Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.168 upstream stable release
from git://git.kernel.org/
parisc: Fix 64-bit userspace syscall path
parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
of/irq: Support #msi-cells=<0> in of_msi_get_domain
drm: omapdrm: Add missing check for alloc_ordered_workqueue
jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
mm: krealloc: consider spare memory for __GFP_ZERO
ocfs2: fix the la space leak when unmounting an ocfs2 volume
ocfs2: fix uninit-value in ocfs2_get_block()
ocfs2: reserve space for inline xattr before attaching reflink tree
ocfs2: cancel dqi_sync_work before freeing oinfo
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
ocfs2: fix null-ptr-deref when journal load failed.
ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
usbnet: ipheth: fix carrier detection in modes 1 and 4
net: ethernet: use ip_hdrlen() instead of bit shift
net: phy: vitesse: repair vsc73xx autonegotiation
powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
btrfs: update target inode's ctime on unlink
Input: ads7846 - ratelimit the spi_sync error message
Input: synaptics - enable SMBus for HP Elitebook 840 G2
HID: multitouch: Add support for GT7868Q
scripts: kconfig: merge_config: config files: add a trailing newline
platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
drm/msm/adreno: Fix error return if missing firmware-name
Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
NFSv4: Fix clearing of layout segments in layoutreturn
NFS: Avoid unnecessary rescanning of the per-server delegation list
platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
mptcp: pm: Fix uaf in __timer_delete_sync
arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
minmax: reduce min/max macro expansion in atomisp driver
net: tighten bad gso csum offset check in virtio_net_hdr
mm: avoid leaving partial pfn mappings around in error case
fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
eeprom: digsy_mtc: Fix 93xx46 driver probe failure
selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
hwmon: (pmbus) Introduce and use write_byte_data callback
hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
ice: fix accounting for filters shared by multiple VSIs
igb: Always call igb_xdp_ring_update_tail() under Tx lock
net/mlx5e: Add missing link modes to ptys2ethtool_map
net/mlx5: Explicitly set scheduling element and TSAR type
net/mlx5: Add support to create match definer
net/mlx5: Add IFC bits and enums for flow meter
net/mlx5: Add missing masks and QoS bit masks for scheduling elements
fou: fix initialization of grc
octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
octeontx2-af: Modify SMQ flush sequence to drop packets
net: ftgmac100: Enable TX interrupt to avoid TX timeout
netfilter: nft_socket: fix sk refcount leaks
net: dpaa: Pad packets to ETH_ZLEN
spi: nxp-fspi: fix the KASAN report out-of-bounds bug
soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
dma-buf: heaps: Fix off-by-one in CMA heap fault handler
ASoC: meson: axg-card: fix 'use-after-free'
ASoC: allow module autoloading for table db1200_pids
ALSA: hda/realtek - Fixed ALC256 headphone no sound
ALSA: hda/realtek - FIxed ALC285 headphone no sound
scsi: lpfc: Fix overflow build issue
pinctrl: at91: make it work with current gpiolib
microblaze: don't treat zero reserved memory regions as error
net: ftgmac100: Ensure tx descriptor updates are visible
wifi: iwlwifi: lower message level for FW buffer destination
wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
wifi: iwlwifi: clear trans->state earlier upon error
ASoC: intel: fix module autoloading
ASoC: tda7419: fix module autoloading
spi: spidev: Add an entry for elgin,jg10309-01
drm: komeda: Fix an issue related to normalized zpos
spi: bcm63xx: Enable module autoloading
x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
spi: spidev: Add missing spi_device_id for jg10309-01
ocfs2: add bounds checking to ocfs2_xattr_find_entry()
ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
cgroup: Make operations on the cgroup root_list RCU safe
Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
gpio: prevent potential speculation leaks in gpio_device_get_desc()
gpiolib: cdev: Ignore reconfiguration without direction
cgroup: Move rcu_head up near the top of cgroup_root
USB: serial: pl2303: add device id for Macrosilicon MS3020
USB: usbtmc: prevent kernel-usb-infoleak
EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR
EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw
EDAC/synopsys: Re-enable the error interrupts on v3 hw
EDAC/synopsys: Fix ECC status and IRQ control race condition
EDAC/synopsys: Fix error injection on Zynq UltraScale+
wifi: rtw88: always wait for both firmware loading attempts
crypto: xor - fix template benchmarking
ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
wifi: ath9k: fix parameter check in ath9k_init_debug()
wifi: ath9k: Remove error checks when creating debugfs entries
net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
wifi: rtw88: remove CPT execution branch never used
fs: explicitly unregister per-superblock BDIs
mount: warn only once about timestamp range expiration
fs/namespace: fnic: Switch to use %ptTd
mount: handle OOM on mnt_warn_timestamp_expiry
wifi: iwlwifi: mvm: increase the time between ranging measurements
padata: Honor the caller's alignment in case of chunk_size 0
can: j1939: use correct function name in comment
ACPI: CPPC: Fix MASK_VAL() usage
netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
netfilter: nf_tables: reject element expiration with no timeout
netfilter: nf_tables: reject expiration higher than timeout
netfilter: nf_tables: remove annotation to access set timeout while holding lock
cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
x86/sgx: Fix deadlock in SGX NUMA node search
wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
wifi: mt76: mt7915: fix rx filter setting for bfee functionality
wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
sock_map: Add a cond_resched() in sock_hash_free()
can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
can: m_can: m_can_close(): stop clocks after device has been shut down
Bluetooth: btusb: Fix not handling ZPL/short-transfer
bareudp: Pull inner IP header in bareudp_udp_encap_recv().
net: geneve: support IPv4/IPv6 as inner protocol
geneve: Fix incorrect inner network header offset when innerprotoinherit is set
bareudp: Pull inner IP header on xmit.
net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
r8169: disable ALDPS per default for RTL8125
net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
net: tipc: avoid possible garbage value
block, bfq: fix possible UAF for bfqq->bic with merge chain
block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
block, bfq: don't break merge chain in bfq_split_bfqq()
block: print symbolic error name instead of error code
block: fix potential invalid pointer dereference in blk_add_partition
spi: ppc4xx: handle irq_of_parse_and_map() errors
spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
ARM: versatile: fix OF node leak in CPUs prepare
reset: berlin: fix OF node leak in probe() error path
reset: k210: fix OF node leak in probe() error path
clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
m68k: Fix kernel_clone_args.flags in m68k_clone()
hwmon: (max16065) Fix overflows seen when writing limits
i2c: Add i2c_get_match_data()
hwmon: (max16065) Remove use of i2c_match_id()
hwmon: (max16065) Fix alarm attributes
mtd: slram: insert break after errors in parsing the map
hwmon: (ntc_thermistor) fix module autoloading
power: supply: axp20x_battery: Remove design from min and max voltage
power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
mtd: powernv: Add check devm_kasprintf() returned value
pmdomain: core: Harden inter-column space in debug summary
drm/stm: Fix an error handling path in stm_drm_platform_probe()
drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
drm/amdgpu: Replace one-element array with flexible-array member
drm/amdgpu: properly handle vbios fake edid sizing
drm/radeon: Replace one-element array with flexible-array member
drm/radeon: properly handle vbios fake edid sizing
scsi: NCR5380: Add SCp members to struct NCR5380_cmd
scsi: NCR5380: Check for phase match during PDMA fixup
drm/rockchip: vop: Allow 4096px width scaling
drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
powerpc/32: Remove the 'nobats' kernel parameter
powerpc/32: Remove 'noltlbs' kernel parameter
powerpc/8xx: Fix initial memory mapping
powerpc/8xx: Fix kernel vs user address comparison
drm/msm: Fix incorrect file name output in adreno_request_fw()
drm/msm/a5xx: disable preemption in submits by default
drm/msm/a5xx: properly clear preemption records on resume
drm/msm/a5xx: fix races in preemption evaluation stage
drm/msm: Drop priv->lastctx
drm/msm/a5xx: workaround early ring-buffer emptiness check
ipmi: docs: don't advertise deprecated sysfs entries
drm/msm: fix %s null argument error
drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
xen: use correct end address of kernel for conflict checking
xen/swiotlb: add alignment check for dma buffers
tpm: Clean up TPM space after command failure
selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
selftests/bpf: Fix compiling kfree_skb.c with musl-libc
selftests/bpf: Fix compiling flow_dissector.c with musl-libc
selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
selftests/bpf: Fix compiling core_reloc.c with musl-libc
selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
selftests/bpf: Fix error compiling test_lru_map.c
selftests/bpf: Fix C++ compile error from missing _Bool type
xz: cleanup CRC32 edits from 2018
kthread: fix task state in kthread worker if being frozen
ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
ext4: avoid buffer_head leak in ext4_mark_inode_used()
ext4: avoid potential buffer_head leak in __ext4_new_inode()
ext4: avoid negative min_clusters in find_group_orlov()
ext4: return error on ext4_find_inline_entry
ext4: avoid OOB when system.data xattr changes underneath the filesystem
nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
nilfs2: determine empty node blocks as corrupted
nilfs2: fix potential oob read in nilfs_btree_check_delete()
bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
perf mem: Free the allocated sort string, fixing a leak
perf sched timehist: Fix missing free of session in perf_sched__timehist()
perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
perf time-utils: Fix 32-bit nsec parsing
clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
clk: imx: imx8qxp: Parent should be initialized earlier than the clock
remoteproc: imx_rproc: Correct ddr alias for i.MX8M
remoteproc: imx_rproc: Initialize workqueue earlier
clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
Input: ilitek_ts_i2c - avoid wrong input subsystem sync
Input: ilitek_ts_i2c - add report id message validation
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
PCI: xilinx-nwl: Fix register misspelling
PCI: xilinx-nwl: Clean up clock on probe failure/removal
RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
pinctrl: single: fix missing error code in pcs_probe()
RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
clk: ti: dra7-atl: Fix leak of of_nodes
nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
nfsd: fix refcount leak when file is unhashed after being found
pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
IB/core: Fix ib_cache_setup_one error flow cleanup
watchdog: imx_sc_wdt: Don't disable WDT in suspend
RDMA/hns: Don't modify rq next block addr in HIP09 QPC
RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
RDMA/hns: Remove unused abnormal interrupt of type RAS
RDMA/hns: Fix the wrong type of return value of the interrupt handler
RDMA/hns: Refactor the abnormal interrupt handler function
RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
RDMA/hns: Optimize hem allocation performance
riscv: Fix fp alignment bug in perf_callchain_user()
RDMA/cxgb4: Added NULL check for lookup_atid
RDMA/irdma: fix error message in irdma_modify_qp_roce()
ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
ntb_perf: Fix printk format
nfsd: call cache_put if xdr_reserve_space returns NULL
nfsd: return -EINVAL when namelen is 0
f2fs: fix typo
f2fs: fix to update i_ctime in __f2fs_setxattr()
f2fs: remove unneeded check condition in __f2fs_setxattr()
f2fs: reduce expensive checkpoint trigger frequency
f2fs: optimize error handling in redirty_blocks
f2fs: fix to wait page writeback before setting gcing flag
f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy
f2fs: clean up w/ dotdot_name
f2fs: get rid of online repaire on corrupted directory
spi: lpspi: Silence error message upon deferred probe
spi: lpspi: release requested DMA channels
spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
iio: adc: ad7606: fix oversampling gpio array
iio: adc: ad7606: fix standby gpio state to match the documentation
coresight: tmc: sg: Do not leak sg_table
interconnect: qcom: sm8250: Enable sync_state
vdpa: Add eventfd for the vdpa callback
vhost_vdpa: assign irq bypass producer token correctly
Revert "dm: requeue IO if mapping table not yet available"
net: axienet: Clean up device used for DMA calls
net: axienet: Clean up DMA start/stop and error handling
net: axienet: don't set IRQ timer when IRQ delay not used
net: axienet: implement NAPI and GRO receive
net: axienet: reduce default RX interrupt threshold to 1
net: axienet: add coalesce timer ethtool configuration
net: axienet: Be more careful about updating tx_bd_tail
net: axienet: Use NAPI for TX completion path
net: axienet: Switch to 64-bit RX/TX statistics
net: xilinx: axienet: Fix packet counting
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
tcp: check skb is non-NULL in tcp_rto_delta_us()
net: qrtr: Update packets cloning when broadcasting
bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
Input: goodix - use the new soc_intel_is_byt() helper
powercap: RAPL: fix invalid initialization for pl4_supported field
x86/mm: Switch to new Intel CPU model defines
vfio/pci: fix potential memory leak in vfio_intx_enable()
selinux,smack: don't bypass permissions check in inode_setsecctx hook
Remove *.orig pattern from .gitignore
PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
soc: versatile: integrator: fix OF node leak in probe() error path
Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
drm/amd/display: Round calculated vtotal
drm/amd/display: Validate backlight caps are sane
scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
scsi: mac_scsi: Refactor polling loop
scsi: mac_scsi: Disallow bus errors during PDMA send
usbnet: fix cyclical race on disconnect with work queue
USB: appledisplay: close race between probe and completion handler
USB: misc: cypress_cy7c63: check for short transfer
USB: class: CDC-ACM: fix race between get_serial and set_serial
usb: cdnsp: Fix incorrect usb_request status
usb: dwc2: drd: fix clock gating on USB role switch
bus: integrator-lm: fix OF node leak in probe()
firmware_loader: Block path traversal
tty: rp2: Fix reset with non forgiving PCIe host bridges
xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
drbd: Fix atomicity violation in drbd_uuid_set_bm()
drbd: Add NULL check for net_conf to prevent dereference in state validation
ACPI: sysfs: validate return type of _STR method
ACPI: resource: Add another DMI match for the TongFang GMxXGxx
efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
perf/x86/intel/pt: Fix sampling synchronization
wifi: rtw88: 8822c: Fix reported RX band width
wifi: mt76: mt7615: check devm_kasprintf() returned value
debugobjects: Fix conditions in fill_pool()
f2fs: prevent possible int overflow in dir_block_index()
f2fs: avoid potential int overflow in sanity_check_area_boundary()
hwrng: mtk - Use devm_pm_runtime_enable
hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
vfs: fix race between evice_inodes() and find_inode()&iput()
fs: Fix file_set_fowner LSM hook inconsistencies
nfs: fix memory leak in error path of nfs4_do_reclaim
EDAC/igen6: Fix conversion of system address to physical memory address
padata: use integer wrap around to prevent deadlock on seq_nr overflow
soc: versatile: realview: fix memory leak during device remove
soc: versatile: realview: fix soc_dev leak during device remove
usb: yurex: Replace snprintf() with the safer scnprintf() variant
USB: misc: yurex: fix race between read and write
xhci: fix event ring segment table related masks and variables in header
xhci: remove xhci_test_trb_in_td_math early development check
xhci: Refactor interrupter code for initial multi interrupter support.
