Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.14.19 upstream stable release
       from git://git.kernel.org/

            
Linux 5.14.19
media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
media: videobuf2: always set buffer vb2 pointer
x86/sev: Make the #VC exception stacks part of the default stacks storage
x86/sev: Add an x86 version of cc_platform_has()
arch/cc: Introduce a function to check for confidential computing features
IMA: reject unknown hash algorithms in ima_get_hash_algo
selftests/bpf: Fix also no-alu32 strobemeta selftest
selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
mmc: moxart: Fix null pointer dereference on pointer host
ath10k: fix invalid dma_addr_t token assignment
cifs: fix memory leak of smb3_fs_context_dup::server_hostname
media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
drm/amd/display: Look at firmware version to determine using dmub on dcn21
pinctrl: amd: Handle wake-up interrupt
pinctrl: amd: Add irq field data
SUNRPC: Partial revert of commit 6f9f17287e78
PCI: aardvark: Fix PCIe Max Payload Size setting
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
drm/sun4i: Fix macros in sun8i_csc.h
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
powerpc/security: Use a mutex for interrupt exit code patching
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
powerpc/32e: Ignore ESR in instruction storage interrupt handler
powerpc/bpf: Fix write protecting JIT code
powerpc/vas: Fix potential NULL pointer dereference
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
mtd: rawnand: fsmc: Fix use of SM ORDER
remoteproc: imx_rproc: Fix rsc-table name
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
remoteproc: Fix the wrong default value of is_iomem
remoteproc: elf_loader: Fix loading segment when is_iomem true
s390/cio: make ccw_device_dma_* more robust
s390/ap: Fix hanging ioctl caused by orphaned replies
s390/tape: fix timer initialization in tape_std_assign()
s390/cio: check the subchannel validity for dev_busid
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
PM: sleep: Avoid calling put_device() under dpm_list_mtx
video: backlight: Drop maximum brightness override for brightness zero
mfd: dln2: Add cell for initializing DLN2 ADC
mm, oom: do not trigger out_of_memory from the #PF
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
io-wq: serialize hash clear with wakeup
io-wq: fix queue stalling race
io-wq: ensure that hash wait lock is IRQ disabling
memcg: prohibit unconditional exceeding the limit of dying tasks
mm/filemap.c: remove bogus VM_BUG_ON
9p/net: fix missing error check in p9_check_errors
bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
dmaengine: bestcomm: fix system boot lockups
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
erofs: fix unsafe pagevec reuse of hooked pclusters
f2fs: fix UAF in f2fs_available_free_memory
f2fs: include non-compressed blocks in compr_written_block
f2fs: should use GFP_NOFS for directory inodes
irqchip/sifive-plic: Fixup EOI failed when masked
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
KVM: x86: move guest_pv_has out of user_access section
x86/mce: Add errata workaround for Skylake SKX37
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
MIPS: fix duplicated slashes for Platform file path
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user 
page
parisc: Fix backtrace to always include init funtion names
ARM: 9156/1: drop cc-option fallbacks for architecture selection
ARM: 9155/1: fix early early_iounmap()
smb3: do not error on fsync when readonly
selftests/net: udpgso_bench_rx: fix port argument
cxgb4: fix eeprom len when diagnostics not implemented
net/smc: fix sk_refcnt underflow on linkdown and fallback
vsock: prevent unnecessary refcnt inc for nonblocking connect
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
net: stmmac: allow a tc-taprio base-time of zero
net: hns3: allow configure ETS bandwidth of all TCs
net: hns3: fix kernel crash when unload VF while it is being reset
net: hns3: fix pfc packet number incorrect after querying pfc parameters
net: hns3: fix ROCE base interrupt vector initialization bug
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
seq_file: fix passing wrong private data
drm/i915/fb: Fix rounding error in subsampled plane size calculation
gve: Fix off by one in gve_tx_timeout()
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
dmaengine: stm32-dma: fix burst in case of unaligned memory address
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
bpf, sockmap: Remove unhash handler for BPF sockmap usage
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
arm64: arm64_ftr_reg->name may not be a human-readable string
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
llc: fix out-of-bound array index in llc_sk_dev_hash()
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
zram: off by one in read_block_state()
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and 
zs_unregister_migration()
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for 
mcp251xfd_chip_rx_int_enable()
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Revert "drm/imx: Annotate dma-fence critical section in commit path"
drm: fb_helper: improve CONFIG_FB dependency
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
libbpf: Fix lookup_and_delete_elem_flags error reporting
ACPI: PM: Fix device wakeup power reference counting error
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
mfd: sprd: Add SPI device ID table
mfd: cpcap: Add SPI device ID table
mfd: core: Add missing of_node_put for loop iteration
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
drm/ttm: remove ttm_bo_vm_insert_huge()
net: phy: fix duplex out of sync problem while changing settings
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
PCI: Do not enable AtomicOps on VFs
ataflop: remove ataflop_probe_lock mutex
block/ataflop: provide a helper for cleanup up an atari disk
block/ataflop: add registration bool before calling del_gendisk()
block/ataflop: use the blk_cleanup_disk() helper
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
nvdimm/btt: do not call del_gendisk() if not needed
PCI: j721e: Fix j721e_pcie_probe() error path
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
ice: Fix not stopping Tx queues for VFs
ice: Fix replacing VF hardware MAC to existing MAC filter
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
net: dsa: tag_ocelot: break circular dependency with ocelot switch lib driver
net: vlan: fix a UAF in vlan_dev_real_dev()
openrisc: fix SMP tlb flush NULL pointer dereference
ethtool: fix ethtool msg len calculation for pause stats
kselftests/net: add missed icmp.sh test to Makefile
net: davinci_emac: Fix interrupt pacing disable
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
nbd: fix max value for 'first_minor'
xen-pciback: Fix return in pm_ctrl_init()
gpio: realtek-otto: fix GPIO line IRQ offset
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
scsi: qla2xxx: Turn off target reset during issue_lip
scsi: qla2xxx: Fix gnl list corruption
scsi: target: core: Remove from tmr_list during LUN unlink
ar7: fix kernel builds for compiler test
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
m68k: set a default value for MEMORY_RESERVE
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
auxdisplay: ht16k33: Fix frame buffer device blanking
auxdisplay: ht16k33: Connect backlight to fbdev
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Fix user namespace leak
NFS: Fix an Oops in pnfs_mark_request_commit()
NFS: Fix up commit deadlocks
dmaengine: stm32-dma: fix stm32_dma_get_max_width
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
mtd: core: don't remove debugfs directory if device is in use
mtd: rawnand: arasan: Prevent an unsupported configuration
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Input: st1232 - increase "wait ready" timeout
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
NFS: Fix deadlocks in nfs_scan_commit_list()
opp: Fix return in _opp_add_static_v2()
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
PCI: aardvark: Don't spam about PIO Response Status
drm/plane-helper: fix uninitialized variable reference
drm/bridge/lontium-lt9611uxc: fix provided connector suport
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
NFS: Fix dentry verifier races
NFS: Ignore the directory size when marking for revalidation
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
i2c: mediatek: fixing the incorrect register offset
Input: ariel-pwrbutton - add SPI device ID table
rtc: mcp795: Add SPI ID table
remoteproc: imx_rproc: Fix TCM io memory type
rtc: pcf2123: Add SPI ID table
rtc: ds1390: Add SPI ID table
rtc: ds1302: Add SPI ID table
nfsd: don't alloc under spinlock in rpc_parse_scope_id
mtd: rawnand: intel: Fix potential buffer overflow in probe
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
apparmor: fix error check
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
mips: cm: Convert to bitfield API to fix out-of-bounds access
virtio_ring: check desc == NULL when using indirect with packed
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
RDMA/hns: Fix initial arm_st of CQ
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
powerpc: Don't provide __kernel_map_pages() without 
ARCH_SUPPORTS_DEBUG_PAGEALLOC
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
powerpc/xmon: fix task state output
powerpc/44x/fsp2: add missing of_node_put
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
HID: u2fzero: properly handle timeouts in usb_submit_urb
HID: u2fzero: clarify error check and length calculations
clk: at91: clk-master: fix prescaler logic
clk: at91: clk-master: check if div or pres is zero
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
serial: xilinx_uartps: Fix race condition causing stuck TX
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
phy: qcom-snps: Correct the FSEL_MASK
phy: ti: gmii-sel: check of_get_address() for failure
phy: qcom-qusb2: Fix a memory leak on probe
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
pinctrl: equilibrium: Fix function addition in multiple groups
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
soc: qcom: apr: Add of_node_put() before return
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
usb: dwc2: drd: reset current session before setting the new one
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
serial: imx: fix detach/attach of serial console
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
soundwire: bus: stop dereferencing invalid slave pointer
iio: adis: do not disabe IRQs in 'adis_init()'
usb: typec: STUSB160X should select REGMAP_I2C
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
soc: qcom: socinfo: add two missing PMIC IDs
soc: qcom: rpmhpd: Make power_on actually enable the domain
