** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
+        upstream stable patchset 2023-04-04
+        from git://git.kernel.org/
  
-        upstream stable patchset 2023-04-04
-        from git://git.kernel.org/
+ memory: tegra: Remove clients SID override programming
+ memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()
+ memory: mvebu-devbus: Fix missing clk_disable_unprepare in 
mvebu_devbus_probe()
+ dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG
+ arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property
+ ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
+ ARM: dts: imx7d-pico: Use 'clock-frequency'
+ ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
+ arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
+ ARM: imx: add missing of_node_put()
+ HID: intel_ish-hid: Add check for ishtp_dma_tx_map
+ arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity
+ soc: imx8m: Fix incorrect check for of_clk_get_by_name()
+ reset: uniphier-glue: Fix possible null-ptr-deref
+ EDAC/highbank: Fix memory leak in highbank_mc_probe()
+ firmware: arm_scmi: Harden shared memory access in fetch_response
+ firmware: arm_scmi: Harden shared memory access in fetch_notification
+ tomoyo: fix broken dependency on *.conf.default
+ RDMA/core: Fix ib block iterator counter overflow
+ IB/hfi1: Reject a zero-length user expected buffer
+ IB/hfi1: Reserve user expected TIDs
+ IB/hfi1: Fix expected receive setup error exit issues
+ IB/hfi1: Immediately remove invalid memory from hardware
+ IB/hfi1: Remove user expected buffer invalidate race
+ affs: initialize fsdata in affs_truncate()
+ PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
+ arm64: dts: qcom: msm8992: Don't use sfpb mutex
+ arm64: dts: qcom: msm8992-libra: Fix the memory map
+ phy: ti: fix Kconfig warning and operator precedence
+ NFSD: fix use-after-free in nfsd4_ssc_setup_dul()
+ ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
+ amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
+ amd-xgbe: Delay AN timeout during KR training
+ bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
+ phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in 
rockchip_usb2phy_power_on()
+ net: nfc: Fix use-after-free in local_cleanup()
+ net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
+ net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
+ sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb
+ gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock
+ gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
+ pinctrl: rockchip: fix reading pull type on rk3568
+ net: stmmac: Fix queue statistics reading
+ net/sched: sch_taprio: fix possible use-after-free
+ l2tp: Serialize access to sk_user_data with sk_callback_lock
+ l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
+ l2tp: convert l2tp_tunnel_list to idr
+ l2tp: close all race conditions in l2tp_tunnel_register()
+ net: usb: sr9700: Handle negative len
+ net: mdio: validate parameter addr in mdiobus_get_phy()
+ HID: check empty report_list in hid_validate_values()
+ HID: check empty report_list in bigben_probe()
+ net: stmmac: fix invalid call to mdiobus_get_phy()
+ pinctrl: rockchip: fix mux route data for rk3568
+ HID: revert CHERRY_MOUSE_000C quirk
+ usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
+ usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
+ Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
+ net: ipa: disable ipa interrupt during suspend
+ net/mlx5: E-switch, Fix setting of reserved fields on 
MODIFY_SCHEDULING_ELEMENT
+ net: mlx5: eliminate anonymous module_init & module_exit
+ drm/panfrost: fix GENERIC_ATOMIC64 dependency
+ dmaengine: Fix double increment of client_count in dma_chan_get()
+ net: macb: fix PTP TX timestamp failure due to packet padding
+ virtio-net: correctly enable callback during start_xmit
+ l2tp: prevent lockdep issue in l2tp_tunnel_register()
+ HID: betop: check shape of output reports
+ cifs: fix potential deadlock in cache_refresh_path()
+ dmaengine: xilinx_dma: call of_node_put() when breaking out of 
for_each_child_of_node()
+ phy: phy-can-transceiver: Skip warning if no "max-bitrate"
+ drm/amd/display: fix issues with driver unload
+ nvme-pci: fix timeout request state check
+ tcp: avoid the lookup process failing to get sk in ehash table
+ ptdma: pt_core_execute_cmd() should use spinlock
+ device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()
+ w1: fix deadloop in __w1_remove_master_device()
+ w1: fix WARNING after calling w1_process()