xhci: Preserve RsvdP bits in ERSTBA register correctly
xhci: Add a quirk for writing ERST in high-low order
usb: xhci: fix loss of data on Cadence xHC
pps: remove usage of the deprecated ida_simple_xx() API
pps: add an error check in parport_attach
x86/idtentry: Incorporate definitions/declarations of the FRED entries
x86/entry: Remove unwanted instrumentation in common_interrupt()
bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
lockdep: fix deadlock issue between lockdep and rcu
mm: only enforce minimum stack gap size if it's sensible
i2c: aspeed: Update the stop sw state when the bus recovery occurs
i2c: isch: Add missed 'else'
usb: yurex: Fix inconsistent locking bug in yurex_read()
spi: lpspi: Simplify some error message
static_call: Handle module init failure correctly in static_call_del_module()
static_call: Replace pointless WARN_ON() in static_call_module_notify()
mailbox: rockchip: fix a typo in module autoloading
mailbox: bcm2835: Fix timeout during suspend mode
ceph: remove the incorrect Fw reference check when dirtying pages
ieee802154: Fix build error
net/mlx5: Fix error path in multi-packet WQE transmit
net/mlx5: Added cond_resched() to crdump collection
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
netfilter: nf_tables: prevent nf_skb_duplicated corruption
Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
net: ethernet: lantiq_etop: fix memory disclosure
net: avoid potential underflow in qdisc_pkt_len_init() with UFO
net: add more sanity checks to qdisc_pkt_len_init()
stmmac_pci: Fix underflow size in stmmac_rx
net: stmmac: Disable automatic FCS/Pad stripping
net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
ppp: do not assume bh is held in ppp_channel_bridge_input()
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
i2c: xiic: Fix broken locking on tx_msg
i2c: xiic: Switch from waitqueue to completion
i2c: xiic: Fix RX IRQ busy check
i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
i2c: xiic: improve error message when transfer fails to start
i2c: xiic: Try re-initialization on bus busy timeout
media: usbtv: Remove useless locks in usbtv_video_free()
ALSA: mixer_oss: Remove some incorrect kfree_const() usages
ALSA: hda/realtek: Fix the push button function for the ALC257
ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
f2fs: Require FMODE_WRITE for atomic write ioctls
wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
net/xen-netback: prevent UAF in xenvif_flush_hash()
net: hisilicon: hip04: fix OF node leak in probe()
net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
net: hisilicon: hns_mdio: fix OF node leak in probe()
ACPI: PAD: fix crash in exit_round_robin()
ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
net: sched: consistently use rcu_replace_pointer() in taprio_change()
blk_iocost: fix more out of bound shifts
nvme-pci: qdepth 1 quirk
wifi: ath11k: fix array out-of-bound access in SoC stats
wifi: rtw88: select WANT_DEV_COREDUMP
ACPI: EC: Do not release locks during operation region accesses
ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
tipc: guard against string buffer overrun
net: mvpp2: Increase size of queue_name buffer
ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
net: atlantic: Avoid warning about potential string truncation
tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
ACPICA: iasl: handle empty connection_node
proc: add config & param to block forcing mem writes
UBUNTU: [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
nfp: Use IRQF_NO_AUTOEN flag in request_irq()
signal: Replace BUG_ON()s
ALSA: usb-audio: Add input value sanity checks for standard types
x86/ioapic: Handle allocation failures gracefully
ALSA: usb-audio: Define macros for quirk table entries
ALSA: usb-audio: Add logitech Audio profile quirk
tools/x86/kcpuid: Protect against faulty "max subleaf" values
ALSA: asihpi: Fix potential OOB array access
ALSA: hdsp: Break infinite MIDI input flush loop
x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
fbdev: pxafb: Fix possible use after free in pxafb_task()
rcuscale: Provide clear error when async specified without primitives
iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
power: reset: brcmstb: Do not go into infinite loop if reset fails
iommu/vt-d: Always reserve a domain ID for identity setup
iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
ata: sata_sil: Rename sil_blacklist to sil_quirks
drm/amd/display: Check null pointers before using dc->clk_mgr
jfs: UBSAN: shift-out-of-bounds in dbFindBits
jfs: Fix uaf in dbFreeBits
jfs: check if leafidx greater than num leaves per dmap tree
scsi: smartpqi: correct stream detection
jfs: Fix uninit-value access of new_ea in ea_buffer
drm/amdgpu: add raven1 gfxoff quirk
drm/amdgpu: enable gfxoff quirk on HP 705G4
HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
platform/x86: touchscreen_dmi: add nanote-next quirk
drm/amd/display: Check stream before comparing them
drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
drm/amd/display: Fix index out of bounds in degamma hardware format translation
drm/amd/display: Fix index out of bounds in DCN30 color transformation
drm/amd/display: Initialize get_bytes_per_element's default to 1
drm/printer: Allow NULL data in devcoredump printer
scsi: aacraid: Rearrange order of struct aac_srb_unit
drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
drm/amd/pm: ensure the fw_info is not null before using it
of/irq: Refer to actual buffer size in of_irq_parse_one()
ext4: ext4_search_dir should return a proper error
ext4: avoid use-after-free in ext4_ext_show_leaf()
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
blk-integrity: use sysfs_emit
blk-integrity: convert to struct device_attribute
blk-integrity: register sysfs attributes on struct device
usb: typec: tcpm: Check for port partner validity before consuming it
spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: s3c64xx: fix timeout counters in flush_fifo
selftests: breakpoints: use remaining time to check if suspend succeed
selftests: vDSO: fix vDSO name for powerpc
selftests: vDSO: fix vdso_config for powerpc
selftests: vDSO: fix vDSO symbols lookup for powerpc64
selftests/mm: fix charge_reserved_hugetlb.sh test
selftests: vDSO: fix ELF hash table entry size for s390x
selftests: vDSO: fix vdso_config for s390
platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
i2c: xiic: Wait for TX empty to avoid missed TX NAKs
firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
spi: bcm63xx: Fix module autoloading
power: supply: hwmon: Fix missing temp1_max_alarm attribute
perf/core: Fix small negative period being ignored
parisc: Fix itlb miss handler for 64-bit programs
drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
ALSA: core: add isascii() check to card ID generator
ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
ALSA: usb-audio: Add native DSD support for Luxman D-08u
ALSA: line6: add hw monitor volume control to POD HD500X
ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
ext4: no need to continue when the number of entries is 1
ext4: correct encrypted dentry name hash when not casefolded
ext4: fix slab-use-after-free in ext4_split_extent_at()
ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
ext4: aovid use-after-free in ext4_ext_insert_extent()
ext4: fix double brelse() the buffer of the extents path
ext4: update orig_path in ext4_find_extent()
ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
ext4: fix fast commit inode enqueueing during a full journal commit
ext4: use handle to mark fc as ineligible in __track_dentry_update()
ext4: mark fc as ineligible using an handle in ext4_xattr_set()
riscv: define ILLEGAL_POINTER_VALUE for 64bit
exfat: fix memory leak in exfat_load_bitmap()
perf hist: Update hist symbol when updating maps
nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
nfsd: map the EBADMSG to nfserr_io to avoid warning
NFSD: Fix NFSv4's PUTPUBFH operation
aoe: fix the potential use-after-free problem in more places
clk: rockchip: fix error for unknown clocks
clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
media: sun4i_csi: Implement link validate for sun4i_csi subdev
media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
clk: qcom: clk-rpmh: Fix overflow in BCM vote
clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
media: venus: fix use after free bug in venus_remove due to race condition
clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
iio: magnetometer: ak8975: Fix reading for ak099xx sensors
tomoyo: fallback to realpath if symlink's pathname does not exist
net: stmmac: Fix zero-division error when disabling tc cbs
rtc: at91sam9: fix OF node leak in probe() error path
Input: adp5589-keys - fix NULL pointer dereference
Input: adp5589-keys - fix adp5589_gpio_get_value()
ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
btrfs: wait for fixup workers before stopping cleaner kthread during umount
gpio: davinci: fix lazy disable
tracing/hwlat: Fix a race during cpuhp processing
tracing/timerlat: Fix a race during cpuhp processing
close_range(): fix the logics in descriptor table trimming
drm/sched: Add locking to drm_sched_entity_modify_sched
drm/amd/display: Fix system hang while resume with TBT monitor
kconfig: qconf: fix buffer overflow in debug links
device property: Add fwnode_iomap()
device property: Add fwnode_irq_get_byname
i2c: smbus: Use device_*() functions instead of of_*()
i2c: create debugfs entry per adapter
i2c: core: Lock address during client device instantiation
i2c: xiic: Use devm_clk_get_enabled()
i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: bcm63xx: Fix missing pm_runtime_disable()
ext4: properly sync file size update after O_SYNC direct IO
ext4: dax: fix overflowing extents beyond inode size when partially writing
arm64: Add Cortex-715 CPU part definition
arm64: cputype: Add Neoverse-N3 definitions
arm64: errata: Expand speculative SSBS workaround once more
uprobes: fix kernel info leak via "[uprobes]" vma
drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
build-id: require program headers to be right after ELF header
lib/buildid: harden build ID parsing logic
drm/rockchip: define gamma registers for RK3399
drm/rockchip: support gamma control on RK3399
drm/rockchip: vop: clear DMA stop bit on RK3066
media: i2c: imx335: Enable regulator supplies
media: imx335: Fix reset-gpio handling
dt-bindings: clock: qcom: Add missing UFS QREF clocks
dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
r8169: add tally counter fields added with RTL8125
clk: qcom: gcc-sc8180x: Add GPLL9 support
ACPI: battery: Simplify battery hook locking
ACPI: battery: Fix possible crash when unregistering a battery hook
Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
ext4: fix inode tree inconsistency caused by ENOMEM
9p: add missing locking around taking dentry fid list
vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
perf report: Fix segfault when 'sym' sort key is not used
ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
unicode: Don't special case ignorable code points
net: ethernet: cortina: Drop TSO support
tracing: Remove precision vsnprintf() check from print event
drm/crtc: fix uninitialized variable use even harder
tracing: Have saved_cmdlines arrays all in one allocation
selftests/net: give more time to udpgro bg processes to complete startup
selftests/net: synchronize udpgro tests' tx and rx connection
selftests: net: Remove executable bits from library scripts
fs/ntfs3: Refactor enum_rstbl to suppress static checker
virtio_console: fix misc probe bugs
Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
bpf: Check percpu map value size first
s390/facility: Disable compile time optimization for decompressor code
s390/mm: Add cond_resched() to cmm_alloc/free_pages()
bpf, x64: Fix a jit convergence issue
ext4: don't set SB_RDONLY after filesystem errors
ext4: nested locking for xattr inode
s390/cpum_sf: Remove WARN_ON_ONCE statements
ktest.pl: Avoid false positives with grub2 skip regex
RDMA/mad: Improve handling of timed out WRs of mad agent
PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
RDMA/rtrs-srv: Avoid null pointer deref during path establishment
clk: bcm: bcm53573: fix OF node leak in init
PCI: Add ACS quirk for Qualcomm SA8775P
i2c: i801: Use a different adapter-name for IDF adapters
PCI: Mark Creative Labs EMU20k2 INTx masking as broken
ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
usb: chipidea: udc: enable suspend interrupt after usb reset
usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
comedi: ni_routing: tools: Check when the file could not be opened
virtio_pmem: Check device status before requesting flush
tools/iio: Add memory allocation failure check for trigger_name
driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
drm/amd/display: Check null pointer before dereferencing se
fbdev: sisfb: Fix strbuf array overflow
RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
NFSD: Mark filecache "down" if init fails
ice: fix VLAN replay after reset
SUNRPC: Fix integer overflow in decode_rc_list()
NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
net: phy: dp83869: fix memory corruption when enabling fiber
tcp: fix to allow timestamp undo if no retransmits were sent
tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
netfilter: br_netfilter: fix panic with metadata_dst skb
Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
net: phy: bcm84881: Fix some error handling paths
thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
thermal: intel: int340x: processor: Fix warning during module unload
net: dsa: b53: fix jumbo frame mtu check
net: dsa: b53: fix max MTU for 1g switches
net: dsa: b53: fix max MTU for BCM5325/BCM5365
net: dsa: b53: allow lower MTUs on BCM5325/5365
net: dsa: b53: fix jumbo frames on 10/100 ports
gpio: aspeed: Add the flush write to ensure the write complete.
