Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2023-11-28

                Ported from the following upstream stable releases:
                        v6.1.54, v6.5.4

       from git://git.kernel.org/

net/ipv6: SKB symmetric hash should incorporate transport ports
mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[]
Multi-gen LRU: fix per-zone reclaim
io_uring/net: don't overflow multishot accept
io_uring: break out of iowq iopoll on teardown
io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
io_uring: Don't set affinity on a dying sqpoll thread
drm/virtio: Conditionally allocate virtio_gpu_fence
scsi: qla2xxx: Adjust IOCB resource on qpair create
scsi: qla2xxx: Limit TMF to 8 per function
scsi: qla2xxx: Fix deletion race condition
scsi: qla2xxx: fix inconsistent TMF timeout
scsi: qla2xxx: Fix command flush during TMF
scsi: qla2xxx: Fix erroneous link up failure
scsi: qla2xxx: Turn off noisy message log
scsi: qla2xxx: Fix session hang in gnl
scsi: qla2xxx: Fix TMF leak through
scsi: qla2xxx: Remove unsupported ql2xenabledif option
scsi: qla2xxx: Flush mailbox commands on chip reset
scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
scsi: qla2xxx: Error code did not return to upper layer
scsi: qla2xxx: Fix firmware resource tracking
null_blk: fix poll request timeout handling
fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
clk: qcom: camcc-sc7180: fix async resume during probe
drm/ast: Fix DRAM init on AST2200
ASoC: tegra: Fix SFC conversion for few rates
clk: qcom: turingcc-qcs404: fix missing resume during probe
arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos
send channel sequence number in SMB3 requests after reconnects
mm: hugetlb_vmemmap: fix a race between vmemmap pmd split
lib/test_meminit: allocate pages up to order MAX_ORDER
parisc: led: Fix LAN receive and transmit LEDs
parisc: led: Reduce CPU overhead for disk & lan LED computation
cifs: update desired access while requesting for directory lease
pinctrl: cherryview: fix address_space_handler() argument
dt-bindings: clock: xlnx,versal-clk: drop select:false
clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
clk: imx: pll14xx: align pdiv with reference manual
clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
soc: qcom: qmi_encdec: Restrict string length in decode
clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors
clk: qcom: lpasscc-sc7280: fix missing resume during probe
clk: qcom: q6sstop-qcs404: fix missing resume during probe
clk: qcom: mss-sc7180: fix missing resume during probe
NFS: Fix a potential data corruption
NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
bus: mhi: host: Skip MHI reset if device is in RDDM
kbuild: rpm-pkg: define _arch conditionally
kbuild: do not run depmod for 'make modules_sign'
tpm_crb: Fix an error handling path in crb_acpi_add()
gfs2: Switch to wait_event in gfs2_logd
gfs2: low-memory forced flush fixes
mailbox: qcom-ipcc: fix incorrect num_chans counting
kconfig: fix possible buffer overflow
Input: iqs7222 - configure power mode before triggering ATI
perf trace: Use zfree() to reduce chances of use after free
perf trace: Really free the evsel->priv area
pwm: atmel-tcb: Convert to platform remove callback returning void
pwm: atmel-tcb: Harmonize resource allocation order
pwm: atmel-tcb: Fix resource freeing in error path and remove
backlight: gpio_backlight: Drop output GPIO direction check for initial power 
state
Input: tca6416-keypad - always expect proper IRQ number in i2c client
Input: tca6416-keypad - fix interrupt enable disbalance
perf annotate bpf: Don't enclose non-debug code with an assert()
x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
perf vendor events: Update the JSON/events descriptions for power10 platform
perf vendor events: Drop some of the JSON/events for power10 platform
perf vendor events: Drop STORES_PER_INST metric event for power10 platform
perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
pwm: lpc32xx: Remove handling of PWM channels
perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators
perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test
drm/i915: mark requests for GuC virtual engines to avoid use-after-free
blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice()
smb: propagate error code of extract_sharename()
net/sched: fq_pie: avoid stalls in fq_pie_timer()
sctp: annotate data-races around sk->sk_wmem_queued
ipv4: annotate data-races around fi->fib_dead
net: read sk->sk_family once in sk_mc_loop()
net: fib: avoid warn splat in flow dissector
xsk: Fix xsk_diag use-after-free error during socket cleanup
drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page"
drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn()
drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
net: use sk_forward_alloc_get() in sk_get_meminfo()
net: annotate data-races around sk->sk_forward_alloc
mptcp: annotate data-races around msk->rmem_fwd_alloc
ipv4: ignore dst hint for multipath routes
ipv6: ignore dst hint for multipath routes
igb: disable virtualization features on 82580
gve: fix frag_list chaining
veth: Fixing transmit return status for dropped packets
net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
net: phy: micrel: Correct bit assignments for phy_device flags
bpf, sockmap: Fix skb refcnt race after locking changes
af_unix: Fix data-races around user->unix_inflight.