+ driver core: Fix test_async_probe_init saves device in wrong array
+ selftests/net: toeplitz: fix race on tpacket_v3 block close
+ net: dsa: microchip: ksz9477: port map correction in ALU table entry register
+ thermal/core: Remove duplicate information when an error occurs
+ thermal/core: Rename 'trips' to 'num_trips'
+ thermal: Validate new state in cur_state_store()
+ thermal/core: fix error code in __thermal_cooling_device_register()
+ thermal: core: call put_device() only after device_register() fails
+ net: stmmac: enable all safety features by default
+ tcp: fix rate_app_limited to default to 1
+ scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
+ cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
+ kcsan: test: don't put the expect array on the stack
+ cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist
+ ASoC: fsl_micfil: Correct the number of steps on SX controls
+ net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem
+ drm: Add orientation quirk for Lenovo ideapad D330-10IGL
+ s390/debug: add _ASM_S390_ prefix to header guard
+ s390: expicitly align _edata and _end symbols on page boundary
+ perf/x86/msr: Add Emerald Rapids
+ perf/x86/intel/uncore: Add Emerald Rapids
+ cpufreq: armada-37xx: stop using 0 as NULL pointer
+ ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
+ ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
+ spi: spidev: remove debug messages that access spidev->spi without locking
+ KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
+ scsi: hisi_sas: Set a port invalid only if there are no devices attached when 
refreshing port id
+ r8152: add vendor/device ID pair for Microsoft Devkit
+ platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
+ platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
+ lockref: stop doing cpu_relax in the cmpxchg loop
+ firmware: coreboot: Check size of table entry and use flex-array
+ drm/i915: Remove unused variable
+ x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
+ panic: Separate sysctl logic from CONFIG_SMP
+ exit: Put an upper limit on how often we can oops
+ exit: Expose "oops_count" to sysfs
+ exit: Allow oops_limit to be disabled
+ panic: Consolidate open-coded panic_on_warn checks
+ panic: Introduce warn_limit
+ panic: Expose "warn_count" to sysfs
+ docs: Fix path paste-o for /sys/kernel/warn_count
+ exit: Use READ_ONCE() for all oops/warn limit reads
+ Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
+ drm/amdgpu: complete gfxoff allow signal during suspend without delay
+ scsi: hpsa: Fix allocation size for scsi_host_alloc()
+ module: Don't wait for GOING modules
+ tracing: Make sure trace_printk() can output as soon as it can be used
+ trace_events_hist: add check for return value of 'create_hist_field'
+ ftrace/scripts: Update the instructions for ftrace-bisect.sh
+ cifs: Fix oops due to uncleared server->smbd_conn in reconnect
+ i2c: mv64xxx: Remove shutdown method from driver
+ i2c: mv64xxx: Add atomic_xfer method to driver
+ ksmbd: add max connections parameter
+ ksmbd: do not sign response to session request for guest login
+ ksmbd: downgrade ndr version error message to debug
+ ksmbd: limit pdu length size according to connection status
+ ovl: fail on invalid uid/gid mapping at copy up
+ KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
+ KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation
+ thermal: intel: int340x: Protect trip temperature from concurrent updates
+ ipv6: fix reachability confirmation with proxy_ndp
+ ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
+ EDAC/device: Respect any driver-supplied workqueue polling value
+ EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
+ net: mana: Fix IRQ name - add PCI and queue number
+ scsi: ufs: core: Fix devfreq deadlocks
+ i2c: designware: use casting of u64 in clock multiplication to avoid overflow
+ netlink: prevent potential spectre v1 gadgets
+ net: fix UaF in netns ops registration error path
+ drm/i915/selftest: fix intel_selftest_modify_policy argument types
+ netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
+ netfilter: nft_set_rbtree: skip elements in transaction from garbage 
collection
+ netlink: annotate data races around nlk->portid
+ netlink: annotate data races around dst_portid and dst_group
+ netlink: annotate data races around sk_state
+ ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
+ ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
+ netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
+ netrom: Fix use-after-free of a listening socket.