gpio: aspeed: Use devm_clk api to manage clock source
ice: Fix netif_is_ice() in Safe Mode
i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
igb: Do not bring the device up after non-fatal error
net/sched: accept TCA_STAB only for root qdisc
net: ibm: emac: mal: fix wrong goto
sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
netfilter: xtables: avoid NFPROTO_UNSPEC where needed
net: Add l3mdev index to flow struct and avoid oif reset for port devices
netfilter: rpfilter/fib: Populate flowic_l3mdev field
netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
netfilter: fib: check correct rtable in vrf setups
net: rtnetlink: add msg kind names
rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
mctp: Handle error of rtnl_register_module().
ppp: fix ppp_async_encode() illegal access
slip: make slhc_remember() more robust against malicious packets
RDMA/hns: Fix UAF for cq async event
x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
hwmon: (tmp513) Add missing dependency on REGMAP_I2C
hwmon: (adm9240) Add missing dependency on REGMAP_I2C
hwmon: (adt7470) Add missing dependency on REGMAP_I2C
HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
resource: fix region_intersects() vs add_memory_driver_managed()
HID: plantronics: Workaround for an unexcepted opposite volume key
Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
usb: dwc3: core: Stop processing of pending events if controller is halted
usb: xhci: Fix problem with xhci resume from suspend
usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
drm/v3d: Stop the active perfmon before being destroyed
net: explicitly clear the sk pointer, when pf->create fails
net: Fix an unsafe loop on the list
net: dsa: lan9303: ensure chip reset and wait for READY status
mptcp: pm: do not remove closing subflows
nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
kthread: unpark only parked kthread
block, bfq: fix uaf for accessing waker_bfqq after splitting
i2c: smbus: Check for parent device before dereference
net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
net: Handle l3mdev in ip_tunnel_init_flow
net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
net: vrf: determine the dst using the original ifindex for multicast
netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
ext4: fix warning in ext4_dio_write_end_io()
net: axienet: start napi before enabling Rx/Tx
selftests: net: more strict check in net_helper
net: xilinx: axienet: Schedule NAPI in two steps
Linux 5.15.168
UBUNTU: Upstream stable to v5.15.168
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Koichiro Den (koichiroden)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Koichiro Den (koichiroden)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.168 upstream stable release
from git://git.kernel.org/
-
+ parisc: Fix 64-bit userspace syscall path
+ parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
+ of/irq: Support #msi-cells=<0> in of_msi_get_domain
+ drm: omapdrm: Add missing check for alloc_ordered_workqueue
+ jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
+ jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
+ mm: krealloc: consider spare memory for __GFP_ZERO
+ ocfs2: fix the la space leak when unmounting an ocfs2 volume
+ ocfs2: fix uninit-value in ocfs2_get_block()
+ ocfs2: reserve space for inline xattr before attaching reflink tree
+ ocfs2: cancel dqi_sync_work before freeing oinfo
+ ocfs2: remove unreasonable unlock in ocfs2_read_blocks
+ ocfs2: fix null-ptr-deref when journal load failed.
+ ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
+ usbnet: ipheth: fix carrier detection in modes 1 and 4
+ net: ethernet: use ip_hdrlen() instead of bit shift
+ net: phy: vitesse: repair vsc73xx autonegotiation
+ powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
+ btrfs: update target inode's ctime on unlink
+ Input: ads7846 - ratelimit the spi_sync error message
+ Input: synaptics - enable SMBus for HP Elitebook 840 G2
+ HID: multitouch: Add support for GT7868Q
+ scripts: kconfig: merge_config: config files: add a trailing newline
+ platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
+ drm/msm/adreno: Fix error return if missing firmware-name
+ Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
+ NFSv4: Fix clearing of layout segments in layoutreturn
+ NFS: Avoid unnecessary rescanning of the per-server delegation list
+ platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
+ platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
+ mptcp: pm: Fix uaf in __timer_delete_sync
+ arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
+ minmax: reduce min/max macro expansion in atomisp driver
+ net: tighten bad gso csum offset check in virtio_net_hdr
+ mm: avoid leaving partial pfn mappings around in error case
+ fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
+ arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
+ eeprom: digsy_mtc: Fix 93xx46 driver probe failure
+ selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
+ hwmon: (pmbus) Introduce and use write_byte_data callback
+ hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
+ ice: fix accounting for filters shared by multiple VSIs
+ igb: Always call igb_xdp_ring_update_tail() under Tx lock
+ net/mlx5e: Add missing link modes to ptys2ethtool_map
+ net/mlx5: Explicitly set scheduling element and TSAR type
+ net/mlx5: Add support to create match definer
+ net/mlx5: Add IFC bits and enums for flow meter
+ net/mlx5: Add missing masks and QoS bit masks for scheduling elements
+ fou: fix initialization of grc
+ octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
+ octeontx2-af: Modify SMQ flush sequence to drop packets
+ net: ftgmac100: Enable TX interrupt to avoid TX timeout
+ netfilter: nft_socket: fix sk refcount leaks
+ net: dpaa: Pad packets to ETH_ZLEN
+ spi: nxp-fspi: fix the KASAN report out-of-bounds bug
+ soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
+ dma-buf: heaps: Fix off-by-one in CMA heap fault handler
+ ASoC: meson: axg-card: fix 'use-after-free'
+ ASoC: allow module autoloading for table db1200_pids
+ ALSA: hda/realtek - Fixed ALC256 headphone no sound
+ ALSA: hda/realtek - FIxed ALC285 headphone no sound
+ scsi: lpfc: Fix overflow build issue
+ pinctrl: at91: make it work with current gpiolib
+ microblaze: don't treat zero reserved memory regions as error
+ net: ftgmac100: Ensure tx descriptor updates are visible
+ wifi: iwlwifi: lower message level for FW buffer destination
+ wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
+ wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
+ wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
+ wifi: iwlwifi: clear trans->state earlier upon error
+ ASoC: intel: fix module autoloading
+ ASoC: tda7419: fix module autoloading
+ spi: spidev: Add an entry for elgin,jg10309-01
+ drm: komeda: Fix an issue related to normalized zpos
+ spi: bcm63xx: Enable module autoloading
+ x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
+ spi: spidev: Add missing spi_device_id for jg10309-01
+ ocfs2: add bounds checking to ocfs2_xattr_find_entry()
+ ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
+ cgroup: Make operations on the cgroup root_list RCU safe
+ Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
+ gpio: prevent potential speculation leaks in gpio_device_get_desc()
+ gpiolib: cdev: Ignore reconfiguration without direction
+ cgroup: Move rcu_head up near the top of cgroup_root
+ USB: serial: pl2303: add device id for Macrosilicon MS3020
+ USB: usbtmc: prevent kernel-usb-infoleak
+ EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR
+ EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw
+ EDAC/synopsys: Re-enable the error interrupts on v3 hw
+ EDAC/synopsys: Fix ECC status and IRQ control race condition
+ EDAC/synopsys: Fix error injection on Zynq UltraScale+
+ wifi: rtw88: always wait for both firmware loading attempts
+ crypto: xor - fix template benchmarking
+ ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
+ wifi: ath9k: fix parameter check in ath9k_init_debug()
+ wifi: ath9k: Remove error checks when creating debugfs entries
+ net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
+ wifi: rtw88: remove CPT execution branch never used
+ fs: explicitly unregister per-superblock BDIs
+ mount: warn only once about timestamp range expiration
+ fs/namespace: fnic: Switch to use %ptTd
+ mount: handle OOM on mnt_warn_timestamp_expiry
+ wifi: iwlwifi: mvm: increase the time between ranging measurements
+ padata: Honor the caller's alignment in case of chunk_size 0
+ can: j1939: use correct function name in comment
+ ACPI: CPPC: Fix MASK_VAL() usage
+ netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
+ netfilter: nf_tables: reject element expiration with no timeout
+ netfilter: nf_tables: reject expiration higher than timeout
+ netfilter: nf_tables: remove annotation to access set timeout while holding lock
+ cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
+ x86/sgx: Fix deadlock in SGX NUMA node search
+ wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
+ wifi: mt76: mt7915: fix rx filter setting for bfee functionality
+ wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
+ wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
+ wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
+ sock_map: Add a cond_resched() in sock_hash_free()
+ can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
+ can: m_can: m_can_close(): stop clocks after device has been shut down
+ Bluetooth: btusb: Fix not handling ZPL/short-transfer
+ bareudp: Pull inner IP header in bareudp_udp_encap_recv().
+ net: geneve: support IPv4/IPv6 as inner protocol
+ geneve: Fix incorrect inner network header offset when innerprotoinherit is set
+ bareudp: Pull inner IP header on xmit.