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
ASoC: cs42l42: Correct some register default values
ASoC: cs42l42: Always configure both ASP TX channels
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
ARM: dts: stm32: fix SAI sub nodes register range
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
dyndbg: make dyndbg a known cli param
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
staging: most: dim2: do not double-register the same device
usb: musb: select GENERIC_PHY instead of depending on it
RDMA/mlx4: Return missed an error if device doesn't support steering
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
power: supply: max17040: fix null-ptr-deref in max17040_probe()
power: supply: rt5033_battery: Change voltage values to µV
usb: gadget: hid: fix error code in do_config()
serial: 8250_dw: Drop wrong use of ACPI_PTR()
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
powerpc: fix unbalanced node refcount in check_kvm_guest()
video: fbdev: chipsfb: use memset_io() instead of memset()
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 
'create_section_mapping'
clk: at91: check pmc node status before registering syscore ops
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
iio: st_pressure_spi: Add missing entries SPI to device ID table
ASoC: SOF: topology: do not power down primary core during topology removal
arm: dts: omap3-gta04a4: accelerometer irq fix
driver core: Fix possible memory leak in device_link_add()
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real 
interrupt
power: reset: at91-reset: check properly the return value of devm_of_iomap
soundwire: debugfs: use controller id and link_id for debugfs
ALSA: hda: Use position buffer for SKL+ again
ALSA: hda: Reduce udelay() at SKL+ position reporting
iommu/dma: Fix arch_sync_dma for map
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
iommu/mediatek: Fix out-of-range warning with clang
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
ASoC: wcd9335: Use correct version to initialize Class H
JFS: fix memleak in jfs_mount
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
scsi: dc395: Fix error case unwinding
soc: qcom: llcc: Disable MMUHWT retention
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
ARM: dts: at91: tse850: the emac<->phy interface is rmii
bus: ti-sysc: Fix timekeeping_suspended warning on resume
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
RDMA/bnxt_re: Fix query SRQ failure
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
arm64: dts: rockchip: Fix GPU register width for RK3328
arm64: dts: rockchip: fix rk3568 mbi-alias
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
scsi: pm80xx: Fix lockup in outbound queue management
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
arm64: dts: broadcom: bcm4908: Fix UART clock name
ARM: dts: BCM5301X: Fix memory nodes names
RDMA/rxe: Fix wrong port_cap_flags
iio: st_sensors: disable regulators after device unregistration
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
of: unittest: fix EXPECT text for gpio hog errors
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
cgroup: Fix rootcg cpu.stat guest double counting
skmsg: Lose offset info in sk_psock_skb_ingress
ibmvnic: delay complete()
ibmvnic: Process crqs after enabling interrupts
ibmvnic: don't stop queue in xmit
udp6: allow SO_MARK ctrl msg to affect routing
selftests/bpf: Fix fclose/pclose mismatch in test_progs
crypto: pcrypt - Delay write to padata->info
selftests: net: bridge: update IGMP/MLD membership interval value
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
net: phylink: avoid mvneta warning when setting pause parameters
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 
'kcs_bmc_serio_add_device()'
net: amd-xgbe: Toggle PLL settings during rate change
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
sctp: subtract sctphdr len in sctp_transport_pl_hlen
sctp: reset probe_timer in sctp_transport_pl_update
sctp: allow IP fragmentation when PLPMTUD enters Error state
selftests/bpf: Fix memory leak in test_ima
selftests/bpf: Fix fd cleanup in sk_lookup test
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
wcn36xx: Channel list update before hardware scan
bpf: Fixes possible race in update_prog_stats() for 32bit arches
wcn36xx: Fix discarded frames due to wrong sequence number
wcn36xx: add proper DMA memory barriers in rx path
libertas: Fix possible memory leak in probe and disconnect
libertas_tf: Fix possible memory leak in probe and disconnect
KVM: s390: Fix handle_sske page fault handling
samples/kretprobes: Fix return value if register_kretprobe() failed
x86: Fix __get_wchan() for !STACKTRACE
sched: Add wrapper for get_wchan() to keep task blocked
spi: spi-rpc-if: Check return value of rpcif_sw_init()
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
tpm_tis_spi: Add missing SPI ID
tpm: fix Atmel TPM crash caused by too frequent queries
blk-cgroup: synchronize blkg creation against policy deactivation
block: ataflop: more blk-mq refactoring fixes
ath10k: fix module load regression with iram-recovery feature
ARM: 9142/1: kasan: work around LPAE build warning
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
irq: mips: avoid nested irq_enter()
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
KVM: s390: pv: avoid double free of sida page
s390/uv: fully validate the VMA before calling follow_page()
s390/mm: fix VMA and page table handling code in storage key handling functions
s390/mm: validate VMA in PGSTE manipulation functions
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
s390/gmap: validate VMA in __gmap_zap()
mt76: mt7615: mt7622: fix ibss and meshpoint
libbpf: Fix BTF header parsing checks
libbpf: Fix overflow in BTF sanity checks
bpftool: Avoid leaking the JSON writer prepared for program metadata
libbpf: Fix memory leak in btf__dedup()
KVM: selftests: Fix nested SVM tests when built with clang
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
drm/msm: Fix potential NULL dereference in DPU SSPP
x86/sev: Fix stack type check in vc_switch_off_ist()
clocksource/drivers/timer-ti-dm: Select TIMER_OF
PM: hibernate: fix sparse warnings
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
nbd: Fix use-after-free in pid_show
phy: micrel: ksz8041nl: do not use power down mode
net: enetc: unmap DMA in enetc_send_cmd()
iwlwifi: pnvm: read EFI data only if long enough
iwlwifi: pnvm: don't kmemdup() more than we have
iwlwifi: mvm: reset PM state on unsuccessful resume
mwifiex: Send DELBA requests according to spec
rsi: stop thread firstly in rsi_91x_init() error handling
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
mt76: mt7915: fix sta_rec_wtbl tag len
mt76: connac: fix possible NULL pointer dereference in 
mt76_connac_get_phy_mode_v2
mt76: mt7615: fix monitor mode tear down crash
mt76: mt7921: fix retrying release semaphore without end
mt76: mt7915: fix possible infinite loop release semaphore
mt76: mt7615: fix hwmon temp sensor mem use-after-free
mt76: mt7915: fix hwmon temp sensor mem use-after-free
mt76: mt7921: always wake device if necessary in debugfs
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
mt76: mt7921: fix firmware usage of RA info using legacy rates
mt76: mt7921: report HE MU radiotap
mt76: overwrite default reg_ops if necessary
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
mt76: mt7921: fix dma hang in rmmod
mt76: mt7915: fix bit fields for HT rate idx
mt76: mt7915: fix potential overflow of eeprom page index
mt76: mt7921: Fix out of order process by invalid event pkt
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
mt76: mt7921: fix survey-dump reporting
mt76: fix build error implicit enumeration conversion
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
mt76: mt7921: fix endianness warning in mt7921_update_txs
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
ACPI: PM: Fix sharing of wakeup power resources
ACPI: PM: Turn off unused wakeup power resources
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
block: ataflop: fix breakage introduced at blk-mq refactoring
mmc: mxs-mmc: disable regulator on error and in the remove function
media: ir_toy: assignment to be16 should be of correct type
media: ivtv: fix build for UML
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
drm/msm: uninitialized variable in msm_gem_import()
drm/msm: fix potential NULL dereference in cleanup
drm/msm: potential error pointer dereference in init()
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
crypto: octeontx2 - set assoclen in aead_do_fallback()
tcp: switch orphan_count to bare per-cpu counters
x86: Fix get_wchan() to support the ORC unwinder
net: tulip: winbond-840: fix build for UML
net: fealnx: fix build for UML
kernel/sched: Fix sched_fork() access an invalid sched_task_group
ath10k: fix max antenna gain unit
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
hwmon: Fix possible memleak in __hwmon_device_register()
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
memstick: avoid out-of-range warning
mmc: sdhci-omap: Fix context restore
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
gve: Track RX buffer allocation failures
gve: Recover from queue stall due to missed IRQ
b43: fix a lower bounds test
b43legacy: fix a lower bounds test
IMA: block writes of the security.ima xattr with unsupported algorithms
hwrng: mtk - Force runtime pm ops for sleep ops
crypto: qat - disregard spurious PFVF interrupts
crypto: qat - detect PFVF collision after ACK
crypto: ccree - avoid out-of-range warnings from clang
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
media: venus: fix vpp frequency calculation for decoder
netfilter: nft_dynset: relax superfluous check on set updates
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
EDAC/amd64: Handle three rank interleaving mode
x86/insn: Use get_unaligned() instead of memcpy()
PM: EM: Fix inefficient states detection
ath9k: Fix potential interrupt storm on queue reset
ath10k: Don't always treat modem stop events as crashes
media: em28xx: Don't use ops->suspend if it is NULL
cpuidle: Fix kobject memory leaks in error paths
drm: fb_helper: fix CONFIG_FB dependency
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
kprobes: Do not use local variable when creating debugfs file
scs: Release kasan vmalloc poison in scs_free process
media: atmel: fix the ispck initialization
media: cx23885: Fix snd_card_free call on null card pointer
media: tm6000: Avoid card name truncation
media: si470x: Avoid card name truncation
media: radio-wl1273: Avoid card name truncation
media: sun6i-csi: Allow the video device to be open multiple times
media: i2c: ths8200 needs V4L2_ASYNC
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
media: mtk-vpu: Fix a resource leak in the error handling path of 
'mtk_vpu_probe()'
media: TDA1997x: handle short reads of hdmi info frame.