+ net/sched: sch_taprio: do not schedule in taprio_reset()
+ sctp: fail if no bound addresses can be used for a given scope
+ riscv/kprobe: Fix instruction simulation of JALR
+ nvme: fix passthrough csi check
+ gpio: mxc: Unlock on error path in mxc_flip_edge()
+ net: ravb: Fix lack of register setting after system resumed for Gen3
+ net: ravb: Fix possible hang if RIS2_QFF1 happen
+ net: mctp: mark socks as dead on unhash, prevent re-add
+ thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
+ net/tg3: resolve deadlock in tg3_reset_task() during EEH
+ net: mdio-mux-meson-g12a: force internal PHY off on mux switch
+ treewide: fix up files incorrectly marked executable
+ tools: gpio: fix -c option of gpio-event-mon
+ Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI 
mode"
+ x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
+ netfilter: conntrack: unify established states for SCTP paths
+ perf/x86/amd: fix potential integer overflow on shift of a int
+ dmaengine: qcom: gpi: Set link_rx bit on GO TRE for rx operation
+ soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY PD
+ arm64: dts: verdin-imx8mm: fix dahlia audio playback
+ arm64: dts: verdin-imx8mm: fix dev board audio playback
+ soc: imx: imx8mp-blk-ctrl: don't set power device name
+ arm64: dts: imx8mp: Fix missing GPC Interrupt
+ arm64: dts: imx8mp: Fix power-domain typo
+ reset: ti-sci: honor TI_SCI_PROTOCOL setting when not COMPILE_TEST
+ firmware: arm_scmi: Fix virtio channels cleanup on shutdown
+ interconnect: qcom: msm8996: Provide UFS clocks to A2NoC
+ interconnect: qcom: msm8996: Fix regmap max_register values
+ RDMA/rxe: Fix inaccurate constants in rxe_type_info
+ RDMA/rxe: Prevent faulty rkey generation
+ drm/msm/gpu: Fix potential double-free
+ bpf: hash map, avoid deadlock with suitable hash mask
+ net: lan966x: add missing fwnode_handle_put() for ports node
+ block/rnbd-clt: fix wrong max ID in ida_alloc_max
+ usb: ucsi: Ensure connector delayed work items are flushed
+ netfilter: conntrack: handle tcp challenge acks during connection reuse
+ net/mlx5e: Avoid false lock dependency warning on tc_ht even more
+ net/mlx5e: Set decap action based on attr for sample
+ dmaengine: tegra: Fix memory leak in terminate_all()
+ net: sched: gred: prevent races when adding offloads to stats
+ usb: dwc3: fix extcon dependency
+ bnxt: Do not read past the end of test names
+ btrfs: zoned: enable metadata over-commit for non-ZNS setup
+ vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp()
+ kvm/vfio: Fix potential deadlock on vfio group_lock
+ ftrace: Export ftrace_free_filter() to modules
+ riscv: fix -Wundef warning for CONFIG_RISCV_BOOT_SPINWAIT
+ regulator: dt-bindings: samsung,s2mps14: add lost samsung,ext-control-gpios
+ i2c: designware: Fix unbalanced suspended flag
+ iavf: schedule watchdog immediately when changing primary MAC
+ tracing/osnoise: Use built-in RCU list checking
+ gpio: ep93xx: Fix port F hwirq numbers in handler
+ net: mctp: add an explicit reference from a mctp_sk_key to sock
+ net: mctp: move expiry timer delete to unhash
+ net: mctp: hold key reference when looking up a general key
+ riscv: Move call to init_cpu_topology() to later initialization stage
+ Partially revert "perf/arm-cmn: Optimise DTC counter accesses"
+ x86/sev: Add SEV-SNP guest feature negotiation support
+ acpi: Fix suspend with Xen PV
+ UBUNTU: Upstream stable to v5.15.91, v6.1.9

** Description changed:

  SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2023-04-04
+ 
+                 Ported from the following upstream stable releases:
+                         v5.15.91, v6.1.9
+ 
         from git://git.kernel.org/
  
  memory: tegra: Remove clients SID override programming
  memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()
  memory: mvebu-devbus: Fix missing clk_disable_unprepare in 
mvebu_devbus_probe()
  dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG
  arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property
  ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
  ARM: dts: imx7d-pico: Use 'clock-frequency'
  ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
  arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
  ARM: imx: add missing of_node_put()
  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity
  soc: imx8m: Fix incorrect check for of_clk_get_by_name()
  reset: uniphier-glue: Fix possible null-ptr-deref
  EDAC/highbank: Fix memory leak in highbank_mc_probe()
  firmware: arm_scmi: Harden shared memory access in fetch_response
  firmware: arm_scmi: Harden shared memory access in fetch_notification
  tomoyo: fix broken dependency on *.conf.default
  RDMA/core: Fix ib block iterator counter overflow
  IB/hfi1: Reject a zero-length user expected buffer
  IB/hfi1: Reserve user expected TIDs
  IB/hfi1: Fix expected receive setup error exit issues
  IB/hfi1: Immediately remove invalid memory from hardware
  IB/hfi1: Remove user expected buffer invalidate race