+ net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
+ r8169: disable ALDPS per default for RTL8125
+ net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
+ net: tipc: avoid possible garbage value
+ block, bfq: fix possible UAF for bfqq->bic with merge chain
+ block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
+ block, bfq: don't break merge chain in bfq_split_bfqq()
+ block: print symbolic error name instead of error code
+ block: fix potential invalid pointer dereference in blk_add_partition
+ spi: ppc4xx: handle irq_of_parse_and_map() errors
+ spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
+ arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
+ ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
+ ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
+ ARM: versatile: fix OF node leak in CPUs prepare
+ reset: berlin: fix OF node leak in probe() error path
+ reset: k210: fix OF node leak in probe() error path
+ clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
+ m68k: Fix kernel_clone_args.flags in m68k_clone()
+ hwmon: (max16065) Fix overflows seen when writing limits
+ i2c: Add i2c_get_match_data()
+ hwmon: (max16065) Remove use of i2c_match_id()
+ hwmon: (max16065) Fix alarm attributes
+ mtd: slram: insert break after errors in parsing the map
+ hwmon: (ntc_thermistor) fix module autoloading
+ power: supply: axp20x_battery: Remove design from min and max voltage
+ power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
+ fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
+ mtd: powernv: Add check devm_kasprintf() returned value
+ pmdomain: core: Harden inter-column space in debug summary
+ drm/stm: Fix an error handling path in stm_drm_platform_probe()
+ drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
+ drm/amdgpu: Replace one-element array with flexible-array member
+ drm/amdgpu: properly handle vbios fake edid sizing
+ drm/radeon: Replace one-element array with flexible-array member
+ drm/radeon: properly handle vbios fake edid sizing
+ scsi: NCR5380: Add SCp members to struct NCR5380_cmd
+ scsi: NCR5380: Check for phase match during PDMA fixup
+ drm/rockchip: vop: Allow 4096px width scaling
+ drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
+ drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
+ drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
+ scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
+ jfs: fix out-of-bounds in dbNextAG() and diAlloc()
+ drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
+ powerpc/32: Remove the 'nobats' kernel parameter
+ powerpc/32: Remove 'noltlbs' kernel parameter
+ powerpc/8xx: Fix initial memory mapping
+ powerpc/8xx: Fix kernel vs user address comparison
+ drm/msm: Fix incorrect file name output in adreno_request_fw()
+ drm/msm/a5xx: disable preemption in submits by default
+ drm/msm/a5xx: properly clear preemption records on resume
+ drm/msm/a5xx: fix races in preemption evaluation stage
+ drm/msm: Drop priv->lastctx
+ drm/msm/a5xx: workaround early ring-buffer emptiness check
+ ipmi: docs: don't advertise deprecated sysfs entries
+ drm/msm: fix %s null argument error
+ drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
+ xen: use correct end address of kernel for conflict checking
+ xen/swiotlb: add alignment check for dma buffers
+ tpm: Clean up TPM space after command failure
+ selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
+ selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
+ selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
+ selftests/bpf: Fix compiling kfree_skb.c with musl-libc
+ selftests/bpf: Fix compiling flow_dissector.c with musl-libc
+ selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
+ selftests/bpf: Fix compiling core_reloc.c with musl-libc
+ selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
+ selftests/bpf: Fix error compiling test_lru_map.c
+ selftests/bpf: Fix C++ compile error from missing _Bool type
+ xz: cleanup CRC32 edits from 2018
+ kthread: fix task state in kthread worker if being frozen
+ ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
+ smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
+ ext4: avoid buffer_head leak in ext4_mark_inode_used()
+ ext4: avoid potential buffer_head leak in __ext4_new_inode()
+ ext4: avoid negative min_clusters in find_group_orlov()
+ ext4: return error on ext4_find_inline_entry
+ ext4: avoid OOB when system.data xattr changes underneath the filesystem
+ nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
+ nilfs2: determine empty node blocks as corrupted
+ nilfs2: fix potential oob read in nilfs_btree_check_delete()
+ bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
+ perf mem: Free the allocated sort string, fixing a leak
+ perf sched timehist: Fix missing free of session in perf_sched__timehist()
+ perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
+ perf time-utils: Fix 32-bit nsec parsing
+ clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
+ clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
+ clk: imx: imx8qxp: Parent should be initialized earlier than the clock
+ remoteproc: imx_rproc: Correct ddr alias for i.MX8M
+ remoteproc: imx_rproc: Initialize workqueue earlier
+ clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
+ Input: ilitek_ts_i2c - avoid wrong input subsystem sync
+ Input: ilitek_ts_i2c - add report id message validation
+ drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
+ drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
+ PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
+ PCI: xilinx-nwl: Fix register misspelling
+ PCI: xilinx-nwl: Clean up clock on probe failure/removal
+ RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
+ pinctrl: single: fix missing error code in pcs_probe()
+ RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
+ RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
+ clk: ti: dra7-atl: Fix leak of of_nodes
+ nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
+ nfsd: fix refcount leak when file is unhashed after being found
+ pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
+ pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
+ IB/core: Fix ib_cache_setup_one error flow cleanup
+ watchdog: imx_sc_wdt: Don't disable WDT in suspend
+ RDMA/hns: Don't modify rq next block addr in HIP09 QPC
+ RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
+ RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
+ RDMA/hns: Remove unused abnormal interrupt of type RAS
+ RDMA/hns: Fix the wrong type of return value of the interrupt handler
+ RDMA/hns: Refactor the abnormal interrupt handler function
+ RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
+ RDMA/hns: Optimize hem allocation performance
+ riscv: Fix fp alignment bug in perf_callchain_user()
+ RDMA/cxgb4: Added NULL check for lookup_atid
+ RDMA/irdma: fix error message in irdma_modify_qp_roce()
+ ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
+ ntb_perf: Fix printk format
+ nfsd: call cache_put if xdr_reserve_space returns NULL
+ nfsd: return -EINVAL when namelen is 0
+ f2fs: fix typo
+ f2fs: fix to update i_ctime in __f2fs_setxattr()
+ f2fs: remove unneeded check condition in __f2fs_setxattr()
+ f2fs: reduce expensive checkpoint trigger frequency
+ f2fs: optimize error handling in redirty_blocks
+ f2fs: fix to wait page writeback before setting gcing flag
+ f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy
+ f2fs: clean up w/ dotdot_name
+ f2fs: get rid of online repaire on corrupted directory
+ spi: lpspi: Silence error message upon deferred probe
+ spi: lpspi: release requested DMA channels
+ spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
+ iio: adc: ad7606: fix oversampling gpio array
+ iio: adc: ad7606: fix standby gpio state to match the documentation
+ coresight: tmc: sg: Do not leak sg_table
+ interconnect: qcom: sm8250: Enable sync_state
+ vdpa: Add eventfd for the vdpa callback
+ vhost_vdpa: assign irq bypass producer token correctly
+ Revert "dm: requeue IO if mapping table not yet available"
+ net: axienet: Clean up device used for DMA calls
+ net: axienet: Clean up DMA start/stop and error handling
+ net: axienet: don't set IRQ timer when IRQ delay not used
+ net: axienet: implement NAPI and GRO receive
+ net: axienet: reduce default RX interrupt threshold to 1
+ net: axienet: add coalesce timer ethtool configuration
+ net: axienet: Be more careful about updating tx_bd_tail
+ net: axienet: Use NAPI for TX completion path
+ net: axienet: Switch to 64-bit RX/TX statistics
+ net: xilinx: axienet: Fix packet counting
+ netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
+ net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
+ net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
+ tcp: check skb is non-NULL in tcp_rto_delta_us()
+ net: qrtr: Update packets cloning when broadcasting
+ bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
+ netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
+ netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
+ drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
+ Input: goodix - use the new soc_intel_is_byt() helper
+ powercap: RAPL: fix invalid initialization for pl4_supported field
+ x86/mm: Switch to new Intel CPU model defines
+ vfio/pci: fix potential memory leak in vfio_intx_enable()
+ selinux,smack: don't bypass permissions check in inode_setsecctx hook
+ Remove *.orig pattern from .gitignore
+ PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
+ ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
+ soc: versatile: integrator: fix OF node leak in probe() error path
+ Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
+ Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
+ Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
+ Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
+ drm/amd/display: Round calculated vtotal
+ drm/amd/display: Validate backlight caps are sane
+ scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
+ scsi: mac_scsi: Refactor polling loop
+ scsi: mac_scsi: Disallow bus errors during PDMA send
+ usbnet: fix cyclical race on disconnect with work queue
+ USB: appledisplay: close race between probe and completion handler
+ USB: misc: cypress_cy7c63: check for short transfer
+ USB: class: CDC-ACM: fix race between get_serial and set_serial
+ usb: cdnsp: Fix incorrect usb_request status
+ usb: dwc2: drd: fix clock gating on USB role switch
+ bus: integrator-lm: fix OF node leak in probe()
+ firmware_loader: Block path traversal
+ tty: rp2: Fix reset with non forgiving PCIe host bridges
+ xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
+ crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
+ drbd: Fix atomicity violation in drbd_uuid_set_bm()
+ drbd: Add NULL check for net_conf to prevent dereference in state validation
+ ACPI: sysfs: validate return type of _STR method
+ ACPI: resource: Add another DMI match for the TongFang GMxXGxx
+ efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
+ perf/x86/intel/pt: Fix sampling synchronization
+ wifi: rtw88: 8822c: Fix reported RX band width
+ wifi: mt76: mt7615: check devm_kasprintf() returned value
+ debugobjects: Fix conditions in fill_pool()
+ f2fs: prevent possible int overflow in dir_block_index()
+ f2fs: avoid potential int overflow in sanity_check_area_boundary()
+ hwrng: mtk - Use devm_pm_runtime_enable
+ hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
+ hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
+ arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
+ arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
+ vfs: fix race between evice_inodes() and find_inode()&iput()
+ fs: Fix file_set_fowner LSM hook inconsistencies
+ nfs: fix memory leak in error path of nfs4_do_reclaim
+ EDAC/igen6: Fix conversion of system address to physical memory address
+ padata: use integer wrap around to prevent deadlock on seq_nr overflow
+ soc: versatile: realview: fix memory leak during device remove
+ soc: versatile: realview: fix soc_dev leak during device remove
+ usb: yurex: Replace snprintf() with the safer scnprintf() variant
+ USB: misc: yurex: fix race between read and write
+ xhci: fix event ring segment table related masks and variables in header
+ xhci: remove xhci_test_trb_in_td_math early development check
+ xhci: Refactor interrupter code for initial multi interrupter support.
+ xhci: Preserve RsvdP bits in ERSTBA register correctly
+ xhci: Add a quirk for writing ERST in high-low order
+ usb: xhci: fix loss of data on Cadence xHC
+ pps: remove usage of the deprecated ida_simple_xx() API
+ pps: add an error check in parport_attach
+ x86/idtentry: Incorporate definitions/declarations of the FRED entries
+ x86/entry: Remove unwanted instrumentation in common_interrupt()
+ bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
+ lockdep: fix deadlock issue between lockdep and rcu
+ mm: only enforce minimum stack gap size if it's sensible
+ i2c: aspeed: Update the stop sw state when the bus recovery occurs
+ i2c: isch: Add missed 'else'
+ usb: yurex: Fix inconsistent locking bug in yurex_read()
+ spi: lpspi: Simplify some error message
+ static_call: Handle module init failure correctly in static_call_del_module()
+ static_call: Replace pointless WARN_ON() in static_call_module_notify()
+ mailbox: rockchip: fix a typo in module autoloading
+ mailbox: bcm2835: Fix timeout during suspend mode
+ ceph: remove the incorrect Fw reference check when dirtying pages
+ ieee802154: Fix build error
+ net/mlx5: Fix error path in multi-packet WQE transmit
+ net/mlx5: Added cond_resched() to crdump collection
+ net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
+ netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
+ net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
+ netfilter: nf_tables: prevent nf_skb_duplicated corruption
+ Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
+ net: ethernet: lantiq_etop: fix memory disclosure
+ net: avoid potential underflow in qdisc_pkt_len_init() with UFO
+ net: add more sanity checks to qdisc_pkt_len_init()
+ stmmac_pci: Fix underflow size in stmmac_rx
+ net: stmmac: Disable automatic FCS/Pad stripping
+ net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
+ ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
+ ppp: do not assume bh is held in ppp_channel_bridge_input()
+ sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
+ i2c: xiic: Fix broken locking on tx_msg