af_unix: Fix data-race around unix_tot_inflight.
af_unix: Fix data-races around sk->sk_shutdown.
af_unix: Fix data race around sk->sk_err.
kcm: Destroy mutex in kcm_exit_net()
octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler
igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
s390/zcrypt: don't leak memory if dev_set_name() fails
idr: fix param name in idr_alloc_cyclic() doc
ip_tunnels: use DEV_STATS_INC()
net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload
net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
net: dsa: sja1105: complete tc-cbs offload support on SJA1110
bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf().
bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check.
net: hns3: fix tx timeout issue
net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read()
net: hns3: fix debugfs concurrency issue between kfree buffer and read
net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue
net: hns3: fix the port information display when sfp is absent
net: hns3: remove GSO partial feature bit
sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
Multi-gen LRU: avoid race in inc_min_seq()
net/mlx5: Free IRQ rmap and notifier on kernel shutdown
ARC: atomics: Add compiler barrier to atomic operations...
clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL
dmaengine: sh: rz-dmac: Fix destination and source data size setting
jbd2: fix checkpoint cleanup performance regression
jbd2: check 'jh->b_transaction' before removing it from checkpoint
jbd2: correct the end of the journal recovery scan range
ext4: add correct group descriptors and reserved GDT blocks to system zone
ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
f2fs: flush inode if atomic file is aborted
f2fs: avoid false alarm of circular locking
lib: test_scanf: Add explicit type cast to result initialization in 
test_number_prefix()
hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
ata: ahci: Add Elkhart Lake AHCI controller
ata: pata_falcon: fix IO base selection for Q40
ata: sata_gemini: Add missing MODULE_DESCRIPTION
ata: pata_ftide010: Add missing MODULE_DESCRIPTION
fuse: nlookup missing decrement in fuse_direntplus_link
btrfs: zoned: do not zone finish data relocation block group
btrfs: fix start transaction qgroup rsv double free
btrfs: free qgroup rsv on io failure
btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
btrfs: set page extent mapped after read_folio in relocate_one_page
btrfs: zoned: re-enable metadata over-commit for zoned mode
btrfs: use the correct superblock to compare fsid in btrfs_validate_super
drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
mtd: rawnand: brcmnand: Fix crash during the panic_write
mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
mtd: spi-nor: Correct flags for Winbond w25q128
mtd: rawnand: brcmnand: Fix potential false time out warning
mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
drm/amd/display: prevent potential division by zero errors
KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry
KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn
KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration
KVM: nSVM: Check instead of asserting on nested TSC scaling support
KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state
KVM: SVM: Set target pCPU during IRTE update if target vCPU is running
KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL
MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression
perf hists browser: Fix hierarchy mode header
perf test shell stat_bpf_counters: Fix test on Intel
perf tools: Handle old data in PERF_RECORD_ATTR
perf hists browser: Fix the number of entries for 'e' key
drm/amd/display: always switch off ODM before committing more streams
drm/amd/display: Remove wait while locked
drm/amdgpu: register a dirty framebuffer callback for fbcon
kunit: Fix wild-memory-access bug in kunit_free_suite_set()
net: ipv4: fix one memleak in __inet_del_ifa()
kselftest/runner.sh: Propagate SIGTERM to runner child
selftests: Keep symlinks, when possible
net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in 
smcr_port_add
net: stmmac: fix handling of zero coalescing tx-usecs
net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in 
mtk_hwlro_get_fdir_all()
hsr: Fix uninit-value access in fill_frame_info()
net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast 
address
net:ethernet:adi:adin1110: Fix forwarding offload
net: dsa: sja1105: hide all multicast addresses from "bridge fdb show"
net: dsa: sja1105: propagate exact error code from 
sja1105_dynamic_config_poll_valid()
net: dsa: sja1105: fix multicast forwarding working only for last added mdb 
entry
net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB accesses
net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset
r8152: check budget for r8152_poll()
kcm: Fix memory leak in error path of kcm_sendmsg()
platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
UBUNTU: [Config] updateconfigs for NVSW_SN2201
platform/mellanox: NVSW_SN2201 should depend on ACPI
net: macb: Enable PTP unicast
net: macb: fix sleep inside spinlock
ipv6: fix ip6_sock_set_addr_preferences() typo
ipv6: Remove in6addr_any alternatives.