  affs: initialize fsdata in affs_truncate()
  PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
  arm64: dts: qcom: msm8992: Don't use sfpb mutex
  arm64: dts: qcom: msm8992-libra: Fix the memory map
  phy: ti: fix Kconfig warning and operator precedence
  NFSD: fix use-after-free in nfsd4_ssc_setup_dul()
  ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
  amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
  amd-xgbe: Delay AN timeout during KR training
  bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in 
rockchip_usb2phy_power_on()
  net: nfc: Fix use-after-free in local_cleanup()
  net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
  net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
  sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb
  gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock
  gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
  pinctrl: rockchip: fix reading pull type on rk3568
  net: stmmac: Fix queue statistics reading
  net/sched: sch_taprio: fix possible use-after-free
  l2tp: Serialize access to sk_user_data with sk_callback_lock
  l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  l2tp: convert l2tp_tunnel_list to idr
  l2tp: close all race conditions in l2tp_tunnel_register()
  net: usb: sr9700: Handle negative len
  net: mdio: validate parameter addr in mdiobus_get_phy()
  HID: check empty report_list in hid_validate_values()
  HID: check empty report_list in bigben_probe()
  net: stmmac: fix invalid call to mdiobus_get_phy()
  pinctrl: rockchip: fix mux route data for rk3568
  HID: revert CHERRY_MOUSE_000C quirk
  usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
  Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
  net: ipa: disable ipa interrupt during suspend
  net/mlx5: E-switch, Fix setting of reserved fields on 
MODIFY_SCHEDULING_ELEMENT
  net: mlx5: eliminate anonymous module_init & module_exit
  drm/panfrost: fix GENERIC_ATOMIC64 dependency
  dmaengine: Fix double increment of client_count in dma_chan_get()
  net: macb: fix PTP TX timestamp failure due to packet padding
  virtio-net: correctly enable callback during start_xmit
  l2tp: prevent lockdep issue in l2tp_tunnel_register()
  HID: betop: check shape of output reports
  cifs: fix potential deadlock in cache_refresh_path()
  dmaengine: xilinx_dma: call of_node_put() when breaking out of 
for_each_child_of_node()
  phy: phy-can-transceiver: Skip warning if no "max-bitrate"
  drm/amd/display: fix issues with driver unload
  nvme-pci: fix timeout request state check
  tcp: avoid the lookup process failing to get sk in ehash table
  ptdma: pt_core_execute_cmd() should use spinlock
  device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()
  w1: fix deadloop in __w1_remove_master_device()
  w1: fix WARNING after calling w1_process()
  driver core: Fix test_async_probe_init saves device in wrong array
  selftests/net: toeplitz: fix race on tpacket_v3 block close
  net: dsa: microchip: ksz9477: port map correction in ALU table entry register
  thermal/core: Remove duplicate information when an error occurs
  thermal/core: Rename 'trips' to 'num_trips'
  thermal: Validate new state in cur_state_store()
  thermal/core: fix error code in __thermal_cooling_device_register()
  thermal: core: call put_device() only after device_register() fails
  net: stmmac: enable all safety features by default
  tcp: fix rate_app_limited to default to 1
  scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
  cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
  kcsan: test: don't put the expect array on the stack
  cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist
  ASoC: fsl_micfil: Correct the number of steps on SX controls
  net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem
  drm: Add orientation quirk for Lenovo ideapad D330-10IGL
  s390/debug: add _ASM_S390_ prefix to header guard
  s390: expicitly align _edata and _end symbols on page boundary
  perf/x86/msr: Add Emerald Rapids
  perf/x86/intel/uncore: Add Emerald Rapids
  cpufreq: armada-37xx: stop using 0 as NULL pointer
  ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
  ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
  spi: spidev: remove debug messages that access spidev->spi without locking
  KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  scsi: hisi_sas: Set a port invalid only if there are no devices attached when 
refreshing port id
  r8152: add vendor/device ID pair for Microsoft Devkit
  platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
  platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
  lockref: stop doing cpu_relax in the cmpxchg loop
  firmware: coreboot: Check size of table entry and use flex-array
  drm/i915: Remove unused variable
  x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
  panic: Separate sysctl logic from CONFIG_SMP
  exit: Put an upper limit on how often we can oops