+ i2c: xiic: Switch from waitqueue to completion
+ i2c: xiic: Fix RX IRQ busy check
+ i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
+ i2c: xiic: improve error message when transfer fails to start
+ i2c: xiic: Try re-initialization on bus busy timeout
+ media: usbtv: Remove useless locks in usbtv_video_free()
+ ALSA: mixer_oss: Remove some incorrect kfree_const() usages
+ ALSA: hda/realtek: Fix the push button function for the ALC257
+ ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
+ ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
+ ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
+ f2fs: Require FMODE_WRITE for atomic write ioctls
+ wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
+ wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
+ ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
+ net/xen-netback: prevent UAF in xenvif_flush_hash()
+ net: hisilicon: hip04: fix OF node leak in probe()
+ net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
+ net: hisilicon: hns_mdio: fix OF node leak in probe()
+ ACPI: PAD: fix crash in exit_round_robin()
+ ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
+ ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
+ net: sched: consistently use rcu_replace_pointer() in taprio_change()
+ blk_iocost: fix more out of bound shifts
+ nvme-pci: qdepth 1 quirk
+ wifi: ath11k: fix array out-of-bound access in SoC stats
+ wifi: rtw88: select WANT_DEV_COREDUMP
+ ACPI: EC: Do not release locks during operation region accesses
+ ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
+ tipc: guard against string buffer overrun
+ net: mvpp2: Increase size of queue_name buffer
+ ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
+ ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
+ net: atlantic: Avoid warning about potential string truncation
+ tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
+ ACPICA: iasl: handle empty connection_node
+ proc: add config & param to block forcing mem writes
+ UBUNTU: [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
+ wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
+ wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
+ nfp: Use IRQF_NO_AUTOEN flag in request_irq()
+ signal: Replace BUG_ON()s
+ ALSA: usb-audio: Add input value sanity checks for standard types
+ x86/ioapic: Handle allocation failures gracefully
+ ALSA: usb-audio: Define macros for quirk table entries
+ ALSA: usb-audio: Add logitech Audio profile quirk
+ tools/x86/kcpuid: Protect against faulty "max subleaf" values
+ ALSA: asihpi: Fix potential OOB array access
+ ALSA: hdsp: Break infinite MIDI input flush loop
+ x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
+ fbdev: pxafb: Fix possible use after free in pxafb_task()
+ rcuscale: Provide clear error when async specified without primitives
+ iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
+ power: reset: brcmstb: Do not go into infinite loop if reset fails
+ iommu/vt-d: Always reserve a domain ID for identity setup
+ iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
+ drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
+ ata: sata_sil: Rename sil_blacklist to sil_quirks
+ drm/amd/display: Check null pointers before using dc->clk_mgr
+ jfs: UBSAN: shift-out-of-bounds in dbFindBits
+ jfs: Fix uaf in dbFreeBits
+ jfs: check if leafidx greater than num leaves per dmap tree
+ scsi: smartpqi: correct stream detection
+ jfs: Fix uninit-value access of new_ea in ea_buffer
+ drm/amdgpu: add raven1 gfxoff quirk
+ drm/amdgpu: enable gfxoff quirk on HP 705G4
+ HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
+ platform/x86: touchscreen_dmi: add nanote-next quirk
+ drm/amd/display: Check stream before comparing them
+ drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
+ drm/amd/display: Fix index out of bounds in degamma hardware format translation
+ drm/amd/display: Fix index out of bounds in DCN30 color transformation
+ drm/amd/display: Initialize get_bytes_per_element's default to 1
+ drm/printer: Allow NULL data in devcoredump printer
+ scsi: aacraid: Rearrange order of struct aac_srb_unit
+ drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
+ drm/amd/pm: ensure the fw_info is not null before using it
+ of/irq: Refer to actual buffer size in of_irq_parse_one()
+ ext4: ext4_search_dir should return a proper error
+ ext4: avoid use-after-free in ext4_ext_show_leaf()
+ ext4: fix i_data_sem unlock order in ext4_ind_migrate()
+ blk-integrity: use sysfs_emit
+ blk-integrity: convert to struct device_attribute
+ blk-integrity: register sysfs attributes on struct device
+ usb: typec: tcpm: Check for port partner validity before consuming it
+ spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
+ spi: s3c64xx: fix timeout counters in flush_fifo
+ selftests: breakpoints: use remaining time to check if suspend succeed
+ selftests: vDSO: fix vDSO name for powerpc
+ selftests: vDSO: fix vdso_config for powerpc
+ selftests: vDSO: fix vDSO symbols lookup for powerpc64
+ selftests/mm: fix charge_reserved_hugetlb.sh test
+ selftests: vDSO: fix ELF hash table entry size for s390x
+ selftests: vDSO: fix vdso_config for s390
+ platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
+ i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
+ i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
+ i2c: xiic: Wait for TX empty to avoid missed TX NAKs
+ firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
+ spi: bcm63xx: Fix module autoloading
+ power: supply: hwmon: Fix missing temp1_max_alarm attribute
+ perf/core: Fix small negative period being ignored
+ parisc: Fix itlb miss handler for 64-bit programs
+ drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
+ ALSA: core: add isascii() check to card ID generator
+ ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
+ ALSA: usb-audio: Add native DSD support for Luxman D-08u
+ ALSA: line6: add hw monitor volume control to POD HD500X
+ ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
+ ext4: no need to continue when the number of entries is 1
+ ext4: correct encrypted dentry name hash when not casefolded
+ ext4: fix slab-use-after-free in ext4_split_extent_at()
+ ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
+ ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
+ ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
+ ext4: aovid use-after-free in ext4_ext_insert_extent()
+ ext4: fix double brelse() the buffer of the extents path
+ ext4: update orig_path in ext4_find_extent()
+ ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
+ ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
+ ext4: fix fast commit inode enqueueing during a full journal commit
+ ext4: use handle to mark fc as ineligible in __track_dentry_update()
+ ext4: mark fc as ineligible using an handle in ext4_xattr_set()
+ riscv: define ILLEGAL_POINTER_VALUE for 64bit
+ exfat: fix memory leak in exfat_load_bitmap()
+ perf hist: Update hist symbol when updating maps
+ nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
+ nfsd: map the EBADMSG to nfserr_io to avoid warning
+ NFSD: Fix NFSv4's PUTPUBFH operation
+ aoe: fix the potential use-after-free problem in more places
+ clk: rockchip: fix error for unknown clocks
+ clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
+ media: sun4i_csi: Implement link validate for sun4i_csi subdev
+ media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
+ clk: qcom: clk-rpmh: Fix overflow in BCM vote
+ clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
+ media: venus: fix use after free bug in venus_remove due to race condition
+ clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
+ clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
+ iio: magnetometer: ak8975: Fix reading for ak099xx sensors
+ tomoyo: fallback to realpath if symlink's pathname does not exist
+ net: stmmac: Fix zero-division error when disabling tc cbs
+ rtc: at91sam9: fix OF node leak in probe() error path
+ Input: adp5589-keys - fix NULL pointer dereference
+ Input: adp5589-keys - fix adp5589_gpio_get_value()
+ ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
+ ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
+ btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
+ btrfs: wait for fixup workers before stopping cleaner kthread during umount
+ gpio: davinci: fix lazy disable
+ tracing/hwlat: Fix a race during cpuhp processing
+ tracing/timerlat: Fix a race during cpuhp processing
+ close_range(): fix the logics in descriptor table trimming
+ drm/sched: Add locking to drm_sched_entity_modify_sched
+ drm/amd/display: Fix system hang while resume with TBT monitor
+ kconfig: qconf: fix buffer overflow in debug links
+ device property: Add fwnode_iomap()
+ device property: Add fwnode_irq_get_byname
+ i2c: smbus: Use device_*() functions instead of of_*()
+ i2c: create debugfs entry per adapter
+ i2c: core: Lock address during client device instantiation
+ i2c: xiic: Use devm_clk_get_enabled()
+ i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
+ spi: bcm63xx: Fix missing pm_runtime_disable()
+ ext4: properly sync file size update after O_SYNC direct IO
+ ext4: dax: fix overflowing extents beyond inode size when partially writing
+ arm64: Add Cortex-715 CPU part definition
+ arm64: cputype: Add Neoverse-N3 definitions
+ arm64: errata: Expand speculative SSBS workaround once more
+ uprobes: fix kernel info leak via "[uprobes]" vma
+ drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
+ build-id: require program headers to be right after ELF header
+ lib/buildid: harden build ID parsing logic
+ drm/rockchip: define gamma registers for RK3399
+ drm/rockchip: support gamma control on RK3399
+ drm/rockchip: vop: clear DMA stop bit on RK3066
+ media: i2c: imx335: Enable regulator supplies
+ media: imx335: Fix reset-gpio handling
+ dt-bindings: clock: qcom: Add missing UFS QREF clocks
+ dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
+ r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
+ r8169: add tally counter fields added with RTL8125
+ clk: qcom: gcc-sc8180x: Add GPLL9 support
+ ACPI: battery: Simplify battery hook locking
+ ACPI: battery: Fix possible crash when unregistering a battery hook
+ Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
+ ext4: fix inode tree inconsistency caused by ENOMEM
+ 9p: add missing locking around taking dentry fid list
+ vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
+ perf report: Fix segfault when 'sym' sort key is not used
+ ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
+ unicode: Don't special case ignorable code points
+ net: ethernet: cortina: Drop TSO support
+ tracing: Remove precision vsnprintf() check from print event
+ drm/crtc: fix uninitialized variable use even harder
+ tracing: Have saved_cmdlines arrays all in one allocation
+ selftests/net: give more time to udpgro bg processes to complete startup
+ selftests/net: synchronize udpgro tests' tx and rx connection
+ selftests: net: Remove executable bits from library scripts
+ fs/ntfs3: Refactor enum_rstbl to suppress static checker
+ virtio_console: fix misc probe bugs
+ Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
+ bpf: Check percpu map value size first
+ s390/facility: Disable compile time optimization for decompressor code
+ s390/mm: Add cond_resched() to cmm_alloc/free_pages()
+ bpf, x64: Fix a jit convergence issue
+ ext4: don't set SB_RDONLY after filesystem errors
+ ext4: nested locking for xattr inode
+ s390/cpum_sf: Remove WARN_ON_ONCE statements
+ ktest.pl: Avoid false positives with grub2 skip regex
+ RDMA/mad: Improve handling of timed out WRs of mad agent
+ PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
+ RDMA/rtrs-srv: Avoid null pointer deref during path establishment
+ clk: bcm: bcm53573: fix OF node leak in init
+ PCI: Add ACS quirk for Qualcomm SA8775P
+ i2c: i801: Use a different adapter-name for IDF adapters
+ PCI: Mark Creative Labs EMU20k2 INTx masking as broken
+ ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
+ media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
+ remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
+ clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
+ usb: chipidea: udc: enable suspend interrupt after usb reset
+ usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
+ comedi: ni_routing: tools: Check when the file could not be opened
+ virtio_pmem: Check device status before requesting flush
+ tools/iio: Add memory allocation failure check for trigger_name
+ driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
+ drm/amd/display: Check null pointer before dereferencing se
+ fbdev: sisfb: Fix strbuf array overflow
+ RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
+ NFSD: Mark filecache "down" if init fails
+ ice: fix VLAN replay after reset
+ SUNRPC: Fix integer overflow in decode_rc_list()
+ NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
+ net: phy: dp83869: fix memory corruption when enabling fiber
+ tcp: fix to allow timestamp undo if no retransmits were sent
+ tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
+ netfilter: br_netfilter: fix panic with metadata_dst skb
+ Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
+ net: phy: bcm84881: Fix some error handling paths
+ thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
+ thermal: intel: int340x: processor: Fix warning during module unload
+ net: dsa: b53: fix jumbo frame mtu check
+ net: dsa: b53: fix max MTU for 1g switches
+ net: dsa: b53: fix max MTU for BCM5325/BCM5365
+ net: dsa: b53: allow lower MTUs on BCM5325/5365
+ net: dsa: b53: fix jumbo frames on 10/100 ports
+ gpio: aspeed: Add the flush write to ensure the write complete.
+ gpio: aspeed: Use devm_clk api to manage clock source
+ ice: Fix netif_is_ice() in Safe Mode
+ i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
+ igb: Do not bring the device up after non-fatal error
+ net/sched: accept TCA_STAB only for root qdisc
+ net: ibm: emac: mal: fix wrong goto
+ sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
+ netfilter: xtables: avoid NFPROTO_UNSPEC where needed
+ net: Add l3mdev index to flow struct and avoid oif reset for port devices
+ netfilter: rpfilter/fib: Populate flowic_l3mdev field
+ netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
+ netfilter: fib: check correct rtable in vrf setups
+ net: rtnetlink: add msg kind names
+ rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
+ mctp: Handle error of rtnl_register_module().