media: mtk-vcodec: venc: fix return value when start_streaming fails
media: v4l2-ioctl: S_CTRL output the right value
media: imx258: Fix getting clock frequency
media: dvb-usb: fix ununit-value in az6027_rc_query
media: ttusb-dec: avoid release of non-acquired mutex
media: cxd2880-spi: Fix a null pointer dereference on error handling path
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
media: em28xx: add missing em28xx_close_extension
libbpf: Fix skel_internal.h to set errno on loader retval < 0
drm/amdgpu: fix warning for overflow check
arm64: mm: update max_pfn after memory hotplug
drm/ttm: stop calling tt_swapin in vm_access
ath10k: sdio: Add missing BH locking around napi_schdule()
ath10k: Fix missing frame timestamp for beacon/probe-resp
gve: DQO: avoid unused variable warnings
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
ath11k: Avoid race during regd updates
ath11k: fix some sleeping in atomic bugs
net: dsa: rtl8366: Fix a bug in deleting VLANs
net: dsa: rtl8366rb: Fix off-by-one bug
cfg80211: always free wiphy specific regdomain
fortify: Fix dropped strcpy() compile-time write overflow check
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
qed: Don't ignore devlink allocation failures
bnxt_en: Check devlink allocation and registration status
crypto: caam - disable pkc for non-E SoCs
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
wilc1000: fix possible memory leak in cfg_scan_result()
wcn36xx: Fix Antenna Diversity Switching
cgroup: Make rebind_subsystems() disable v2 controllers all at once
spi: Fixed division by zero warning
drm: bridge: it66121: Fix return value it66121_probe
net: phylink: don't call netif_carrier_off() with NULL netdev
net: net_namespace: Fix undefined member in key_remove_domain()
lockdep: Let lock_is_held_type() detect recursive read as read
virtio-gpu: fix possible memory allocation failure
drm/v3d: fix wait for TMU write combiner flush
objtool: Handle __sanitize_cov*() tail calls
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
MIPS: lantiq: dma: fix burst length for DEU
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
libbpf: Don't crash on object files with no symbol tables
Bluetooth: fix init and cleanup of sco_conn.timeout_work
drm/bridge: it66121: Wait for next bridge to be probed
drm/bridge: it66121: Initialize {device,vendor}_ids
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
selftests/bpf: Fix strobemeta selftest regression
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
erofs: don't trigger WARN() when decompression fails
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
parisc: fix warning in flush_tlb_all
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
selftests/core: fix conflicting types compile error for close_range()
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
ftrace: do CPU checking after preemption disabled
Revert "wcn36xx: Enable firmware link monitoring"
wcn36xx: Fix packet drop on resume
wcn36xx: Correct band/freq reporting on RX
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
btrfs: do not take the uuid_mutex in btrfs_rm_device
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
ACPI: resources: Add one more Medion model in IRQ override quirk
ACPI: AC: Quirk GK45 to skip reading _PSR
net: annotate data-race in neigh_output()
vrf: run conntrack only in context of lower/physdev for locally generated 
packets
tools/latency-collector: Use correct size when writing queue_full_warning
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
gfs2: Fix glock_hash_walk bugs
gfs2: Cancel remote delete work asynchronously
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to 
unsigned int
gre/sit: Don't generate link-local addr if addr_gen_mode is 
IN6_ADDR_GEN_MODE_NONE
ARM: clang: Do not rely on lr register for stacktrace
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
iwlwifi: mvm: disable RX-diversity in powersave
selftests/bpf: Fix perf_buffer test on system with offline cpus
selftests: kvm: fix mismatched fclose() after popen()
PM: hibernate: Get block device exclusively in swsusp_check()
arm64: vdso32: suppress error message for 'make mrproper'
nvme: drop scan_lock and always kick requeue list when removing namespaces
nvmet-tcp: fix use-after-free when a port is removed
nvmet-rdma: fix use-after-free when a port is removed
nvmet: fix use-after-free when a port is removed
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
media: allegro: ignore interrupt if mailbox is not initialized
block: remove inaccurate requeue check
iwlwifi: change all JnP to NO-160 configuration
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
mt76: mt7915: fix an off-by-one bound check
tracing/cfi: Fix cmp_entries_* functions signature mismatch
workqueue: make sysfs of unbound kworker cpumask more clever
lib/xz: Validate the value before assigning it to an enum variable
lib/xz: Avoid overlapping memcpy() with invalid input with in-place 
decompression
locking/rwsem: Disable preemption for spinning region
memstick: r592: Fix a UAF bug when removing the driver
md: update superblock after changing rdev flags in state_store
floppy: fix calling platform_device_unregister() on invalid drives
block: bump max plugged deferred size from 16 to 32
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
thermal/core: Fix null pointer dereference in thermal_release()
leaking_addresses: Always print a trailing newline
net: phy: micrel: make *-skew-ps check more lenient
drm/amdkfd: fix resume error when iommu disabled in Picasso
drm/amd/display: fix null pointer deref when plugging in display
ACPI: scan: Release PM resources blocked by unused objects
ACPI: battery: Accept charges over the design capacity as full
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
mmc: moxart: Fix reference count leaks in moxart_probe
ath: dfs_pattern_detector: Fix possible null-pointer dereference in 
channel_detector_create()
tracing: Disable "other" permission bits in the tracefs files
tracefs: Have tracefs directories not set OTH permission bits by default
drm/amdkfd: rm BO resv on validation to avoid deadlock
net-sysfs: try not to restart the syscall if it will fail eventually
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
media: ipu3-imgu: imgu_fmt: Handle properly try
media: imx-jpeg: Fix possible null pointer dereference
ice: Move devlink port to PF/VF struct
cpufreq: Make policy min/max hard requirements
ACPICA: Avoid evaluating methods too early during system resume
kselftests/sched: cleanup the child processes
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
ipmi: Disable some operations during a panic
media: rcar-csi2: Add checking to rcsi2_start_receiver()
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
rtw88: fix RX clock gate setting while fifo dump
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
media: mceusb: return without resubmitting URB in case of -EPROTO error.
media: rcar-vin: Use user provided buffers when starting
media: imx: set a media_device bus_info string
media: videobuf2: rework vb2_mem_ops API
media: s5p-mfc: Add checking to s5p_mfc_probe().
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
media: vidtv: Fix memory leak in remove
media: uvcvideo: Set unique vdev name based in type
media: uvcvideo: Return -EIO for control errors
media: uvcvideo: Set capability in s_param
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
media: atomisp: Fix error handling in probe
media: netup_unidvb: handle interrupt properly according to the firmware
media: mt9p031: Fix corrupted frame after restarting stream
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
ath10k: high latency fixes for beacon buffer
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
ath11k: Avoid reg rules update during firmware recovery
selftests: net: fib_nexthops: Wait before checking reported idle time
drm/amd/display: Fix null pointer dereference for encoders
drm/amdgpu: Fix MMIO access page fault
fscrypt: allow 256-bit master keys with AES-256-XTS
spi: Check we have a spi_device_id for each DT compatible
mwifiex: Properly initialize private structure on interface type changes
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
x86: Increase exception stack sizes
x86/mm/64: Improve stack overflow warnings
crypto: aesni - check walk.nbytes instead of err
ath11k: Align bss_chan_info structure with firmware
smackfs: Fix use-after-free in netlbl_catmap_walk()
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
ACPI: resources: Add DMI-based legacy IRQ override quirk
net: sched: update default qdisc visibility after Tx queue cnt changes
locking/lockdep: Avoid RCU-induced noinstr fail
MIPS: lantiq: dma: reset correct number of channel
MIPS: lantiq: dma: add small delay after reset
platform/x86: wmi: do not fail if disabling fails
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
drm/panel-orientation-quirks: add Valve Steam Deck
Bluetooth: fix use-after-free error in lock_sock_nested()
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
dma-buf: WARN on dmabuf release with pending attachments
component: do not leave master devres group open after bind
power: supply: max17042_battery: Clear status bits in interrupt handler
USB: chipidea: fix interrupt deadlock
USB: iowarrior: fix control-message timeouts
most: fix control-message timeouts
serial: 8250: fix racy uartclk update
USB: serial: keyspan: fix memleak on probe errors
Documentation:devicetree:bindings:iio:dac: Fix val