  exit: Expose "oops_count" to sysfs
  exit: Allow oops_limit to be disabled
  panic: Consolidate open-coded panic_on_warn checks
  panic: Introduce warn_limit
  panic: Expose "warn_count" to sysfs
  docs: Fix path paste-o for /sys/kernel/warn_count
  exit: Use READ_ONCE() for all oops/warn limit reads
  Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
  drm/amdgpu: complete gfxoff allow signal during suspend without delay
  scsi: hpsa: Fix allocation size for scsi_host_alloc()
  module: Don't wait for GOING modules
  tracing: Make sure trace_printk() can output as soon as it can be used
  trace_events_hist: add check for return value of 'create_hist_field'
  ftrace/scripts: Update the instructions for ftrace-bisect.sh
  cifs: Fix oops due to uncleared server->smbd_conn in reconnect
  i2c: mv64xxx: Remove shutdown method from driver
  i2c: mv64xxx: Add atomic_xfer method to driver
  ksmbd: add max connections parameter
  ksmbd: do not sign response to session request for guest login
  ksmbd: downgrade ndr version error message to debug
  ksmbd: limit pdu length size according to connection status
  ovl: fail on invalid uid/gid mapping at copy up
  KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
  KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation
  thermal: intel: int340x: Protect trip temperature from concurrent updates
  ipv6: fix reachability confirmation with proxy_ndp
  ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
  EDAC/device: Respect any driver-supplied workqueue polling value
  EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
  net: mana: Fix IRQ name - add PCI and queue number
  scsi: ufs: core: Fix devfreq deadlocks
  i2c: designware: use casting of u64 in clock multiplication to avoid overflow
  netlink: prevent potential spectre v1 gadgets
  net: fix UaF in netns ops registration error path
  drm/i915/selftest: fix intel_selftest_modify_policy argument types
  netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  netfilter: nft_set_rbtree: skip elements in transaction from garbage 
collection
  netlink: annotate data races around nlk->portid
  netlink: annotate data races around dst_portid and dst_group
  netlink: annotate data races around sk_state
  ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
  netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  netrom: Fix use-after-free of a listening socket.
  net/sched: sch_taprio: do not schedule in taprio_reset()
  sctp: fail if no bound addresses can be used for a given scope
  riscv/kprobe: Fix instruction simulation of JALR
  nvme: fix passthrough csi check
  gpio: mxc: Unlock on error path in mxc_flip_edge()
  net: ravb: Fix lack of register setting after system resumed for Gen3
  net: ravb: Fix possible hang if RIS2_QFF1 happen
  net: mctp: mark socks as dead on unhash, prevent re-add
  thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
  net/tg3: resolve deadlock in tg3_reset_task() during EEH
  net: mdio-mux-meson-g12a: force internal PHY off on mux switch
  treewide: fix up files incorrectly marked executable
  tools: gpio: fix -c option of gpio-event-mon
  Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI 
mode"
  x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  netfilter: conntrack: unify established states for SCTP paths
  perf/x86/amd: fix potential integer overflow on shift of a int
  dmaengine: qcom: gpi: Set link_rx bit on GO TRE for rx operation
  soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY PD
  arm64: dts: verdin-imx8mm: fix dahlia audio playback
  arm64: dts: verdin-imx8mm: fix dev board audio playback
  soc: imx: imx8mp-blk-ctrl: don't set power device name
  arm64: dts: imx8mp: Fix missing GPC Interrupt
  arm64: dts: imx8mp: Fix power-domain typo
  reset: ti-sci: honor TI_SCI_PROTOCOL setting when not COMPILE_TEST
  firmware: arm_scmi: Fix virtio channels cleanup on shutdown
  interconnect: qcom: msm8996: Provide UFS clocks to A2NoC
  interconnect: qcom: msm8996: Fix regmap max_register values
  RDMA/rxe: Fix inaccurate constants in rxe_type_info
  RDMA/rxe: Prevent faulty rkey generation
  drm/msm/gpu: Fix potential double-free
  bpf: hash map, avoid deadlock with suitable hash mask
  net: lan966x: add missing fwnode_handle_put() for ports node
  block/rnbd-clt: fix wrong max ID in ida_alloc_max
  usb: ucsi: Ensure connector delayed work items are flushed
  netfilter: conntrack: handle tcp challenge acks during connection reuse
  net/mlx5e: Avoid false lock dependency warning on tc_ht even more
  net/mlx5e: Set decap action based on attr for sample
  dmaengine: tegra: Fix memory leak in terminate_all()
  net: sched: gred: prevent races when adding offloads to stats
  usb: dwc3: fix extcon dependency
  bnxt: Do not read past the end of test names
  btrfs: zoned: enable metadata over-commit for non-ZNS setup
  vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp()
  kvm/vfio: Fix potential deadlock on vfio group_lock