+ ppp: fix ppp_async_encode() illegal access
+ slip: make slhc_remember() more robust against malicious packets
+ RDMA/hns: Fix UAF for cq async event
+ x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
+ hwmon: (tmp513) Add missing dependency on REGMAP_I2C
+ hwmon: (adm9240) Add missing dependency on REGMAP_I2C
+ hwmon: (adt7470) Add missing dependency on REGMAP_I2C
+ HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
+ resource: fix region_intersects() vs add_memory_driver_managed()
+ HID: plantronics: Workaround for an unexcepted opposite volume key
+ Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
+ usb: dwc3: core: Stop processing of pending events if controller is halted
+ usb: xhci: Fix problem with xhci resume from suspend
+ usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
+ hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
+ drm/v3d: Stop the active perfmon before being destroyed
+ net: explicitly clear the sk pointer, when pf->create fails
+ net: Fix an unsafe loop on the list
+ net: dsa: lan9303: ensure chip reset and wait for READY status
+ mptcp: pm: do not remove closing subflows
+ nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
+ kthread: unpark only parked kthread
+ block, bfq: fix uaf for accessing waker_bfqq after splitting
+ i2c: smbus: Check for parent device before dereference
+ net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
+ xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
+ net: Handle l3mdev in ip_tunnel_init_flow
+ net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
+ net: vrf: determine the dst using the original ifindex for multicast
+ netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
+ ext4: fix warning in ext4_dio_write_end_io()
+ net: axienet: start napi before enabling Rx/Tx
+ selftests: net: more strict check in net_helper
+ net: xilinx: axienet: Schedule NAPI in two steps
Linux 5.15.168
- net: xilinx: axienet: Schedule NAPI in two steps
- selftests: net: more strict check in net_helper
- net: axienet: start napi before enabling Rx/Tx
- ext4: fix warning in ext4_dio_write_end_io()
- netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
- net: vrf: determine the dst using the original ifindex for multicast
- net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
- net: Handle l3mdev in ip_tunnel_init_flow
- xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
- net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
- i2c: smbus: Check for parent device before dereference
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- kthread: unpark only parked kthread
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf->create fails
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- resource: fix region_intersects() vs add_memory_driver_managed()
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- RDMA/hns: Fix UAF for cq async event
- slip: make slhc_remember() more robust against malicious packets
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- net: rtnetlink: add msg kind names
- netfilter: fib: check correct rtable in vrf setups
- netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
- netfilter: rpfilter/fib: Populate flowic_l3mdev field
- net: Add l3mdev index to flow struct and avoid oif reset for port devices
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- igb: Do not bring the device up after non-fatal error
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- ice: Fix netif_is_ice() in Safe Mode
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- netfilter: br_netfilter: fix panic with metadata_dst skb
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- NFSD: Mark filecache "down" if init fails
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- fbdev: sisfb: Fix strbuf array overflow
- drm/amd/display: Check null pointer before dereferencing se
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- ext4: don't set SB_RDONLY after filesystem errors
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- selftests: net: Remove executable bits from library scripts
- selftests/net: synchronize udpgro tests' tx and rx connection
- selftests/net: give more time to udpgro bg processes to complete startup
- tracing: Have saved_cmdlines arrays all in one allocation
- drm/crtc: fix uninitialized variable use even harder
- tracing: Remove precision vsnprintf() check from print event
- net: ethernet: cortina: Drop TSO support
- unicode: Don't special case ignorable code points
- ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
- perf report: Fix segfault when 'sym' sort key is not used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- 9p: add missing locking around taking dentry fid list
- ext4: fix inode tree inconsistency caused by ENOMEM
- Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- r8169: add tally counter fields added with RTL8125
- r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- drm/rockchip: vop: clear DMA stop bit on RK3066
- drm/rockchip: support gamma control on RK3399
- drm/rockchip: define gamma registers for RK3399
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- uprobes: fix kernel info leak via "[uprobes]" vma
- arm64: errata: Expand speculative SSBS workaround once more
- arm64: cputype: Add Neoverse-N3 definitions
- arm64: Add Cortex-715 CPU part definition
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- ext4: properly sync file size update after O_SYNC direct IO
- spi: bcm63xx: Fix missing pm_runtime_disable()
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Use devm_clk_get_enabled()
- i2c: core: Lock address during client device instantiation
- i2c: create debugfs entry per adapter
- i2c: smbus: Use device_*() functions instead of of_*()
- device property: Add fwnode_irq_get_byname
- device property: Add fwnode_iomap()
- kconfig: qconf: fix buffer overflow in debug links
- drm/amd/display: Fix system hang while resume with TBT monitor
- drm/sched: Add locking to drm_sched_entity_modify_sched
- close_range(): fix the logics in descriptor table trimming
- tracing/timerlat: Fix a race during cpuhp processing
- tracing/hwlat: Fix a race during cpuhp processing
- gpio: davinci: fix lazy disable
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- Input: adp5589-keys - fix NULL pointer dereference
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- media: venus: fix use after free bug in venus_remove due to race condition
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- clk: rockchip: fix error for unknown clocks
- aoe: fix the potential use-after-free problem in more places
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- exfat: fix memory leak in exfat_load_bitmap()
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: update orig_path in ext4_find_extent()
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: correct encrypted dentry name hash when not casefolded
- ext4: no need to continue when the number of entries is 1
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix module autoloading
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- usb: typec: tcpm: Check for port partner validity before consuming it
- blk-integrity: register sysfs attributes on struct device
- blk-integrity: convert to struct device_attribute
- blk-integrity: use sysfs_emit
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: ext4_search_dir should return a proper error
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Check stream before comparing them
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- jfs: Fix uninit-value access of new_ea in ea_buffer
- scsi: smartpqi: correct stream detection
- jfs: check if leafidx greater than num leaves per dmap tree
- jfs: Fix uaf in dbFreeBits
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Check null pointers before using dc->clk_mgr
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- rcuscale: Provide clear error when async specified without primitives
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- ALSA: hdsp: Break infinite MIDI input flush loop
- ALSA: asihpi: Fix potential OOB array access
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Define macros for quirk table entries
- x86/ioapic: Handle allocation failures gracefully
- ALSA: usb-audio: Add input value sanity checks for standard types
- signal: Replace BUG_ON()s
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
- proc: add config & param to block forcing mem writes
- ACPICA: iasl: handle empty connection_node
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- net: mvpp2: Increase size of queue_name buffer
- tipc: guard against string buffer overrun
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- nvme-pci: qdepth 1 quirk
- blk_iocost: fix more out of bound shifts
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- f2fs: Require FMODE_WRITE for atomic write ioctls
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- media: usbtv: Remove useless locks in usbtv_video_free()
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
- i2c: xiic: Fix RX IRQ busy check
- i2c: xiic: Switch from waitqueue to completion
- i2c: xiic: Fix broken locking on tx_msg
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: stmmac: Disable automatic FCS/Pad stripping
- stmmac_pci: Fix underflow size in stmmac_rx
- net: add more sanity checks to qdisc_pkt_len_init()
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: ethernet: lantiq_etop: fix memory disclosure
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- static_call: Handle module init failure correctly in static_call_del_module()
- spi: lpspi: Simplify some error message
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- xhci: Preserve RsvdP bits in ERSTBA register correctly
- xhci: Refactor interrupter code for initial multi interrupter support.
- xhci: remove xhci_test_trb_in_td_math early development check
- xhci: fix event ring segment table related masks and variables in header
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- EDAC/igen6: Fix conversion of system address to physical memory address
- nfs: fix memory leak in error path of nfs4_do_reclaim
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- usbnet: fix cyclical race on disconnect with work queue
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- Remove *.orig pattern from .gitignore
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- x86/mm: Switch to new Intel CPU model defines
- powercap: RAPL: fix invalid initialization for pl4_supported field
- Input: goodix - use the new soc_intel_is_byt() helper
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- net: xilinx: axienet: Fix packet counting
- net: axienet: Switch to 64-bit RX/TX statistics
- net: axienet: Use NAPI for TX completion path
- net: axienet: Be more careful about updating tx_bd_tail
- net: axienet: add coalesce timer ethtool configuration
- net: axienet: reduce default RX interrupt threshold to 1
- net: axienet: implement NAPI and GRO receive
- net: axienet: don't set IRQ timer when IRQ delay not used
- net: axienet: Clean up DMA start/stop and error handling
- net: axienet: Clean up device used for DMA calls
- Revert "dm: requeue IO if mapping table not yet available"
- vhost_vdpa: assign irq bypass producer token correctly
- vdpa: Add eventfd for the vdpa callback
- interconnect: qcom: sm8250: Enable sync_state
- coresight: tmc: sg: Do not leak sg_table
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: lpspi: release requested DMA channels
- spi: lpspi: Silence error message upon deferred probe
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: optimize error handling in redirty_blocks
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: remove unneeded check condition in __f2fs_setxattr()
- f2fs: fix to update i_ctime in __f2fs_setxattr()
- f2fs: fix typo
- nfsd: return -EINVAL when namelen is 0
- nfsd: call cache_put if xdr_reserve_space returns NULL
- ntb_perf: Fix printk format
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Refactor the abnormal interrupt handler function
- RDMA/hns: Fix the wrong type of return value of the interrupt handler
- RDMA/hns: Remove unused abnormal interrupt of type RAS
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Don't modify rq next block addr in HIP09 QPC
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- perf time-utils: Fix 32-bit nsec parsing
- perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
- perf sched timehist: Fix missing free of session in perf_sched__timehist()
- perf mem: Free the allocated sort string, fixing a leak
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- tpm: Clean up TPM space after command failure
- xen/swiotlb: add alignment check for dma buffers
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm: Drop priv->lastctx
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- powerpc/32: Remove 'noltlbs' kernel parameter
- powerpc/32: Remove the 'nobats' kernel parameter
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: NCR5380: Add SCp members to struct NCR5380_cmd
- drm/radeon: properly handle vbios fake edid sizing
- drm/radeon: Replace one-element array with flexible-array member
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/amdgpu: Replace one-element array with flexible-array member
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- mtd: powernv: Add check devm_kasprintf() returned value
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- i2c: Add i2c_get_match_data()
- hwmon: (max16065) Fix overflows seen when writing limits
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq->bic with merge chain
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- geneve: Fix incorrect inner network header offset when innerprotoinherit is set
- net: geneve: support IPv4/IPv6 as inner protocol
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
- sock_map: Add a cond_resched() in sock_hash_free()
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- x86/sgx: Fix deadlock in SGX NUMA node search
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- ACPI: bus: Avoid using CPPC if not supported by firmware
- can: j1939: use correct function name in comment
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- mount: handle OOM on mnt_warn_timestamp_expiry
- fs/namespace: fnic: Switch to use %ptTd
- mount: warn only once about timestamp range expiration
- fs: explicitly unregister per-superblock BDIs
- wifi: rtw88: remove CPT execution branch never used
- net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: ath9k: fix parameter check in ath9k_init_debug()
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- EDAC/synopsys: Re-enable the error interrupts on v3 hw
- EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw
- EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR
- USB: usbtmc: prevent kernel-usb-infoleak
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- cgroup: Move rcu_head up near the top of cgroup_root
- gpiolib: cdev: Ignore reconfiguration without direction
- inet: inet_defrag: prevent sk release while still in use
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- cgroup: Make operations on the cgroup root_list RCU safe
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()
- spi: spidev: Add missing spi_device_id for jg10309-01
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: tda7419: fix module autoloading
- ASoC: intel: fix module autoloading
- wifi: iwlwifi: clear trans->state earlier upon error
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- net: ftgmac100: Ensure tx descriptor updates are visible
- microblaze: don't treat zero reserved memory regions as error
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table db1200_pids
- ASoC: meson: axg-card: fix 'use-after-free'
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
- fou: fix initialization of grc
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Add IFC bits and enums for flow meter
- net/mlx5: Add support to create match definer
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix accounting for filters shared by multiple VSIs
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
- hwmon: (pmbus) Introduce and use write_byte_data callback
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
- mm: avoid leaving partial pfn mappings around in error case
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- mptcp: pm: Fix uaf in __timer_delete_sync
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Fix 64-bit userspace syscall path
+ UBUNTU: Upstream stable to v5.15.168
--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2086242
Title:
Jammy update: v5.15.168 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.168 upstream stable release
from git://git.kernel.org/
parisc: Fix 64-bit userspace syscall path
parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
of/irq: Support #msi-cells=<0> in of_msi_get_domain
drm: omapdrm: Add missing check for alloc_ordered_workqueue
jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
mm: krealloc: consider spare memory for __GFP_ZERO
ocfs2: fix the la space leak when unmounting an ocfs2 volume
ocfs2: fix uninit-value in ocfs2_get_block()
ocfs2: reserve space for inline xattr before attaching reflink tree
ocfs2: cancel dqi_sync_work before freeing oinfo
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
ocfs2: fix null-ptr-deref when journal load failed.
ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
usbnet: ipheth: fix carrier detection in modes 1 and 4
net: ethernet: use ip_hdrlen() instead of bit shift
net: phy: vitesse: repair vsc73xx autonegotiation
powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
btrfs: update target inode's ctime on unlink
Input: ads7846 - ratelimit the spi_sync error message
Input: synaptics - enable SMBus for HP Elitebook 840 G2
HID: multitouch: Add support for GT7868Q
scripts: kconfig: merge_config: config files: add a trailing newline
platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
drm/msm/adreno: Fix error return if missing firmware-name
Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
NFSv4: Fix clearing of layout segments in layoutreturn
NFS: Avoid unnecessary rescanning of the per-server delegation list
platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
mptcp: pm: Fix uaf in __timer_delete_sync
arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
minmax: reduce min/max macro expansion in atomisp driver
net: tighten bad gso csum offset check in virtio_net_hdr
mm: avoid leaving partial pfn mappings around in error case
fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
eeprom: digsy_mtc: Fix 93xx46 driver probe failure
selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
hwmon: (pmbus) Introduce and use write_byte_data callback
hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
ice: fix accounting for filters shared by multiple VSIs
igb: Always call igb_xdp_ring_update_tail() under Tx lock
net/mlx5e: Add missing link modes to ptys2ethtool_map
net/mlx5: Explicitly set scheduling element and TSAR type
net/mlx5: Add support to create match definer
net/mlx5: Add IFC bits and enums for flow meter
net/mlx5: Add missing masks and QoS bit masks for scheduling elements
fou: fix initialization of grc
octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
octeontx2-af: Modify SMQ flush sequence to drop packets
net: ftgmac100: Enable TX interrupt to avoid TX timeout
netfilter: nft_socket: fix sk refcount leaks
net: dpaa: Pad packets to ETH_ZLEN
spi: nxp-fspi: fix the KASAN report out-of-bounds bug
soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
dma-buf: heaps: Fix off-by-one in CMA heap fault handler
ASoC: meson: axg-card: fix 'use-after-free'
ASoC: allow module autoloading for table db1200_pids
ALSA: hda/realtek - Fixed ALC256 headphone no sound
ALSA: hda/realtek - FIxed ALC285 headphone no sound
scsi: lpfc: Fix overflow build issue
pinctrl: at91: make it work with current gpiolib
microblaze: don't treat zero reserved memory regions as error
net: ftgmac100: Ensure tx descriptor updates are visible
wifi: iwlwifi: lower message level for FW buffer destination
wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
wifi: iwlwifi: clear trans->state earlier upon error
ASoC: intel: fix module autoloading
ASoC: tda7419: fix module autoloading
spi: spidev: Add an entry for elgin,jg10309-01
drm: komeda: Fix an issue related to normalized zpos
spi: bcm63xx: Enable module autoloading
x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
spi: spidev: Add missing spi_device_id for jg10309-01
ocfs2: add bounds checking to ocfs2_xattr_find_entry()
ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
cgroup: Make operations on the cgroup root_list RCU safe
Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
gpio: prevent potential speculation leaks in gpio_device_get_desc()
gpiolib: cdev: Ignore reconfiguration without direction
cgroup: Move rcu_head up near the top of cgroup_root
USB: serial: pl2303: add device id for Macrosilicon MS3020
USB: usbtmc: prevent kernel-usb-infoleak
EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR
EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw
EDAC/synopsys: Re-enable the error interrupts on v3 hw
EDAC/synopsys: Fix ECC status and IRQ control race condition
EDAC/synopsys: Fix error injection on Zynq UltraScale+
wifi: rtw88: always wait for both firmware loading attempts
crypto: xor - fix template benchmarking
ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
wifi: ath9k: fix parameter check in ath9k_init_debug()
wifi: ath9k: Remove error checks when creating debugfs entries
net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
wifi: rtw88: remove CPT execution branch never used
fs: explicitly unregister per-superblock BDIs
mount: warn only once about timestamp range expiration
fs/namespace: fnic: Switch to use %ptTd
mount: handle OOM on mnt_warn_timestamp_expiry
wifi: iwlwifi: mvm: increase the time between ranging measurements
padata: Honor the caller's alignment in case of chunk_size 0
can: j1939: use correct function name in comment
ACPI: CPPC: Fix MASK_VAL() usage
netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
netfilter: nf_tables: reject element expiration with no timeout
netfilter: nf_tables: reject expiration higher than timeout
netfilter: nf_tables: remove annotation to access set timeout while holding lock
cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
x86/sgx: Fix deadlock in SGX NUMA node search
wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
wifi: mt76: mt7915: fix rx filter setting for bfee functionality
wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
sock_map: Add a cond_resched() in sock_hash_free()
can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
can: m_can: m_can_close(): stop clocks after device has been shut down
Bluetooth: btusb: Fix not handling ZPL/short-transfer
bareudp: Pull inner IP header in bareudp_udp_encap_recv().