tcp: Factorise sk_family-independent comparison in 
inet_bind2_bucket_match(_addr_any).
tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address.
ixgbe: fix timestamp configuration code
kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
MIPS: Only fiddle with CHECKFLAGS if `need-compiler'
drm/amd/display: Fix a bug when searching for insert_above_mpcc
arm64: tegra: Update AHUB clock parent and rate on Tegra234
arm64: tegra: Update AHUB clock parent and rate
ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen
ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names
ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode
ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
net: annotate data-races around sk->sk_tsflags
net: annotate data-races around sk->sk_bind_phc
sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
misc: fastrpc: Fix remote heap allocation request
misc: fastrpc: Fix incorrect DMA mapping unmap request
perf build: Update build rule for generated files
net: renesas: rswitch: Fix unmasking irq condition
UBUNTU: Upstream stable to v6.1.54, v6.5.4

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Lunar)
     Importance: Medium
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Lunar)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Lunar)
       Status: New => In Progress

** Changed in: linux (Ubuntu Lunar)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Lunar)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
+        upstream stable patchset 2023-11-28
+        from git://git.kernel.org/
  
-        upstream stable patchset 2023-11-28
-        from git://git.kernel.org/
+ net/ipv6: SKB symmetric hash should incorporate transport ports
+ mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[]
+ Multi-gen LRU: fix per-zone reclaim
+ io_uring/net: don't overflow multishot accept
+ io_uring: break out of iowq iopoll on teardown
+ io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
+ io_uring: Don't set affinity on a dying sqpoll thread
+ drm/virtio: Conditionally allocate virtio_gpu_fence
+ scsi: qla2xxx: Adjust IOCB resource on qpair create
+ scsi: qla2xxx: Limit TMF to 8 per function
+ scsi: qla2xxx: Fix deletion race condition
+ scsi: qla2xxx: fix inconsistent TMF timeout
+ scsi: qla2xxx: Fix command flush during TMF
+ scsi: qla2xxx: Fix erroneous link up failure
+ scsi: qla2xxx: Turn off noisy message log
+ scsi: qla2xxx: Fix session hang in gnl
+ scsi: qla2xxx: Fix TMF leak through
+ scsi: qla2xxx: Remove unsupported ql2xenabledif option
+ scsi: qla2xxx: Flush mailbox commands on chip reset
+ scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
+ scsi: qla2xxx: Error code did not return to upper layer
+ scsi: qla2xxx: Fix firmware resource tracking
+ null_blk: fix poll request timeout handling
+ fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+ clk: qcom: camcc-sc7180: fix async resume during probe
+ drm/ast: Fix DRAM init on AST2200
+ ASoC: tegra: Fix SFC conversion for few rates
+ clk: qcom: turingcc-qcs404: fix missing resume during probe
+ arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos
+ send channel sequence number in SMB3 requests after reconnects
+ mm: hugetlb_vmemmap: fix a race between vmemmap pmd split
+ lib/test_meminit: allocate pages up to order MAX_ORDER
+ parisc: led: Fix LAN receive and transmit LEDs
+ parisc: led: Reduce CPU overhead for disk & lan LED computation
+ cifs: update desired access while requesting for directory lease
+ pinctrl: cherryview: fix address_space_handler() argument
+ dt-bindings: clock: xlnx,versal-clk: drop select:false
+ clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
+ clk: imx: pll14xx: align pdiv with reference manual
+ clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+ soc: qcom: qmi_encdec: Restrict string length in decode
+ clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors
+ clk: qcom: lpasscc-sc7280: fix missing resume during probe