  ftrace: Export ftrace_free_filter() to modules
  riscv: fix -Wundef warning for CONFIG_RISCV_BOOT_SPINWAIT
  regulator: dt-bindings: samsung,s2mps14: add lost samsung,ext-control-gpios
  i2c: designware: Fix unbalanced suspended flag
  iavf: schedule watchdog immediately when changing primary MAC
  tracing/osnoise: Use built-in RCU list checking
  gpio: ep93xx: Fix port F hwirq numbers in handler
  net: mctp: add an explicit reference from a mctp_sk_key to sock
  net: mctp: move expiry timer delete to unhash
  net: mctp: hold key reference when looking up a general key
  riscv: Move call to init_cpu_topology() to later initialization stage
  Partially revert "perf/arm-cmn: Optimise DTC counter accesses"
  x86/sev: Add SEV-SNP guest feature negotiation support
  acpi: Fix suspend with Xen PV
  UBUNTU: Upstream stable to v5.15.91, v6.1.9

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2015288

Title:
  Kinetic update: upstream stable patchset 2023-04-04

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Kinetic:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2023-04-04

                  Ported from the following upstream stable releases:
                          v5.15.91, v6.1.9

         from git://git.kernel.org/

  memory: tegra: Remove clients SID override programming
  memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()
  memory: mvebu-devbus: Fix missing clk_disable_unprepare in 
mvebu_devbus_probe()
  dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG
  arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property
  ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
  ARM: dts: imx7d-pico: Use 'clock-frequency'
  ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
  arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
  ARM: imx: add missing of_node_put()
  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity
  soc: imx8m: Fix incorrect check for of_clk_get_by_name()
  reset: uniphier-glue: Fix possible null-ptr-deref
  EDAC/highbank: Fix memory leak in highbank_mc_probe()
  firmware: arm_scmi: Harden shared memory access in fetch_response
  firmware: arm_scmi: Harden shared memory access in fetch_notification
  tomoyo: fix broken dependency on *.conf.default
  RDMA/core: Fix ib block iterator counter overflow
  IB/hfi1: Reject a zero-length user expected buffer
  IB/hfi1: Reserve user expected TIDs
  IB/hfi1: Fix expected receive setup error exit issues
  IB/hfi1: Immediately remove invalid memory from hardware
  IB/hfi1: Remove user expected buffer invalidate race
  affs: initialize fsdata in affs_truncate()
  PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
  arm64: dts: qcom: msm8992: Don't use sfpb mutex
  arm64: dts: qcom: msm8992-libra: Fix the memory map
  phy: ti: fix Kconfig warning and operator precedence
  NFSD: fix use-after-free in nfsd4_ssc_setup_dul()
  ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
  amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
  amd-xgbe: Delay AN timeout during KR training
  bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in 
rockchip_usb2phy_power_on()
  net: nfc: Fix use-after-free in local_cleanup()
  net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
  net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
  sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb
  gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock
  gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
  pinctrl: rockchip: fix reading pull type on rk3568
  net: stmmac: Fix queue statistics reading
  net/sched: sch_taprio: fix possible use-after-free
  l2tp: Serialize access to sk_user_data with sk_callback_lock
  l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  l2tp: convert l2tp_tunnel_list to idr
  l2tp: close all race conditions in l2tp_tunnel_register()
  net: usb: sr9700: Handle negative len
  net: mdio: validate parameter addr in mdiobus_get_phy()
  HID: check empty report_list in hid_validate_values()
  HID: check empty report_list in bigben_probe()
  net: stmmac: fix invalid call to mdiobus_get_phy()
  pinctrl: rockchip: fix mux route data for rk3568
  HID: revert CHERRY_MOUSE_000C quirk
  usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
  Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
  net: ipa: disable ipa interrupt during suspend
  net/mlx5: E-switch, Fix setting of reserved fields on 
MODIFY_SCHEDULING_ELEMENT
  net: mlx5: eliminate anonymous module_init & module_exit
  drm/panfrost: fix GENERIC_ATOMIC64 dependency
  dmaengine: Fix double increment of client_count in dma_chan_get()
  net: macb: fix PTP TX timestamp failure due to packet padding
  virtio-net: correctly enable callback during start_xmit
  l2tp: prevent lockdep issue in l2tp_tunnel_register()
  HID: betop: check shape of output reports
  cifs: fix potential deadlock in cache_refresh_path()
  dmaengine: xilinx_dma: call of_node_put() when breaking out of 