iio: ad5770r: make devicetree property reading consistent
iio: dac: ad5446: Fix ad5622_write() return value
drivers: iio: dac: ad5766: Fix dt property name
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
iio: buffer: check return value of kstrdup_const()
coresight: trbe: Defer the probe on offline CPUs
coresight: trbe: Fix incorrect access of the sink specific data
coresight: cti: Correct the parameter for pm_runtime_put
pinctrl: core: fix possible memory leak in pinctrl_enable()
cifs: set a minimum of 120s for next dns resolution
cifs: To match file servers, make sure the server hostname matches
quota: correct error number in free_dqentry()
quota: check block number when reading the block in quota file
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
PCI: aardvark: Fix return value of MSI domain .alloc() method
PCI: aardvark: Fix configuring Reference clock
PCI: aardvark: Fix reporting Data Link Layer Link Active
PCI: aardvark: Do not unmask unused interrupts
PCI: aardvark: Fix checking for link up via LTSSM state
PCI: aardvark: Do not clear status bits of masked interrupts
cxl/pci: Fix NULL vs ERR_PTR confusion
PCI: cadence: Add cdns_plat_pcie_probe() missing return
PCI: pci-bridge-emul: Fix emulation of W1C bits
ovl: fix use after free in struct ovl_aio_req
xen/balloon: add late_initcall_sync() for initial ballooning done
ifb: fix building without CONFIG_NET_CLS_ACT
serial: core: Fix initializing and restoring termios speed
ring-buffer: Protect ring_buffer_reset() from reentrancy
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
iio: adc: tsc2046: fix scan interval warning
can: j1939: j1939_can_recv(): ignore messages with invalid source address
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
KVM: nVMX: Handle dynamic MSR intercept toggling
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
KVM: x86: Fix recording of guest steal time / preempted status
KVM: arm64: Extract ESR_ELx.EC only
iio: core: check return value when calling dev_set_name()
iio: core: fix double free in iio_device_unregister_sysfs()
power: supply: max17042_battery: use VFSOC for capacity when no rsns
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
soc: fsl: dpio: use the combined functions to protect critical zone
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
signal: Remove the bogus sigkill_pending in ptrace_stop
ASoC: tegra: Restore AC97 support
ASoC: tegra: Set default card name for Trimslice
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
perf/x86/intel/uncore: Fix invalid unit check
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
rsi: Fix module dev_oper_mode parameter description
rsi: fix rate mask set leading to P2P failure
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
rsi: fix occasional initialisation failure with BT coex
wcn36xx: handle connection loss indication
libata: fix checking of DMA state
mwifiex: Try waking the firmware until we get an interrupt
mwifiex: Read a PCI register after writing the TX ring write pointer
PM: sleep: Do not let "syscore" devices runtime-suspend during system 
transitions
wcn36xx: Fix (QoS) null data frame bitrate/modulation
wcn36xx: Fix tx_status mechanism
wcn36xx: Fix HT40 capability for 2Ghz band
HID: surface-hid: Allow driver matching for target ID 1 devices
HID: surface-hid: Use correct event registry for managing HID events
mt76: mt7615: fix skb use-after-free on mac reset
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
ifb: Depend on netfilter alternatively to tc
evm: mark evm_fixmode as __ro_after_init
rtl8187: fix control-message timeouts
PCI: Mark Atheros QCA6174 to avoid bus reset
ath10k: fix division by zero in send path
ath10k: fix control-message timeout
ath6kl: fix control-message timeout
ath6kl: fix division by zero in send path
mwifiex: fix division by zero in fw download path
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
regulator: dt-bindings: samsung,s5m8767: correct 
s5m8767,pmic-buck-default-dvs-idx property
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is 
disabled
hwmon: (pmbus/lm25066) Add offset coefficients
md/raid1: only allocate write behind bio for WriteMostly device
ipmi:watchdog: Set panic count to proper value on a panic
selinux: fix race condition when computing ocontext SIDs
ia64: kprobes: Fix to pass correct trampoline address to the handler
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
btrfs: call btrfs_check_rw_degradable only if there is a missing device
btrfs: fix lost error handling when replaying directory deletes
btrfs: clear MISSING device status bit in btrfs_close_one_device
tools/testing/selftests/vm/split_huge_page_test.c: fix application of sizeof to 
pointer
net/smc: Correct spelling mistake to TCPF_SYN_RECV
net/smc: Fix smc_link->llc_testlink_time overflow
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
vmxnet3: do not stop tx queues after netif_device_detach()
r8169: Add device 10ec:8162 to driver r8169
net: hns3: ignore reset event before initialization process is done
net: hns3: change hclge/hclgevf workqueue to WQ_UNBOUND mode
nvmet-tcp: fix header digest verification
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
drm: panel-orientation-quirks: Add quirk for GPD Win3
watchdog: Fix OMAP watchdog early handling
net: multicast: calculate csum of looped-back and forwarded packets
spi: spl022: fix Microwire full duplex mode
nvmet-tcp: fix a memory leak when releasing a queue
xen/netfront: stop tx queues during live migration
gpio: mlxbf2.c: Add check for bgpio_init failure
bpf: Prevent increasing bpf_jit_limit above max
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
bpf: Define bpf_jit_alloc_exec_limit for riscv JIT
fcnal-test: kill hanging ping/nettest binaries on cleanup
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
spi: altera: Change to dynamic allocation of spi id
mmc: winbond: don't build on M68K
reset: socfpga: add empty driver allowing consumers to probe
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
hyperv/vmbus: include linux/bitops.h
sfc: Don't use netif_info before net_device setup
sfc: Export fibre-specific supported link modes
cavium: Fix return values of the probe function
mISDN: Fix return values of the probe function
scsi: qla2xxx: Fix unmap of already freed sgl
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
cavium: Return negative value when pci_alloc_irq_vectors() fails
net: mscc: ocelot: Add of_node_put() before goto
net: sparx5: Add of_node_put() before goto
ptp: fix error print of ptp_kvm on X86_64 platform
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
ASoC: cs42l42: Ensure 0dB full scale volume is used for headsets
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
KVM: arm64: Report corrupted refcount at EL2
x86/iopl: Fake iopl(3) CLI/STI usage
x86/irq: Ensure PI wakeup handler is unregistered before module unload
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
fuse: fix page stealing
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
ext4: ensure enough credits in ext4_ext_shift_path_extents
ext4: fix lazy initialization next schedule time computation in more granular 
unit
ALSA: timer: Unconditionally unlink slave instances, too
ALSA: timer: Fix use-after-free problem
ALSA: PCM: Fix NULL dereference at mmap checks
ALSA: synth: missing check for possible NULL after the call to kstrdup
ALSA: hda: Free card instance properly at probe errors
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
ALSA: mixer: oss: Fix racy access to slots
ALSA: line6: fix control and interrupt message timeouts
ALSA: 6fire: fix control and bulk message timeouts
ALSA: ua101: fix division by zero at probe
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
ALSA: hda/realtek: Add quirk for ASUS UX550VE
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
ALSA: hda/realtek: Add quirk for Clevo PC70HS
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
media: v4l2-ioctl: Fix check_ext_ctrls
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
media: rkvdec: Support dynamic resolution changes
media: ite-cir: IR receiver stop working after receive overflow
media: rkvdec: Do not override sizeimage for output format
crypto: s5p-sss - Add error handling in s5p_aes_probe()
firmware/psci: fix application of sizeof to pointer
tpm: Check for integer overflow in tpm2_map_response_body()
parisc: Fix ptrace check on syscall return
parisc: Fix set_fixmap() on PA1.x CPUs
exfat: fix incorrect loading of i_blocks for large files
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
mmc: mtk-sd: Add wait dma stop done flow
char: xillybus: fix msg_ep UAF in xillyusb_probe()
ce/gf100: fix incorrect CE0 address calculation on some GPUs
scsi: qla2xxx: Fix use after free in eh_abort path
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
ocfs2: fix data corruption on truncate
libata: fix read log timeout value
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Input: elantench - fix misreporting trackpoint coordinates
Input: iforce - fix control-message timeout
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay

** Affects: linux-oem-5.14 (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux-oem-5.14 (Ubuntu Focal)
     Importance: Undecided
         Status: New


** Tags: kernel-stable-tracking-bug

** Changed in: linux-oem-5.14 (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux-oem-5.14 (Ubuntu Focal)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-5.14 in Ubuntu.