net: geneve: support IPv4/IPv6 as inner protocol
geneve: Fix incorrect inner network header offset when innerprotoinherit is set
bareudp: Pull inner IP header on xmit.
net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
r8169: disable ALDPS per default for RTL8125
net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
net: tipc: avoid possible garbage value
block, bfq: fix possible UAF for bfqq->bic with merge chain
block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
block, bfq: don't break merge chain in bfq_split_bfqq()
block: print symbolic error name instead of error code
block: fix potential invalid pointer dereference in blk_add_partition
spi: ppc4xx: handle irq_of_parse_and_map() errors
spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
ARM: versatile: fix OF node leak in CPUs prepare
reset: berlin: fix OF node leak in probe() error path
reset: k210: fix OF node leak in probe() error path
clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
m68k: Fix kernel_clone_args.flags in m68k_clone()
hwmon: (max16065) Fix overflows seen when writing limits
i2c: Add i2c_get_match_data()
hwmon: (max16065) Remove use of i2c_match_id()
hwmon: (max16065) Fix alarm attributes
mtd: slram: insert break after errors in parsing the map
hwmon: (ntc_thermistor) fix module autoloading
power: supply: axp20x_battery: Remove design from min and max voltage
power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
mtd: powernv: Add check devm_kasprintf() returned value
pmdomain: core: Harden inter-column space in debug summary
drm/stm: Fix an error handling path in stm_drm_platform_probe()
drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
drm/amdgpu: Replace one-element array with flexible-array member
drm/amdgpu: properly handle vbios fake edid sizing
drm/radeon: Replace one-element array with flexible-array member
drm/radeon: properly handle vbios fake edid sizing
scsi: NCR5380: Add SCp members to struct NCR5380_cmd
scsi: NCR5380: Check for phase match during PDMA fixup
drm/rockchip: vop: Allow 4096px width scaling
drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
powerpc/32: Remove the 'nobats' kernel parameter
powerpc/32: Remove 'noltlbs' kernel parameter
powerpc/8xx: Fix initial memory mapping
powerpc/8xx: Fix kernel vs user address comparison
drm/msm: Fix incorrect file name output in adreno_request_fw()
drm/msm/a5xx: disable preemption in submits by default
drm/msm/a5xx: properly clear preemption records on resume
drm/msm/a5xx: fix races in preemption evaluation stage
drm/msm: Drop priv->lastctx
drm/msm/a5xx: workaround early ring-buffer emptiness check
ipmi: docs: don't advertise deprecated sysfs entries
drm/msm: fix %s null argument error
drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
xen: use correct end address of kernel for conflict checking
xen/swiotlb: add alignment check for dma buffers
tpm: Clean up TPM space after command failure
selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
selftests/bpf: Fix compiling kfree_skb.c with musl-libc
selftests/bpf: Fix compiling flow_dissector.c with musl-libc
selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
selftests/bpf: Fix compiling core_reloc.c with musl-libc
selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
selftests/bpf: Fix error compiling test_lru_map.c
selftests/bpf: Fix C++ compile error from missing _Bool type
xz: cleanup CRC32 edits from 2018
kthread: fix task state in kthread worker if being frozen
ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
ext4: avoid buffer_head leak in ext4_mark_inode_used()
ext4: avoid potential buffer_head leak in __ext4_new_inode()
ext4: avoid negative min_clusters in find_group_orlov()
ext4: return error on ext4_find_inline_entry
ext4: avoid OOB when system.data xattr changes underneath the filesystem
nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
nilfs2: determine empty node blocks as corrupted
nilfs2: fix potential oob read in nilfs_btree_check_delete()
bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
perf mem: Free the allocated sort string, fixing a leak
perf sched timehist: Fix missing free of session in perf_sched__timehist()
perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
perf time-utils: Fix 32-bit nsec parsing
clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
clk: imx: imx8qxp: Parent should be initialized earlier than the clock
remoteproc: imx_rproc: Correct ddr alias for i.MX8M
remoteproc: imx_rproc: Initialize workqueue earlier
clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
Input: ilitek_ts_i2c - avoid wrong input subsystem sync
Input: ilitek_ts_i2c - add report id message validation
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
PCI: xilinx-nwl: Fix register misspelling
PCI: xilinx-nwl: Clean up clock on probe failure/removal
RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
pinctrl: single: fix missing error code in pcs_probe()
RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
clk: ti: dra7-atl: Fix leak of of_nodes
nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
nfsd: fix refcount leak when file is unhashed after being found
pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
IB/core: Fix ib_cache_setup_one error flow cleanup
watchdog: imx_sc_wdt: Don't disable WDT in suspend
RDMA/hns: Don't modify rq next block addr in HIP09 QPC
RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
RDMA/hns: Remove unused abnormal interrupt of type RAS
RDMA/hns: Fix the wrong type of return value of the interrupt handler
RDMA/hns: Refactor the abnormal interrupt handler function
RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
RDMA/hns: Optimize hem allocation performance
riscv: Fix fp alignment bug in perf_callchain_user()
RDMA/cxgb4: Added NULL check for lookup_atid
RDMA/irdma: fix error message in irdma_modify_qp_roce()
ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
ntb_perf: Fix printk format
nfsd: call cache_put if xdr_reserve_space returns NULL
nfsd: return -EINVAL when namelen is 0
f2fs: fix typo
f2fs: fix to update i_ctime in __f2fs_setxattr()
f2fs: remove unneeded check condition in __f2fs_setxattr()
f2fs: reduce expensive checkpoint trigger frequency
f2fs: optimize error handling in redirty_blocks
f2fs: fix to wait page writeback before setting gcing flag
f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy
f2fs: clean up w/ dotdot_name
f2fs: get rid of online repaire on corrupted directory
spi: lpspi: Silence error message upon deferred probe
spi: lpspi: release requested DMA channels
spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
iio: adc: ad7606: fix oversampling gpio array
iio: adc: ad7606: fix standby gpio state to match the documentation
coresight: tmc: sg: Do not leak sg_table
interconnect: qcom: sm8250: Enable sync_state
vdpa: Add eventfd for the vdpa callback
vhost_vdpa: assign irq bypass producer token correctly
Revert "dm: requeue IO if mapping table not yet available"
net: axienet: Clean up device used for DMA calls
net: axienet: Clean up DMA start/stop and error handling
net: axienet: don't set IRQ timer when IRQ delay not used
net: axienet: implement NAPI and GRO receive
net: axienet: reduce default RX interrupt threshold to 1
net: axienet: add coalesce timer ethtool configuration
net: axienet: Be more careful about updating tx_bd_tail
net: axienet: Use NAPI for TX completion path
net: axienet: Switch to 64-bit RX/TX statistics
net: xilinx: axienet: Fix packet counting
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
tcp: check skb is non-NULL in tcp_rto_delta_us()
net: qrtr: Update packets cloning when broadcasting
bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
Input: goodix - use the new soc_intel_is_byt() helper
powercap: RAPL: fix invalid initialization for pl4_supported field
x86/mm: Switch to new Intel CPU model defines
vfio/pci: fix potential memory leak in vfio_intx_enable()
selinux,smack: don't bypass permissions check in inode_setsecctx hook
Remove *.orig pattern from .gitignore
PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
soc: versatile: integrator: fix OF node leak in probe() error path
Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
drm/amd/display: Round calculated vtotal
drm/amd/display: Validate backlight caps are sane
scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
scsi: mac_scsi: Refactor polling loop
scsi: mac_scsi: Disallow bus errors during PDMA send
usbnet: fix cyclical race on disconnect with work queue
USB: appledisplay: close race between probe and completion handler
USB: misc: cypress_cy7c63: check for short transfer
USB: class: CDC-ACM: fix race between get_serial and set_serial
usb: cdnsp: Fix incorrect usb_request status
usb: dwc2: drd: fix clock gating on USB role switch
bus: integrator-lm: fix OF node leak in probe()
firmware_loader: Block path traversal
tty: rp2: Fix reset with non forgiving PCIe host bridges
xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
drbd: Fix atomicity violation in drbd_uuid_set_bm()
drbd: Add NULL check for net_conf to prevent dereference in state validation
ACPI: sysfs: validate return type of _STR method
ACPI: resource: Add another DMI match for the TongFang GMxXGxx
efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
perf/x86/intel/pt: Fix sampling synchronization
wifi: rtw88: 8822c: Fix reported RX band width
wifi: mt76: mt7615: check devm_kasprintf() returned value
debugobjects: Fix conditions in fill_pool()
f2fs: prevent possible int overflow in dir_block_index()
f2fs: avoid potential int overflow in sanity_check_area_boundary()
hwrng: mtk - Use devm_pm_runtime_enable
hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
vfs: fix race between evice_inodes() and find_inode()&iput()
fs: Fix file_set_fowner LSM hook inconsistencies
nfs: fix memory leak in error path of nfs4_do_reclaim
EDAC/igen6: Fix conversion of system address to physical memory address
padata: use integer wrap around to prevent deadlock on seq_nr overflow
soc: versatile: realview: fix memory leak during device remove
soc: versatile: realview: fix soc_dev leak during device remove
usb: yurex: Replace snprintf() with the safer scnprintf() variant
USB: misc: yurex: fix race between read and write
xhci: fix event ring segment table related masks and variables in header
xhci: remove xhci_test_trb_in_td_math early development check
xhci: Refactor interrupter code for initial multi interrupter support.