for_each_child_of_node()
  phy: phy-can-transceiver: Skip warning if no "max-bitrate"
  drm/amd/display: fix issues with driver unload
  nvme-pci: fix timeout request state check
  tcp: avoid the lookup process failing to get sk in ehash table
  ptdma: pt_core_execute_cmd() should use spinlock
  device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()
  w1: fix deadloop in __w1_remove_master_device()
  w1: fix WARNING after calling w1_process()
  driver core: Fix test_async_probe_init saves device in wrong array
  selftests/net: toeplitz: fix race on tpacket_v3 block close
  net: dsa: microchip: ksz9477: port map correction in ALU table entry register
  thermal/core: Remove duplicate information when an error occurs
  thermal/core: Rename 'trips' to 'num_trips'
  thermal: Validate new state in cur_state_store()
  thermal/core: fix error code in __thermal_cooling_device_register()
  thermal: core: call put_device() only after device_register() fails
  net: stmmac: enable all safety features by default
  tcp: fix rate_app_limited to default to 1
  scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
  cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
  kcsan: test: don't put the expect array on the stack
  cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist
  ASoC: fsl_micfil: Correct the number of steps on SX controls
  net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem
  drm: Add orientation quirk for Lenovo ideapad D330-10IGL
  s390/debug: add _ASM_S390_ prefix to header guard
  s390: expicitly align _edata and _end symbols on page boundary
  perf/x86/msr: Add Emerald Rapids
  perf/x86/intel/uncore: Add Emerald Rapids
  cpufreq: armada-37xx: stop using 0 as NULL pointer
  ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
  ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
  spi: spidev: remove debug messages that access spidev->spi without locking
  KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  scsi: hisi_sas: Set a port invalid only if there are no devices attached when 
refreshing port id
  r8152: add vendor/device ID pair for Microsoft Devkit
  platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
  platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
  lockref: stop doing cpu_relax in the cmpxchg loop
  firmware: coreboot: Check size of table entry and use flex-array
  drm/i915: Remove unused variable
  x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
  panic: Separate sysctl logic from CONFIG_SMP
  exit: Put an upper limit on how often we can oops
  exit: Expose "oops_count" to sysfs
  exit: Allow oops_limit to be disabled
  panic: Consolidate open-coded panic_on_warn checks
  panic: Introduce warn_limit
  panic: Expose "warn_count" to sysfs
  docs: Fix path paste-o for /sys/kernel/warn_count
  exit: Use READ_ONCE() for all oops/warn limit reads
  Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
  drm/amdgpu: complete gfxoff allow signal during suspend without delay
  scsi: hpsa: Fix allocation size for scsi_host_alloc()
  module: Don't wait for GOING modules
  tracing: Make sure trace_printk() can output as soon as it can be used
  trace_events_hist: add check for return value of 'create_hist_field'
  ftrace/scripts: Update the instructions for ftrace-bisect.sh
  cifs: Fix oops due to uncleared server->smbd_conn in reconnect
  i2c: mv64xxx: Remove shutdown method from driver
  i2c: mv64xxx: Add atomic_xfer method to driver
  ksmbd: add max connections parameter
  ksmbd: do not sign response to session request for guest login
  ksmbd: downgrade ndr version error message to debug
  ksmbd: limit pdu length size according to connection status
  ovl: fail on invalid uid/gid mapping at copy up
  KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
  KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation
  thermal: intel: int340x: Protect trip temperature from concurrent updates
  ipv6: fix reachability confirmation with proxy_ndp
  ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
  EDAC/device: Respect any driver-supplied workqueue polling value
  EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
  net: mana: Fix IRQ name - add PCI and queue number
  scsi: ufs: core: Fix devfreq deadlocks
  i2c: designware: use casting of u64 in clock multiplication to avoid overflow
  netlink: prevent potential spectre v1 gadgets
  net: fix UaF in netns ops registration error path
  drm/i915/selftest: fix intel_selftest_modify_policy argument types
  netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  netfilter: nft_set_rbtree: skip elements in transaction from garbage 
collection
  netlink: annotate data races around nlk->portid
  netlink: annotate data races around dst_portid and dst_group
  netlink: annotate data races around sk_state
  ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
  netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  netrom: Fix use-after-free of a listening socket.