https://bugs.launchpad.net/bugs/1954780

Title:
  Focal update: v5.14.19 upstream stable release

Status in linux-oem-5.14 package in Ubuntu:
  Confirmed
Status in linux-oem-5.14 source package in Focal:
  New

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.14.19 upstream stable release
         from git://git.kernel.org/

              
  Linux 5.14.19
  media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
  media: videobuf2: always set buffer vb2 pointer
  x86/sev: Make the #VC exception stacks part of the default stacks storage
  x86/sev: Add an x86 version of cc_platform_has()
  arch/cc: Introduce a function to check for confidential computing features
  IMA: reject unknown hash algorithms in ima_get_hash_algo
  selftests/bpf: Fix also no-alu32 strobemeta selftest
  selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
  mmc: moxart: Fix null pointer dereference on pointer host
  ath10k: fix invalid dma_addr_t token assignment
  cifs: fix memory leak of smb3_fs_context_dup::server_hostname
  media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
  drm/amd/display: Look at firmware version to determine using dmub on dcn21
  pinctrl: amd: Handle wake-up interrupt
  pinctrl: amd: Add irq field data
  SUNRPC: Partial revert of commit 6f9f17287e78
  PCI: aardvark: Fix PCIe Max Payload Size setting
  PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
  drm/sun4i: Fix macros in sun8i_csc.h
  powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
  powerpc/pseries/mobility: ignore ibm, platform-facilities updates
  powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
  powerpc/security: Use a mutex for interrupt exit code patching
  powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
  powerpc/32e: Ignore ESR in instruction storage interrupt handler
  powerpc/bpf: Fix write protecting JIT code
  powerpc/vas: Fix potential NULL pointer dereference
  mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
  mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
  mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
  mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
  mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
  mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
  mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
  mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
  mtd: rawnand: fsmc: Fix use of SM ORDER
  remoteproc: imx_rproc: Fix rsc-table name
  remoteproc: imx_rproc: Fix ignoring mapping vdev regions
  remoteproc: Fix the wrong default value of is_iomem
  remoteproc: elf_loader: Fix loading segment when is_iomem true
  s390/cio: make ccw_device_dma_* more robust
  s390/ap: Fix hanging ioctl caused by orphaned replies
  s390/tape: fix timer initialization in tape_std_assign()
  s390/cio: check the subchannel validity for dev_busid
  s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
  PM: sleep: Avoid calling put_device() under dpm_list_mtx
  video: backlight: Drop maximum brightness override for brightness zero
  mfd: dln2: Add cell for initializing DLN2 ADC
  mm, oom: do not trigger out_of_memory from the #PF
  mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
  io-wq: serialize hash clear with wakeup
  io-wq: fix queue stalling race
  io-wq: ensure that hash wait lock is IRQ disabling
  memcg: prohibit unconditional exceeding the limit of dying tasks
  mm/filemap.c: remove bogus VM_BUG_ON
  9p/net: fix missing error check in p9_check_errors
  bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
  bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode
  net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
  dmaengine: bestcomm: fix system boot lockups
  dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
  dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
  erofs: fix unsafe pagevec reuse of hooked pclusters
  f2fs: fix UAF in f2fs_available_free_memory
  f2fs: include non-compressed blocks in compr_written_block
  f2fs: should use GFP_NOFS for directory inodes
  irqchip/sifive-plic: Fixup EOI failed when masked
  posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
  KVM: x86: move guest_pv_has out of user_access section
  x86/mce: Add errata workaround for Skylake SKX37
  MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
  MIPS: fix duplicated slashes for Platform file path
  parisc: Flush kernel data mapping in set_pte_at() when installing pte for 
user page
  parisc: Fix backtrace to always include init funtion names
  ARM: 9156/1: drop cc-option fallbacks for architecture selection
  ARM: 9155/1: fix early early_iounmap()
  smb3: do not error on fsync when readonly
  selftests/net: udpgso_bench_rx: fix port argument
  cxgb4: fix eeprom len when diagnostics not implemented
  net/smc: fix sk_refcnt underflow on linkdown and fallback
  vsock: prevent unnecessary refcnt inc for nonblocking connect
  net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
  net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
  net: stmmac: allow a tc-taprio base-time of zero
  net: hns3: allow configure ETS bandwidth of all TCs
  net: hns3: fix kernel crash when unload VF while it is being reset
  net: hns3: fix pfc packet number incorrect after querying pfc parameters
  net: hns3: fix ROCE base interrupt vector initialization bug
  net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
  net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
  seq_file: fix passing wrong private data
  drm/i915/fb: Fix rounding error in subsampled plane size calculation
  gve: Fix off by one in gve_tx_timeout()
  dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
  dmaengine: stm32-dma: fix burst in case of unaligned memory address
  bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
  bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
  bpf, sockmap: Fix race in ingress receive verdict with redirect to self
  bpf, sockmap: Remove unhash handler for BPF sockmap usage
  arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
  arm64: arm64_ftr_reg->name may not be a human-readable string
  nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
  llc: fix out-of-bound array index in llc_sk_dev_hash()
  perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
  zram: off by one in read_block_state()
  mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and 
zs_unregister_migration()
  can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for 
mcp251xfd_chip_rx_int_enable()
  can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
  Revert "drm/imx: Annotate dma-fence critical section in commit path"
  drm: fb_helper: improve CONFIG_FB dependency
  selftests/bpf/xdp_redirect_multi: Limit the tests in netns
  selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
  selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
  selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
  libbpf: Fix lookup_and_delete_elem_flags error reporting
  ACPI: PM: Fix device wakeup power reference counting error
  mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
  mfd: sprd: Add SPI device ID table
  mfd: cpcap: Add SPI device ID table
  mfd: core: Add missing of_node_put for loop iteration
  ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
  bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
  drm/ttm: remove ttm_bo_vm_insert_huge()
  net: phy: fix duplex out of sync problem while changing settings
  cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
  PCI: Do not enable AtomicOps on VFs
  ataflop: remove ataflop_probe_lock mutex
  block/ataflop: provide a helper for cleanup up an atari disk
  block/ataflop: add registration bool before calling del_gendisk()
  block/ataflop: use the blk_cleanup_disk() helper
  drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
  nvdimm/btt: do not call del_gendisk() if not needed
  PCI: j721e: Fix j721e_pcie_probe() error path
  ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
  ice: Fix not stopping Tx queues for VFs
  ice: Fix replacing VF hardware MAC to existing MAC filter
  net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
  net: dsa: tag_ocelot: break circular dependency with ocelot switch lib driver
  net: vlan: fix a UAF in vlan_dev_real_dev()
  openrisc: fix SMP tlb flush NULL pointer dereference
  ethtool: fix ethtool msg len calculation for pause stats
  kselftests/net: add missed icmp.sh test to Makefile
  net: davinci_emac: Fix interrupt pacing disable
  nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
  nbd: fix max value for 'first_minor'
  xen-pciback: Fix return in pm_ctrl_init()
  gpio: realtek-otto: fix GPIO line IRQ offset
  i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
  NFSv4: Fix a regression in nfs_set_open_stateid_locked()
  scsi: qla2xxx: Turn off target reset during issue_lip
  scsi: qla2xxx: Fix gnl list corruption
  scsi: target: core: Remove from tmr_list during LUN unlink
  ar7: fix kernel builds for compiler test
  watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
  m68k: set a default value for MEMORY_RESERVE
  signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
  dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
  netfilter: nfnetlink_queue: fix OOB when mac header was cleared
  soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
  auxdisplay: ht16k33: Fix frame buffer device blanking
  auxdisplay: ht16k33: Connect backlight to fbdev
  auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
  Fix user namespace leak
  NFS: Fix an Oops in pnfs_mark_request_commit()
  NFS: Fix up commit deadlocks
  dmaengine: stm32-dma: fix stm32_dma_get_max_width
  dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
  dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
  rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
  remoteproc: Fix a memory leak in an error handling path in 
'rproc_handle_vdev()'
  mtd: core: don't remove debugfs directory if device is in use
  mtd: rawnand: arasan: Prevent an unsupported configuration
  PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
  mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
  Input: st1232 - increase "wait ready" timeout
  fs: orangefs: fix error return code of orangefs_revalidate_lookup()
  NFS: Fix deadlocks in nfs_scan_commit_list()
  opp: Fix return in _opp_add_static_v2()
  PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
  PCI: aardvark: Don't spam about PIO Response Status
  drm/plane-helper: fix uninitialized variable reference
  drm/bridge/lontium-lt9611uxc: fix provided connector suport
  pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
  NFS: Fix dentry verifier races
  NFS: Ignore the directory size when marking for revalidation
  NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
  NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
  i2c: mediatek: fixing the incorrect register offset
  Input: ariel-pwrbutton - add SPI device ID table
  rtc: mcp795: Add SPI ID table
  remoteproc: imx_rproc: Fix TCM io memory type
  rtc: pcf2123: Add SPI ID table
  rtc: ds1390: Add SPI ID table
  rtc: ds1302: Add SPI ID table
  nfsd: don't alloc under spinlock in rpc_parse_scope_id
  mtd: rawnand: intel: Fix potential buffer overflow in probe
  rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
  apparmor: fix error check
  RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
  power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
  mips: cm: Convert to bitfield API to fix out-of-bounds access
  virtio_ring: check desc == NULL when using indirect with packed
  serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
  ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
  RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
  RDMA/hns: Fix initial arm_st of CQ
  ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
  powerpc: Don't provide __kernel_map_pages() without 
ARCH_SUPPORTS_DEBUG_PAGEALLOC
  ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
  powerpc/xmon: fix task state output
  powerpc/44x/fsp2: add missing of_node_put
  powerpc/book3e: Fix set_memory_x() and set_memory_nx()
  powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
  HID: u2fzero: properly handle timeouts in usb_submit_urb
  HID: u2fzero: clarify error check and length calculations
  clk: at91: clk-master: fix prescaler logic
  clk: at91: clk-master: check if div or pres is zero
  clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
  serial: xilinx_uartps: Fix race condition causing stuck TX
  phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
  phy: qcom-snps: Correct the FSEL_MASK
  phy: ti: gmii-sel: check of_get_address() for failure
  phy: qcom-qusb2: Fix a memory leak on probe
  ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
  pinctrl: equilibrium: Fix function addition in multiple groups
  arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
  arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
  arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
  soc: qcom: apr: Add of_node_put() before return
  soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
  firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
  powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
  usb: dwc2: drd: reset current session before setting the new one
  usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
  usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
  serial: imx: fix detach/attach of serial console
  scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
  scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
  soundwire: bus: stop dereferencing invalid slave pointer
  iio: adis: do not disabe IRQs in 'adis_init()'
  usb: typec: STUSB160X should select REGMAP_I2C
  iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
  soc: qcom: socinfo: add two missing PMIC IDs
  soc: qcom: rpmhpd: Make power_on actually enable the domain
  ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
  ASoC: cs42l42: Correct some register default values
  ASoC: cs42l42: Always configure both ASP TX channels
  ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
  ARM: dts: stm32: fix SAI sub nodes register range
  ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
  ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
  pinctrl: renesas: checker: Fix off-by-one bug in drive register check
  powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
  dyndbg: make dyndbg a known cli param
  staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
  staging: most: dim2: do not double-register the same device
  usb: musb: select GENERIC_PHY instead of depending on it
  RDMA/mlx4: Return missed an error if device doesn't support steering
  scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
  power: supply: max17040: fix null-ptr-deref in max17040_probe()
  power: supply: rt5033_battery: Change voltage values to µV
  usb: gadget: hid: fix error code in do_config()
  serial: 8250_dw: Drop wrong use of ACPI_PTR()
  powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
  powerpc: fix unbalanced node refcount in check_kvm_guest()
  video: fbdev: chipsfb: use memset_io() instead of memset()
  powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype 
for 'create_section_mapping'
  clk: at91: check pmc node status before registering syscore ops
  memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
  soc/tegra: Fix an error handling path in tegra_powergate_power_up()
  iio: st_pressure_spi: Add missing entries SPI to device ID table
  ASoC: SOF: topology: do not power down primary core during topology removal
  arm: dts: omap3-gta04a4: accelerometer irq fix
  driver core: Fix possible memory leak in device_link_add()
  scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
  scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real 
interrupt
  power: reset: at91-reset: check properly the return value of devm_of_iomap
  soundwire: debugfs: use controller id and link_id for debugfs
  ALSA: hda: Use position buffer for SKL+ again
  ALSA: hda: Reduce udelay() at SKL+ position reporting
  iommu/dma: Fix arch_sync_dma for map
  arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
  iommu/mediatek: Fix out-of-range warning with clang
  arm64: dts: renesas: beacon: Fix Ethernet PHY mode
  arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
  ASoC: wcd9335: Use correct version to initialize Class H
  JFS: fix memleak in jfs_mount
  MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
  scsi: dc395: Fix error case unwinding
  soc: qcom: llcc: Disable MMUHWT retention
  arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
  ARM: dts: at91: tse850: the emac<->phy interface is rmii
  bus: ti-sysc: Fix timekeeping_suspended warning on resume
  arm64: dts: meson-sm1: Fix the pwm regulator supply properties
  arm64: dts: meson-g12b: Fix the pwm regulator supply properties
  arm64: dts: meson-g12a: Fix the pwm regulator supply properties
  arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
  arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie 
node
  arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
  arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
  RDMA/bnxt_re: Fix query SRQ failure
  ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
  arm64: dts: rockchip: Fix GPU register width for RK3328
  arm64: dts: rockchip: fix rk3568 mbi-alias
  ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
  scsi: pm80xx: Fix lockup in outbound queue management
  clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
  arm64: dts: broadcom: bcm4908: Fix UART clock name
  ARM: dts: BCM5301X: Fix memory nodes names
  RDMA/rxe: Fix wrong port_cap_flags
  iio: st_sensors: disable regulators after device unregistration
  arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
  of: unittest: fix EXPECT text for gpio hog errors
  bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
  bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
  cgroup: Fix rootcg cpu.stat guest double counting
  skmsg: Lose offset info in sk_psock_skb_ingress
  ibmvnic: delay complete()
  ibmvnic: Process crqs after enabling interrupts
  ibmvnic: don't stop queue in xmit
  udp6: allow SO_MARK ctrl msg to affect routing
  selftests/bpf: Fix fclose/pclose mismatch in test_progs
  crypto: pcrypt - Delay write to padata->info
  selftests: net: bridge: update IGMP/MLD membership interval value
  net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
  net: phylink: avoid mvneta warning when setting pause parameters
  ipmi: kcs_bmc: Fix a memory leak in the error handling path of 
'kcs_bmc_serio_add_device()'
  net: amd-xgbe: Toggle PLL settings during rate change
  sctp: return true only for pathmtu update in sctp_transport_pl_toobig
  sctp: subtract sctphdr len in sctp_transport_pl_hlen
  sctp: reset probe_timer in sctp_transport_pl_update
  sctp: allow IP fragmentation when PLPMTUD enters Error state
  selftests/bpf: Fix memory leak in test_ima
  selftests/bpf: Fix fd cleanup in sk_lookup test
  drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
  drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
  wcn36xx: Channel list update before hardware scan
  bpf: Fixes possible race in update_prog_stats() for 32bit arches
  wcn36xx: Fix discarded frames due to wrong sequence number
  wcn36xx: add proper DMA memory barriers in rx path
  libertas: Fix possible memory leak in probe and disconnect
  libertas_tf: Fix possible memory leak in probe and disconnect
  KVM: s390: Fix handle_sske page fault handling
  samples/kretprobes: Fix return value if register_kretprobe() failed
  x86: Fix __get_wchan() for !STACKTRACE
  sched: Add wrapper for get_wchan() to keep task blocked
  spi: spi-rpc-if: Check return value of rpcif_sw_init()
  cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
  tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
  libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
  tpm_tis_spi: Add missing SPI ID
  tpm: fix Atmel TPM crash caused by too frequent queries
  blk-cgroup: synchronize blkg creation against policy deactivation
  block: ataflop: more blk-mq refactoring fixes
  ath10k: fix module load regression with iram-recovery feature
  ARM: 9142/1: kasan: work around LPAE build warning
  net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
  irq: mips: avoid nested irq_enter()
  KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
  KVM: s390: pv: avoid double free of sida page
  s390/uv: fully validate the VMA before calling follow_page()
  s390/mm: fix VMA and page table handling code in storage key handling 
functions
  s390/mm: validate VMA in PGSTE manipulation functions
  s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
  s390/gmap: validate VMA in __gmap_zap()
  mt76: mt7615: mt7622: fix ibss and meshpoint
  libbpf: Fix BTF header parsing checks
  libbpf: Fix overflow in BTF sanity checks
  bpftool: Avoid leaking the JSON writer prepared for program metadata
  libbpf: Fix memory leak in btf__dedup()
  KVM: selftests: Fix nested SVM tests when built with clang
  smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
  crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
  drm/msm: Fix potential NULL dereference in DPU SSPP
  x86/sev: Fix stack type check in vc_switch_off_ist()
  clocksource/drivers/timer-ti-dm: Select TIMER_OF
  PM: hibernate: fix sparse warnings
  nvme-rdma: fix error code in nvme_rdma_setup_ctrl
  nbd: Fix use-after-free in pid_show
  phy: micrel: ksz8041nl: do not use power down mode
  net: enetc: unmap DMA in enetc_send_cmd()
  iwlwifi: pnvm: read EFI data only if long enough
  iwlwifi: pnvm: don't kmemdup() more than we have
  iwlwifi: mvm: reset PM state on unsuccessful resume
  mwifiex: Send DELBA requests according to spec
  rsi: stop thread firstly in rsi_91x_init() error handling
  mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
  mt76: mt7915: fix sta_rec_wtbl tag len
  mt76: connac: fix possible NULL pointer dereference in 
mt76_connac_get_phy_mode_v2
  mt76: mt7615: fix monitor mode tear down crash
  mt76: mt7921: fix retrying release semaphore without end
  mt76: mt7915: fix possible infinite loop release semaphore
  mt76: mt7615: fix hwmon temp sensor mem use-after-free
  mt76: mt7915: fix hwmon temp sensor mem use-after-free
  mt76: mt7921: always wake device if necessary in debugfs
  mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
  mt76: mt7921: fix firmware usage of RA info using legacy rates
  mt76: mt7921: report HE MU radiotap
  mt76: overwrite default reg_ops if necessary
  mt76: connac: fix GTK rekey offload failure on WPA mixed mode
  mt76: mt7921: fix dma hang in rmmod
  mt76: mt7915: fix bit fields for HT rate idx
  mt76: mt7915: fix potential overflow of eeprom page index
  mt76: mt7921: Fix out of order process by invalid event pkt
  mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
  mt76: mt7921: fix survey-dump reporting
  mt76: fix build error implicit enumeration conversion
  mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
  mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
  mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
  mt76: mt7921: fix endianness warning in mt7921_update_txs
  mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
  mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
  drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
  ACPI: PM: Fix sharing of wakeup power resources
  ACPI: PM: Turn off unused wakeup power resources
  platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
  block: ataflop: fix breakage introduced at blk-mq refactoring
  mmc: mxs-mmc: disable regulator on error and in the remove function
  media: ir_toy: assignment to be16 should be of correct type
  media: ivtv: fix build for UML
  mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
  net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  drm/msm: uninitialized variable in msm_gem_import()
  drm/msm: fix potential NULL dereference in cleanup
  drm/msm: potential error pointer dereference in init()
  drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
  thermal/core: fix a UAF bug in __thermal_cooling_device_register()
  crypto: octeontx2 - set assoclen in aead_do_fallback()
  tcp: switch orphan_count to bare per-cpu counters
  x86: Fix get_wchan() to support the ORC unwinder
  net: tulip: winbond-840: fix build for UML
  net: fealnx: fix build for UML
  kernel/sched: Fix sched_fork() access an invalid sched_task_group
  ath10k: fix max antenna gain unit
  hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
  hwmon: Fix possible memleak in __hwmon_device_register()
  net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
  memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
  memstick: avoid out-of-range warning
  mmc: sdhci-omap: Fix context restore
  mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
  gve: Track RX buffer allocation failures
  gve: Recover from queue stall due to missed IRQ
  b43: fix a lower bounds test
  b43legacy: fix a lower bounds test
  IMA: block writes of the security.ima xattr with unsupported algorithms
  hwrng: mtk - Force runtime pm ops for sleep ops
  crypto: qat - disregard spurious PFVF interrupts
  crypto: qat - detect PFVF collision after ACK
  crypto: ccree - avoid out-of-range warnings from clang
  media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
  media: venus: fix vpp frequency calculation for decoder
  netfilter: nft_dynset: relax superfluous check on set updates
  rcu: Always inline rcu_dynticks_task*_{enter,exit}()
  EDAC/amd64: Handle three rank interleaving mode
  x86/insn: Use get_unaligned() instead of memcpy()
  PM: EM: Fix inefficient states detection
  ath9k: Fix potential interrupt storm on queue reset
  ath10k: Don't always treat modem stop events as crashes
  media: em28xx: Don't use ops->suspend if it is NULL
  cpuidle: Fix kobject memory leaks in error paths
  drm: fb_helper: fix CONFIG_FB dependency
  crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
  kprobes: Do not use local variable when creating debugfs file
  scs: Release kasan vmalloc poison in scs_free process
  media: atmel: fix the ispck initialization
  media: cx23885: Fix snd_card_free call on null card pointer
  media: tm6000: Avoid card name truncation
  media: si470x: Avoid card name truncation
  media: radio-wl1273: Avoid card name truncation
  media: sun6i-csi: Allow the video device to be open multiple times
  media: i2c: ths8200 needs V4L2_ASYNC
  media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
  media: mtk-vpu: Fix a resource leak in the error handling path of 
'mtk_vpu_probe()'
  media: TDA1997x: handle short reads of hdmi info frame.