xhci: Preserve RsvdP bits in ERSTBA register correctly
xhci: Add a quirk for writing ERST in high-low order
usb: xhci: fix loss of data on Cadence xHC
pps: remove usage of the deprecated ida_simple_xx() API
pps: add an error check in parport_attach
x86/idtentry: Incorporate definitions/declarations of the FRED entries
x86/entry: Remove unwanted instrumentation in common_interrupt()
bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
lockdep: fix deadlock issue between lockdep and rcu
mm: only enforce minimum stack gap size if it's sensible
i2c: aspeed: Update the stop sw state when the bus recovery occurs
i2c: isch: Add missed 'else'
usb: yurex: Fix inconsistent locking bug in yurex_read()
spi: lpspi: Simplify some error message
static_call: Handle module init failure correctly in static_call_del_module()
static_call: Replace pointless WARN_ON() in static_call_module_notify()
mailbox: rockchip: fix a typo in module autoloading
mailbox: bcm2835: Fix timeout during suspend mode
ceph: remove the incorrect Fw reference check when dirtying pages
ieee802154: Fix build error
net/mlx5: Fix error path in multi-packet WQE transmit
net/mlx5: Added cond_resched() to crdump collection
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
netfilter: nf_tables: prevent nf_skb_duplicated corruption
Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
net: ethernet: lantiq_etop: fix memory disclosure
net: avoid potential underflow in qdisc_pkt_len_init() with UFO
net: add more sanity checks to qdisc_pkt_len_init()
stmmac_pci: Fix underflow size in stmmac_rx
net: stmmac: Disable automatic FCS/Pad stripping
net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
ppp: do not assume bh is held in ppp_channel_bridge_input()
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
i2c: xiic: Fix broken locking on tx_msg
i2c: xiic: Switch from waitqueue to completion
i2c: xiic: Fix RX IRQ busy check
i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
i2c: xiic: improve error message when transfer fails to start
i2c: xiic: Try re-initialization on bus busy timeout
media: usbtv: Remove useless locks in usbtv_video_free()
ALSA: mixer_oss: Remove some incorrect kfree_const() usages
ALSA: hda/realtek: Fix the push button function for the ALC257
ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
f2fs: Require FMODE_WRITE for atomic write ioctls
wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
net/xen-netback: prevent UAF in xenvif_flush_hash()
net: hisilicon: hip04: fix OF node leak in probe()
net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
net: hisilicon: hns_mdio: fix OF node leak in probe()
ACPI: PAD: fix crash in exit_round_robin()
ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
net: sched: consistently use rcu_replace_pointer() in taprio_change()
blk_iocost: fix more out of bound shifts
nvme-pci: qdepth 1 quirk
wifi: ath11k: fix array out-of-bound access in SoC stats
wifi: rtw88: select WANT_DEV_COREDUMP
ACPI: EC: Do not release locks during operation region accesses
ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
tipc: guard against string buffer overrun
net: mvpp2: Increase size of queue_name buffer
ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
net: atlantic: Avoid warning about potential string truncation
tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
ACPICA: iasl: handle empty connection_node
proc: add config & param to block forcing mem writes
UBUNTU: [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
nfp: Use IRQF_NO_AUTOEN flag in request_irq()
signal: Replace BUG_ON()s
ALSA: usb-audio: Add input value sanity checks for standard types
x86/ioapic: Handle allocation failures gracefully
ALSA: usb-audio: Define macros for quirk table entries
ALSA: usb-audio: Add logitech Audio profile quirk
tools/x86/kcpuid: Protect against faulty "max subleaf" values
ALSA: asihpi: Fix potential OOB array access
ALSA: hdsp: Break infinite MIDI input flush loop
x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
fbdev: pxafb: Fix possible use after free in pxafb_task()
rcuscale: Provide clear error when async specified without primitives
iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
power: reset: brcmstb: Do not go into infinite loop if reset fails
iommu/vt-d: Always reserve a domain ID for identity setup
iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
ata: sata_sil: Rename sil_blacklist to sil_quirks
drm/amd/display: Check null pointers before using dc->clk_mgr
jfs: UBSAN: shift-out-of-bounds in dbFindBits
jfs: Fix uaf in dbFreeBits
jfs: check if leafidx greater than num leaves per dmap tree
scsi: smartpqi: correct stream detection
jfs: Fix uninit-value access of new_ea in ea_buffer
drm/amdgpu: add raven1 gfxoff quirk
drm/amdgpu: enable gfxoff quirk on HP 705G4
HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
platform/x86: touchscreen_dmi: add nanote-next quirk
drm/amd/display: Check stream before comparing them
drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
drm/amd/display: Fix index out of bounds in degamma hardware format translation
drm/amd/display: Fix index out of bounds in DCN30 color transformation
drm/amd/display: Initialize get_bytes_per_element's default to 1
drm/printer: Allow NULL data in devcoredump printer
scsi: aacraid: Rearrange order of struct aac_srb_unit
drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
drm/amd/pm: ensure the fw_info is not null before using it
of/irq: Refer to actual buffer size in of_irq_parse_one()
ext4: ext4_search_dir should return a proper error
ext4: avoid use-after-free in ext4_ext_show_leaf()
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
blk-integrity: use sysfs_emit
blk-integrity: convert to struct device_attribute
blk-integrity: register sysfs attributes on struct device
usb: typec: tcpm: Check for port partner validity before consuming it
spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: s3c64xx: fix timeout counters in flush_fifo
selftests: breakpoints: use remaining time to check if suspend succeed
selftests: vDSO: fix vDSO name for powerpc
selftests: vDSO: fix vdso_config for powerpc
selftests: vDSO: fix vDSO symbols lookup for powerpc64
selftests/mm: fix charge_reserved_hugetlb.sh test
selftests: vDSO: fix ELF hash table entry size for s390x
selftests: vDSO: fix vdso_config for s390
platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
i2c: xiic: Wait for TX empty to avoid missed TX NAKs
firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
spi: bcm63xx: Fix module autoloading
power: supply: hwmon: Fix missing temp1_max_alarm attribute
perf/core: Fix small negative period being ignored
parisc: Fix itlb miss handler for 64-bit programs
drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
ALSA: core: add isascii() check to card ID generator
ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
ALSA: usb-audio: Add native DSD support for Luxman D-08u
ALSA: line6: add hw monitor volume control to POD HD500X
ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
ext4: no need to continue when the number of entries is 1
ext4: correct encrypted dentry name hash when not casefolded
ext4: fix slab-use-after-free in ext4_split_extent_at()
ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
ext4: aovid use-after-free in ext4_ext_insert_extent()
ext4: fix double brelse() the buffer of the extents path
ext4: update orig_path in ext4_find_extent()
ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
ext4: fix fast commit inode enqueueing during a full journal commit
ext4: use handle to mark fc as ineligible in __track_dentry_update()
ext4: mark fc as ineligible using an handle in ext4_xattr_set()
riscv: define ILLEGAL_POINTER_VALUE for 64bit
exfat: fix memory leak in exfat_load_bitmap()
perf hist: Update hist symbol when updating maps
nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
nfsd: map the EBADMSG to nfserr_io to avoid warning
NFSD: Fix NFSv4's PUTPUBFH operation
aoe: fix the potential use-after-free problem in more places
clk: rockchip: fix error for unknown clocks
clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
media: sun4i_csi: Implement link validate for sun4i_csi subdev
media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
clk: qcom: clk-rpmh: Fix overflow in BCM vote
clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
media: venus: fix use after free bug in venus_remove due to race condition
clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
iio: magnetometer: ak8975: Fix reading for ak099xx sensors
tomoyo: fallback to realpath if symlink's pathname does not exist
net: stmmac: Fix zero-division error when disabling tc cbs
rtc: at91sam9: fix OF node leak in probe() error path
Input: adp5589-keys - fix NULL pointer dereference
Input: adp5589-keys - fix adp5589_gpio_get_value()
ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
btrfs: wait for fixup workers before stopping cleaner kthread during umount
gpio: davinci: fix lazy disable
tracing/hwlat: Fix a race during cpuhp processing
tracing/timerlat: Fix a race during cpuhp processing
close_range(): fix the logics in descriptor table trimming
drm/sched: Add locking to drm_sched_entity_modify_sched
drm/amd/display: Fix system hang while resume with TBT monitor
kconfig: qconf: fix buffer overflow in debug links
device property: Add fwnode_iomap()
device property: Add fwnode_irq_get_byname
i2c: smbus: Use device_*() functions instead of of_*()
i2c: create debugfs entry per adapter
i2c: core: Lock address during client device instantiation
i2c: xiic: Use devm_clk_get_enabled()
i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: bcm63xx: Fix missing pm_runtime_disable()
ext4: properly sync file size update after O_SYNC direct IO
ext4: dax: fix overflowing extents beyond inode size when partially writing
arm64: Add Cortex-715 CPU part definition
arm64: cputype: Add Neoverse-N3 definitions
arm64: errata: Expand speculative SSBS workaround once more
uprobes: fix kernel info leak via "[uprobes]" vma
drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
build-id: require program headers to be right after ELF header
lib/buildid: harden build ID parsing logic
drm/rockchip: define gamma registers for RK3399
drm/rockchip: support gamma control on RK3399
drm/rockchip: vop: clear DMA stop bit on RK3066
media: i2c: imx335: Enable regulator supplies
media: imx335: Fix reset-gpio handling
dt-bindings: clock: qcom: Add missing UFS QREF clocks
dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
r8169: add tally counter fields added with RTL8125
clk: qcom: gcc-sc8180x: Add GPLL9 support
ACPI: battery: Simplify battery hook locking
ACPI: battery: Fix possible crash when unregistering a battery hook
Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
ext4: fix inode tree inconsistency caused by ENOMEM
9p: add missing locking around taking dentry fid list
vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
perf report: Fix segfault when 'sym' sort key is not used
ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
unicode: Don't special case ignorable code points
net: ethernet: cortina: Drop TSO support
tracing: Remove precision vsnprintf() check from print event
drm/crtc: fix uninitialized variable use even harder
tracing: Have saved_cmdlines arrays all in one allocation
selftests/net: give more time to udpgro bg processes to complete startup
selftests/net: synchronize udpgro tests' tx and rx connection
selftests: net: Remove executable bits from library scripts
fs/ntfs3: Refactor enum_rstbl to suppress static checker
virtio_console: fix misc probe bugs
Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
bpf: Check percpu map value size first
s390/facility: Disable compile time optimization for decompressor code
s390/mm: Add cond_resched() to cmm_alloc/free_pages()
bpf, x64: Fix a jit convergence issue
ext4: don't set SB_RDONLY after filesystem errors
ext4: nested locking for xattr inode
s390/cpum_sf: Remove WARN_ON_ONCE statements
ktest.pl: Avoid false positives with grub2 skip regex
RDMA/mad: Improve handling of timed out WRs of mad agent
PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
RDMA/rtrs-srv: Avoid null pointer deref during path establishment
clk: bcm: bcm53573: fix OF node leak in init
PCI: Add ACS quirk for Qualcomm SA8775P
i2c: i801: Use a different adapter-name for IDF adapters
PCI: Mark Creative Labs EMU20k2 INTx masking as broken
ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
usb: chipidea: udc: enable suspend interrupt after usb reset
usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
comedi: ni_routing: tools: Check when the file could not be opened
virtio_pmem: Check device status before requesting flush
tools/iio: Add memory allocation failure check for trigger_name
driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
drm/amd/display: Check null pointer before dereferencing se
fbdev: sisfb: Fix strbuf array overflow
RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
NFSD: Mark filecache "down" if init fails
ice: fix VLAN replay after reset
SUNRPC: Fix integer overflow in decode_rc_list()
NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
net: phy: dp83869: fix memory corruption when enabling fiber
tcp: fix to allow timestamp undo if no retransmits were sent
tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
netfilter: br_netfilter: fix panic with metadata_dst skb
Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
net: phy: bcm84881: Fix some error handling paths
thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
thermal: intel: int340x: processor: Fix warning during module unload
net: dsa: b53: fix jumbo frame mtu check
net: dsa: b53: fix max MTU for 1g switches
net: dsa: b53: fix max MTU for BCM5325/BCM5365
net: dsa: b53: allow lower MTUs on BCM5325/5365
net: dsa: b53: fix jumbo frames on 10/100 ports
gpio: aspeed: Add the flush write to ensure the write complete.
gpio: aspeed: Use devm_clk api to manage clock source
ice: Fix netif_is_ice() in Safe Mode
i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
igb: Do not bring the device up after non-fatal error
net/sched: accept TCA_STAB only for root qdisc
net: ibm: emac: mal: fix wrong goto
sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
netfilter: xtables: avoid NFPROTO_UNSPEC where needed
net: Add l3mdev index to flow struct and avoid oif reset for port devices
netfilter: rpfilter/fib: Populate flowic_l3mdev field
netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
netfilter: fib: check correct rtable in vrf setups
net: rtnetlink: add msg kind names
rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
mctp: Handle error of rtnl_register_module().
ppp: fix ppp_async_encode() illegal access
slip: make slhc_remember() more robust against malicious packets
RDMA/hns: Fix UAF for cq async event
x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
hwmon: (tmp513) Add missing dependency on REGMAP_I2C
hwmon: (adm9240) Add missing dependency on REGMAP_I2C
hwmon: (adt7470) Add missing dependency on REGMAP_I2C
HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
resource: fix region_intersects() vs add_memory_driver_managed()
HID: plantronics: Workaround for an unexcepted opposite volume key
Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
usb: dwc3: core: Stop processing of pending events if controller is halted
usb: xhci: Fix problem with xhci resume from suspend
usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
drm/v3d: Stop the active perfmon before being destroyed
net: explicitly clear the sk pointer, when pf->create fails
net: Fix an unsafe loop on the list
net: dsa: lan9303: ensure chip reset and wait for READY status
mptcp: pm: do not remove closing subflows
nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
kthread: unpark only parked kthread
block, bfq: fix uaf for accessing waker_bfqq after splitting
i2c: smbus: Check for parent device before dereference
net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
net: Handle l3mdev in ip_tunnel_init_flow
net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
net: vrf: determine the dst using the original ifindex for multicast
netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
ext4: fix warning in ext4_dio_write_end_io()
net: axienet: start napi before enabling Rx/Tx
selftests: net: more strict check in net_helper
net: xilinx: axienet: Schedule NAPI in two steps
Linux 5.15.168
UBUNTU: Upstream stable to v5.15.168
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2086242/+subscriptions
Комментариев нет:
Отправить комментарий