  net/sched: sch_taprio: do not schedule in taprio_reset()
  sctp: fail if no bound addresses can be used for a given scope
  riscv/kprobe: Fix instruction simulation of JALR
  nvme: fix passthrough csi check
  gpio: mxc: Unlock on error path in mxc_flip_edge()
  net: ravb: Fix lack of register setting after system resumed for Gen3
  net: ravb: Fix possible hang if RIS2_QFF1 happen
  net: mctp: mark socks as dead on unhash, prevent re-add
  thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
  net/tg3: resolve deadlock in tg3_reset_task() during EEH
  net: mdio-mux-meson-g12a: force internal PHY off on mux switch
  treewide: fix up files incorrectly marked executable
  tools: gpio: fix -c option of gpio-event-mon
  Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI 
mode"
  x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  netfilter: conntrack: unify established states for SCTP paths
  perf/x86/amd: fix potential integer overflow on shift of a int
  dmaengine: qcom: gpi: Set link_rx bit on GO TRE for rx operation
  soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY PD
  arm64: dts: verdin-imx8mm: fix dahlia audio playback
  arm64: dts: verdin-imx8mm: fix dev board audio playback
  soc: imx: imx8mp-blk-ctrl: don't set power device name
  arm64: dts: imx8mp: Fix missing GPC Interrupt
  arm64: dts: imx8mp: Fix power-domain typo
  reset: ti-sci: honor TI_SCI_PROTOCOL setting when not COMPILE_TEST
  firmware: arm_scmi: Fix virtio channels cleanup on shutdown
  interconnect: qcom: msm8996: Provide UFS clocks to A2NoC
  interconnect: qcom: msm8996: Fix regmap max_register values
  RDMA/rxe: Fix inaccurate constants in rxe_type_info
  RDMA/rxe: Prevent faulty rkey generation
  drm/msm/gpu: Fix potential double-free
  bpf: hash map, avoid deadlock with suitable hash mask
  net: lan966x: add missing fwnode_handle_put() for ports node
  block/rnbd-clt: fix wrong max ID in ida_alloc_max
  usb: ucsi: Ensure connector delayed work items are flushed
  netfilter: conntrack: handle tcp challenge acks during connection reuse
  net/mlx5e: Avoid false lock dependency warning on tc_ht even more
  net/mlx5e: Set decap action based on attr for sample
  dmaengine: tegra: Fix memory leak in terminate_all()
  net: sched: gred: prevent races when adding offloads to stats
  usb: dwc3: fix extcon dependency
  bnxt: Do not read past the end of test names
  btrfs: zoned: enable metadata over-commit for non-ZNS setup
  vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp()
  kvm/vfio: Fix potential deadlock on vfio group_lock
  ftrace: Export ftrace_free_filter() to modules
  riscv: fix -Wundef warning for CONFIG_RISCV_BOOT_SPINWAIT
  regulator: dt-bindings: samsung,s2mps14: add lost samsung,ext-control-gpios
  i2c: designware: Fix unbalanced suspended flag
  iavf: schedule watchdog immediately when changing primary MAC
  tracing/osnoise: Use built-in RCU list checking
  gpio: ep93xx: Fix port F hwirq numbers in handler
  net: mctp: add an explicit reference from a mctp_sk_key to sock
  net: mctp: move expiry timer delete to unhash
  net: mctp: hold key reference when looking up a general key
  riscv: Move call to init_cpu_topology() to later initialization stage
  Partially revert "perf/arm-cmn: Optimise DTC counter accesses"
  x86/sev: Add SEV-SNP guest feature negotiation support
  acpi: Fix suspend with Xen PV
  UBUNTU: Upstream stable to v5.15.91, v6.1.9

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2015288/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to