  media: mtk-vcodec: venc: fix return value when start_streaming fails
  media: v4l2-ioctl: S_CTRL output the right value
  media: imx258: Fix getting clock frequency
  media: dvb-usb: fix ununit-value in az6027_rc_query
  media: ttusb-dec: avoid release of non-acquired mutex
  media: cxd2880-spi: Fix a null pointer dereference on error handling path
  media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
  media: em28xx: add missing em28xx_close_extension
  libbpf: Fix skel_internal.h to set errno on loader retval < 0
  drm/amdgpu: fix warning for overflow check
  arm64: mm: update max_pfn after memory hotplug
  drm/ttm: stop calling tt_swapin in vm_access
  ath10k: sdio: Add missing BH locking around napi_schdule()
  ath10k: Fix missing frame timestamp for beacon/probe-resp
  gve: DQO: avoid unused variable warnings
  ath11k: Fix memory leak in ath11k_qmi_driver_event_work
  ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
  ath11k: Avoid race during regd updates
  ath11k: fix some sleeping in atomic bugs
  net: dsa: rtl8366: Fix a bug in deleting VLANs
  net: dsa: rtl8366rb: Fix off-by-one bug
  cfg80211: always free wiphy specific regdomain
  fortify: Fix dropped strcpy() compile-time write overflow check
  rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
  qed: Don't ignore devlink allocation failures
  bnxt_en: Check devlink allocation and registration status
  crypto: caam - disable pkc for non-E SoCs
  drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
  Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
  wilc1000: fix possible memory leak in cfg_scan_result()
  wcn36xx: Fix Antenna Diversity Switching
  cgroup: Make rebind_subsystems() disable v2 controllers all at once
  spi: Fixed division by zero warning
  drm: bridge: it66121: Fix return value it66121_probe
  net: phylink: don't call netif_carrier_off() with NULL netdev
  net: net_namespace: Fix undefined member in key_remove_domain()
  lockdep: Let lock_is_held_type() detect recursive read as read
  virtio-gpu: fix possible memory allocation failure
  drm/v3d: fix wait for TMU write combiner flush
  objtool: Handle __sanitize_cov*() tail calls
  x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
  MIPS: lantiq: dma: fix burst length for DEU
  rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
  libbpf: Don't crash on object files with no symbol tables
  Bluetooth: fix init and cleanup of sco_conn.timeout_work
  drm/bridge: it66121: Wait for next bridge to be probed
  drm/bridge: it66121: Initialize {device,vendor}_ids
  drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
  fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
  selftests/bpf: Fix strobemeta selftest regression
  netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
  parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
  parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
  erofs: don't trigger WARN() when decompression fails
  task_stack: Fix end_of_stack() for architectures with upwards-growing stack
  parisc: fix warning in flush_tlb_all
  perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
  selftests/core: fix conflicting types compile error for close_range()
  drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
  x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
  ftrace: do CPU checking after preemption disabled
  Revert "wcn36xx: Enable firmware link monitoring"
  wcn36xx: Fix packet drop on resume
  wcn36xx: Correct band/freq reporting on RX
  spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in 
bcm_qspi_probe()
  btrfs: do not take the uuid_mutex in btrfs_rm_device
  btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
  ACPI: resources: Add one more Medion model in IRQ override quirk
  ACPI: AC: Quirk GK45 to skip reading _PSR
  net: annotate data-race in neigh_output()
  vrf: run conntrack only in context of lower/physdev for locally generated 
packets
  tools/latency-collector: Use correct size when writing queue_full_warning
  ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
  gfs2: Fix glock_hash_walk bugs
  gfs2: Cancel remote delete work asynchronously
  can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to 
unsigned int
  gre/sit: Don't generate link-local addr if addr_gen_mode is 
IN6_ADDR_GEN_MODE_NONE
  ARM: clang: Do not rely on lr register for stacktrace
  smackfs: use __GFP_NOFAIL for smk_cipso_doi()
  iwlwifi: mvm: disable RX-diversity in powersave
  selftests/bpf: Fix perf_buffer test on system with offline cpus
  selftests: kvm: fix mismatched fclose() after popen()
  PM: hibernate: Get block device exclusively in swsusp_check()
  arm64: vdso32: suppress error message for 'make mrproper'
  nvme: drop scan_lock and always kick requeue list when removing namespaces
  nvmet-tcp: fix use-after-free when a port is removed
  nvmet-rdma: fix use-after-free when a port is removed
  nvmet: fix use-after-free when a port is removed
  drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
  media: allegro: ignore interrupt if mailbox is not initialized
  block: remove inaccurate requeue check
  iwlwifi: change all JnP to NO-160 configuration
  mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
  mt76: mt7915: fix an off-by-one bound check
  tracing/cfi: Fix cmp_entries_* functions signature mismatch
  workqueue: make sysfs of unbound kworker cpumask more clever
  lib/xz: Validate the value before assigning it to an enum variable
  lib/xz: Avoid overlapping memcpy() with invalid input with in-place 
decompression
  locking/rwsem: Disable preemption for spinning region
  memstick: r592: Fix a UAF bug when removing the driver
  md: update superblock after changing rdev flags in state_store
  floppy: fix calling platform_device_unregister() on invalid drives
  block: bump max plugged deferred size from 16 to 32
  thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
  drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
  thermal/core: Fix null pointer dereference in thermal_release()
  leaking_addresses: Always print a trailing newline
  net: phy: micrel: make *-skew-ps check more lenient
  drm/amdkfd: fix resume error when iommu disabled in Picasso
  drm/amd/display: fix null pointer deref when plugging in display
  ACPI: scan: Release PM resources blocked by unused objects
  ACPI: battery: Accept charges over the design capacity as full
  iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
  mmc: moxart: Fix reference count leaks in moxart_probe
  ath: dfs_pattern_detector: Fix possible null-pointer dereference in 
channel_detector_create()
  tracing: Disable "other" permission bits in the tracefs files
  tracefs: Have tracefs directories not set OTH permission bits by default
  drm/amdkfd: rm BO resv on validation to avoid deadlock
  net-sysfs: try not to restart the syscall if it will fail eventually
  media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
  media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
  media: ipu3-imgu: imgu_fmt: Handle properly try
  media: imx-jpeg: Fix possible null pointer dereference
  ice: Move devlink port to PF/VF struct
  cpufreq: Make policy min/max hard requirements
  ACPICA: Avoid evaluating methods too early during system resume
  kselftests/sched: cleanup the child processes
  fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
  ipmi: Disable some operations during a panic
  media: rcar-csi2: Add checking to rcsi2_start_receiver()
  brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
  rtw88: fix RX clock gate setting while fifo dump
  ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
  media: mceusb: return without resubmitting URB in case of -EPROTO error.
  media: rcar-vin: Use user provided buffers when starting
  media: imx: set a media_device bus_info string
  media: videobuf2: rework vb2_mem_ops API
  media: s5p-mfc: Add checking to s5p_mfc_probe().
  media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
  media: vidtv: Fix memory leak in remove
  media: uvcvideo: Set unique vdev name based in type
  media: uvcvideo: Return -EIO for control errors
  media: uvcvideo: Set capability in s_param
  media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
  media: atomisp: Fix error handling in probe
  media: netup_unidvb: handle interrupt properly according to the firmware
  media: mt9p031: Fix corrupted frame after restarting stream
  octeontx2-pf: Enable promisc/allmulti match MCAM entries.
