings for readq() and writeq()
  tracing: Error if a trace event has an array for a __field()
  wifi: ath11k: reduce the MHI timeout to 20s
  platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list
  net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II
  scsi: mpi3mr: Handle soft reset in progress fault code (0xF002)
  selftests mount: Fix mount_setattr_test builds failed
  net: wwan: t7xx: do not compile with -Werror
  ASoC: da7213.c: add missing pm_runtime_disable()
  ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
  iio: adc: palmas_gpadc: fix NULL dereference on rmmod
  ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx (8A22)
  x86/hyperv: Block root partition functionality in a Confidential VM
  ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm
  ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15
  ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.1/+bug/2019966/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to