  ath10k: high latency fixes for beacon buffer
  ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
  ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
  ath11k: Avoid reg rules update during firmware recovery
  selftests: net: fib_nexthops: Wait before checking reported idle time
  drm/amd/display: Fix null pointer dereference for encoders
  drm/amdgpu: Fix MMIO access page fault
  fscrypt: allow 256-bit master keys with AES-256-XTS
  spi: Check we have a spi_device_id for each DT compatible
  mwifiex: Properly initialize private structure on interface type changes
  mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
  x86: Increase exception stack sizes
  x86/mm/64: Improve stack overflow warnings
  crypto: aesni - check walk.nbytes instead of err
  ath11k: Align bss_chan_info structure with firmware
  smackfs: Fix use-after-free in netlbl_catmap_walk()
  rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
  ACPI: resources: Add DMI-based legacy IRQ override quirk
  net: sched: update default qdisc visibility after Tx queue cnt changes
  locking/lockdep: Avoid RCU-induced noinstr fail
  MIPS: lantiq: dma: reset correct number of channel
  MIPS: lantiq: dma: add small delay after reset
  platform/x86: wmi: do not fail if disabling fails
  rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
  drm/panel-orientation-quirks: add Valve Steam Deck
  Bluetooth: fix use-after-free error in lock_sock_nested()
  Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
  drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
  drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
  drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
  dma-buf: WARN on dmabuf release with pending attachments
  component: do not leave master devres group open after bind
  power: supply: max17042_battery: Clear status bits in interrupt handler
  USB: chipidea: fix interrupt deadlock
  USB: iowarrior: fix control-message timeouts
  most: fix control-message timeouts
  serial: 8250: fix racy uartclk update
  USB: serial: keyspan: fix memleak on probe errors
  Documentation:devicetree:bindings:iio:dac: Fix val
  iio: ad5770r: make devicetree property reading consistent
  iio: dac: ad5446: Fix ad5622_write() return value
  drivers: iio: dac: ad5766: Fix dt property name
  iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
  iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
  iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
  iio: buffer: check return value of kstrdup_const()
  coresight: trbe: Defer the probe on offline CPUs
  coresight: trbe: Fix incorrect access of the sink specific data
  coresight: cti: Correct the parameter for pm_runtime_put
  pinctrl: core: fix possible memory leak in pinctrl_enable()
  cifs: set a minimum of 120s for next dns resolution
  cifs: To match file servers, make sure the server hostname matches
  quota: correct error number in free_dqentry()
  quota: check block number when reading the block in quota file
  PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
  PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
  PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
  PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated 
bridge
  PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
  PCI: aardvark: Fix return value of MSI domain .alloc() method
  PCI: aardvark: Fix configuring Reference clock
  PCI: aardvark: Fix reporting Data Link Layer Link Active
  PCI: aardvark: Do not unmask unused interrupts
  PCI: aardvark: Fix checking for link up via LTSSM state
  PCI: aardvark: Do not clear status bits of masked interrupts
  cxl/pci: Fix NULL vs ERR_PTR confusion
  PCI: cadence: Add cdns_plat_pcie_probe() missing return
  PCI: pci-bridge-emul: Fix emulation of W1C bits
  ovl: fix use after free in struct ovl_aio_req
  xen/balloon: add late_initcall_sync() for initial ballooning done
  ifb: fix building without CONFIG_NET_CLS_ACT
  serial: core: Fix initializing and restoring termios speed
  ring-buffer: Protect ring_buffer_reset() from reentrancy
  powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
  iio: adc: tsc2046: fix scan interval warning
  can: j1939: j1939_can_recv(): ignore messages with invalid source address
  can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
  KVM: nVMX: Handle dynamic MSR intercept toggling
  KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
  KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
  KVM: x86: Fix recording of guest steal time / preempted status
  KVM: arm64: Extract ESR_ELx.EC only
  iio: core: check return value when calling dev_set_name()
  iio: core: fix double free in iio_device_unregister_sysfs()
  power: supply: max17042_battery: use VFSOC for capacity when no rsns
  power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
  mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
  soc: fsl: dpio: use the combined functions to protect critical zone
  soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
  soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
  signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
  memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
  signal: Remove the bogus sigkill_pending in ptrace_stop
  ASoC: tegra: Restore AC97 support
  ASoC: tegra: Set default card name for Trimslice
  RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
  perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
  perf/x86/intel/uncore: Fix invalid unit check
  perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
  rsi: Fix module dev_oper_mode parameter description
  rsi: fix rate mask set leading to P2P failure
  rsi: fix key enabled check causing unwanted encryption for vap_id > 0
  rsi: fix occasional initialisation failure with BT coex
  wcn36xx: handle connection loss indication
  libata: fix checking of DMA state
  mwifiex: Try waking the firmware until we get an interrupt
  mwifiex: Read a PCI register after writing the TX ring write pointer
  PM: sleep: Do not let "syscore" devices runtime-suspend during system 
transitions
  wcn36xx: Fix (QoS) null data frame bitrate/modulation
  wcn36xx: Fix tx_status mechanism
  wcn36xx: Fix HT40 capability for 2Ghz band
  HID: surface-hid: Allow driver matching for target ID 1 devices
  HID: surface-hid: Use correct event registry for managing HID events
  mt76: mt7615: fix skb use-after-free on mac reset
  platform/surface: aggregator_registry: Add support for Surface Laptop Studio
  ifb: Depend on netfilter alternatively to tc
  evm: mark evm_fixmode as __ro_after_init
  rtl8187: fix control-message timeouts
  PCI: Mark Atheros QCA6174 to avoid bus reset
  ath10k: fix division by zero in send path
  ath10k: fix control-message timeout
  ath6kl: fix control-message timeout
  ath6kl: fix division by zero in send path
  mwifiex: fix division by zero in fw download path
  EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
  regulator: dt-bindings: samsung,s5m8767: correct 
s5m8767,pmic-buck-default-dvs-idx property
  regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is 
disabled
  hwmon: (pmbus/lm25066) Add offset coefficients
  md/raid1: only allocate write behind bio for WriteMostly device
  ipmi:watchdog: Set panic count to proper value on a panic
  selinux: fix race condition when computing ocontext SIDs
  ia64: kprobes: Fix to pass correct trampoline address to the handler
  KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ 
handling
  KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
  btrfs: call btrfs_check_rw_degradable only if there is a missing device
  btrfs: fix lost error handling when replaying directory deletes
  btrfs: clear MISSING device status bit in btrfs_close_one_device
  tools/testing/selftests/vm/split_huge_page_test.c: fix application of sizeof 
to pointer
  net/smc: Correct spelling mistake to TCPF_SYN_RECV
  net/smc: Fix smc_link->llc_testlink_time overflow
  nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
  vmxnet3: do not stop tx queues after netif_device_detach()
  r8169: Add device 10ec:8162 to driver r8169
  net: hns3: ignore reset event before initialization process is done
  net: hns3: change hclge/hclgevf workqueue to WQ_UNBOUND mode
  nvmet-tcp: fix header digest verification
  block: schedule queue restart after BLK_STS_ZONE_RESOURCE
  drm: panel-orientation-quirks: Add quirk for GPD Win3
  watchdog: Fix OMAP watchdog early handling
  net: multicast: calculate csum of looped-back and forwarded packets
  spi: spl022: fix Microwire full duplex mode
  nvmet-tcp: fix a memory leak when releasing a queue
  xen/netfront: stop tx queues during live migration
  gpio: mlxbf2.c: Add check for bgpio_init failure
  bpf: Prevent increasing bpf_jit_limit above max
  bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
  bpf: Define bpf_jit_alloc_exec_limit for riscv JIT
  fcnal-test: kill hanging ping/nettest binaries on cleanup
  drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
  spi: altera: Change to dynamic allocation of spi id
  mmc: winbond: don't build on M68K
  reset: socfpga: add empty driver allowing consumers to probe
  ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
  hyperv/vmbus: include linux/bitops.h
  sfc: Don't use netif_info before net_device setup
  sfc: Export fibre-specific supported link modes
  cavium: Fix return values of the probe function
  mISDN: Fix return values of the probe function
  scsi: qla2xxx: Fix unmap of already freed sgl
  scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
  cavium: Return negative value when pci_alloc_irq_vectors() fails
  net: mscc: ocelot: Add of_node_put() before goto
  net: sparx5: Add of_node_put() before goto
  ptp: fix error print of ptp_kvm on X86_64 platform
  ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
  ASoC: cs42l42: Ensure 0dB full scale volume is used for headsets
  ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
  KVM: arm64: Report corrupted refcount at EL2
  x86/iopl: Fake iopl(3) CLI/STI usage
  x86/irq: Ensure PI wakeup handler is unregistered before module unload
  x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
  x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
  fuse: fix page stealing
  ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
  ext4: ensure enough credits in ext4_ext_shift_path_extents
  ext4: fix lazy initialization next schedule time computation in more granular 
unit
  ALSA: timer: Unconditionally unlink slave instances, too
  ALSA: timer: Fix use-after-free problem
  ALSA: PCM: Fix NULL dereference at mmap checks
  ALSA: synth: missing check for possible NULL after the call to kstrdup
  ALSA: hda: Free card instance properly at probe errors
  ALSA: usb-audio: Add registration quirk for JBL Quantum 400
  ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
  ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
  ALSA: mixer: oss: Fix racy access to slots
  ALSA: line6: fix control and interrupt message timeouts
  ALSA: 6fire: fix control and bulk message timeouts
  ALSA: ua101: fix division by zero at probe
  ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
  ALSA: hda/realtek: Add quirk for ASUS UX550VE
  ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
  ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
  ALSA: hda/realtek: Add quirk for Clevo PC70HS
  ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
  ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
  media: v4l2-ioctl: Fix check_ext_ctrls
  media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
  media: rkvdec: Support dynamic resolution changes
  media: ite-cir: IR receiver stop working after receive overflow
  media: rkvdec: Do not override sizeimage for output format
  crypto: s5p-sss - Add error handling in s5p_aes_probe()
  firmware/psci: fix application of sizeof to pointer
  tpm: Check for integer overflow in tpm2_map_response_body()
  parisc: Fix ptrace check on syscall return
  parisc: Fix set_fixmap() on PA1.x CPUs
  exfat: fix incorrect loading of i_blocks for large files
  mmc: dw_mmc: Dont wait for DRTO on Write RSP error
  mmc: mtk-sd: Add wait dma stop done flow
  char: xillybus: fix msg_ep UAF in xillyusb_probe()
  ce/gf100: fix incorrect CE0 address calculation on some GPUs
  scsi: qla2xxx: Fix use after free in eh_abort path
  scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
  scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
  scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
  scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
  scsi: core: Avoid leaving shost->last_reset with stale value if EH does not 
run
  ocfs2: fix data corruption on truncate
  libata: fix read log timeout value
  Input: i8042 - Add quirk for Fujitsu Lifebook T725
  Input: elantench - fix misreporting trackpoint coordinates
  Input: iforce - fix control-message timeout
  usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
  xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-5.14/+bug/1954780/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to