+ clk: qcom: q6sstop-qcs404: fix missing resume during probe
+ clk: qcom: mss-sc7180: fix missing resume during probe
+ NFS: Fix a potential data corruption
+ NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
+ bus: mhi: host: Skip MHI reset if device is in RDDM
+ kbuild: rpm-pkg: define _arch conditionally
+ kbuild: do not run depmod for 'make modules_sign'
+ tpm_crb: Fix an error handling path in crb_acpi_add()
+ gfs2: Switch to wait_event in gfs2_logd
+ gfs2: low-memory forced flush fixes
+ mailbox: qcom-ipcc: fix incorrect num_chans counting
+ kconfig: fix possible buffer overflow
+ Input: iqs7222 - configure power mode before triggering ATI
+ perf trace: Use zfree() to reduce chances of use after free
+ perf trace: Really free the evsel->priv area
+ pwm: atmel-tcb: Convert to platform remove callback returning void
+ pwm: atmel-tcb: Harmonize resource allocation order
+ pwm: atmel-tcb: Fix resource freeing in error path and remove
+ backlight: gpio_backlight: Drop output GPIO direction check for initial power 
state
+ Input: tca6416-keypad - always expect proper IRQ number in i2c client
+ Input: tca6416-keypad - fix interrupt enable disbalance
+ perf annotate bpf: Don't enclose non-debug code with an assert()
+ x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
+ perf vendor events: Update the JSON/events descriptions for power10 platform
+ perf vendor events: Drop some of the JSON/events for power10 platform
+ perf vendor events: Drop STORES_PER_INST metric event for power10 platform
+ perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
+ watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
+ pwm: lpc32xx: Remove handling of PWM channels
+ perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators
+ perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test
+ drm/i915: mark requests for GuC virtual engines to avoid use-after-free
+ blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
+ blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice()
+ smb: propagate error code of extract_sharename()
+ net/sched: fq_pie: avoid stalls in fq_pie_timer()
+ sctp: annotate data-races around sk->sk_wmem_queued
+ ipv4: annotate data-races around fi->fib_dead
+ net: read sk->sk_family once in sk_mc_loop()
+ net: fib: avoid warn splat in flow dissector
+ xsk: Fix xsk_diag use-after-free error during socket cleanup
+ drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page"
+ drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn()
+ drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
+ net: use sk_forward_alloc_get() in sk_get_meminfo()
+ net: annotate data-races around sk->sk_forward_alloc
+ mptcp: annotate data-races around msk->rmem_fwd_alloc
+ ipv4: ignore dst hint for multipath routes
+ ipv6: ignore dst hint for multipath routes
+ igb: disable virtualization features on 82580
+ gve: fix frag_list chaining
+ veth: Fixing transmit return status for dropped packets
+ net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
+ net: phy: micrel: Correct bit assignments for phy_device flags
+ bpf, sockmap: Fix skb refcnt race after locking changes
+ af_unix: Fix data-races around user->unix_inflight.
+ af_unix: Fix data-race around unix_tot_inflight.
+ af_unix: Fix data-races around sk->sk_shutdown.
+ af_unix: Fix data race around sk->sk_err.
+ kcm: Destroy mutex in kcm_exit_net()
+ octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler
+ igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
+ igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
+ igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
+ s390/zcrypt: don't leak memory if dev_set_name() fails
+ idr: fix param name in idr_alloc_cyclic() doc
+ ip_tunnels: use DEV_STATS_INC()
+ net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and 
offload
+ net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
+ net: dsa: sja1105: complete tc-cbs offload support on SJA1110
+ bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf().
+ bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check.
+ net: hns3: fix tx timeout issue
+ net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read()
+ net: hns3: fix debugfs concurrency issue between kfree buffer and read
+ net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue
+ net: hns3: fix the port information display when sfp is absent
+ net: hns3: remove GSO partial feature bit
+ sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
+ Multi-gen LRU: avoid race in inc_min_seq()
+ net/mlx5: Free IRQ rmap and notifier on kernel shutdown
+ ARC: atomics: Add compiler barrier to atomic operations...
+ clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL
+ dmaengine: sh: rz-dmac: Fix destination and source data size setting
+ jbd2: fix checkpoint cleanup performance regression
+ jbd2: check 'jh->b_transaction' before removing it from checkpoint
+ jbd2: correct the end of the journal recovery scan range
+ ext4: add correct group descriptors and reserved GDT blocks to system zone
+ ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
+ f2fs: flush inode if atomic file is aborted
+ f2fs: avoid false alarm of circular locking
+ lib: test_scanf: Add explicit type cast to result initialization in 
test_number_prefix()
+ hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
+ ata: ahci: Add Elkhart Lake AHCI controller
+ ata: pata_falcon: fix IO base selection for Q40
+ ata: sata_gemini: Add missing MODULE_DESCRIPTION
+ ata: pata_ftide010: Add missing MODULE_DESCRIPTION
+ fuse: nlookup missing decrement in fuse_direntplus_link
+ btrfs: zoned: do not zone finish data relocation block group
+ btrfs: fix start transaction qgroup rsv double free
+ btrfs: free qgroup rsv on io failure
+ btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
+ btrfs: set page extent mapped after read_folio in relocate_one_page
+ btrfs: zoned: re-enable metadata over-commit for zoned mode
+ btrfs: use the correct superblock to compare fsid in btrfs_validate_super
+ drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
+ mtd: rawnand: brcmnand: Fix crash during the panic_write
+ mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
+ mtd: spi-nor: Correct flags for Winbond w25q128
+ mtd: rawnand: brcmnand: Fix potential false time out warning
+ mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
+ drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
+ drm/amd/display: prevent potential division by zero errors
+ KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry
+ KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn
+ KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration
+ KVM: nSVM: Check instead of asserting on nested TSC scaling support
+ KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state
+ KVM: SVM: Set target pCPU during IRTE update if target vCPU is running
+ KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL
+ MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression
+ perf hists browser: Fix hierarchy mode header
+ perf test shell stat_bpf_counters: Fix test on Intel
+ perf tools: Handle old data in PERF_RECORD_ATTR
+ perf hists browser: Fix the number of entries for 'e' key
+ drm/amd/display: always switch off ODM before committing more streams
+ drm/amd/display: Remove wait while locked
+ drm/amdgpu: register a dirty framebuffer callback for fbcon
+ kunit: Fix wild-memory-access bug in kunit_free_suite_set()
+ net: ipv4: fix one memleak in __inet_del_ifa()
+ kselftest/runner.sh: Propagate SIGTERM to runner child
+ selftests: Keep symlinks, when possible
+ net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in 
smcr_port_add
+ net: stmmac: fix handling of zero coalescing tx-usecs
+ net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
+ net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in 
mtk_hwlro_get_fdir_all()
+ hsr: Fix uninit-value access in fill_frame_info()
+ net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast 
address
+ net:ethernet:adi:adin1110: Fix forwarding offload
+ net: dsa: sja1105: hide all multicast addresses from "bridge fdb show"
+ net: dsa: sja1105: propagate exact error code from 
sja1105_dynamic_config_poll_valid()
+ net: dsa: sja1105: fix multicast forwarding working only for last added mdb 
entry
+ net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB 
accesses
+ net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset
+ r8152: check budget for r8152_poll()
+ kcm: Fix memory leak in error path of kcm_sendmsg()
+ platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
+ platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
+ platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
+ platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
+ UBUNTU: [Config] updateconfigs for NVSW_SN2201
+ platform/mellanox: NVSW_SN2201 should depend on ACPI
+ net: macb: Enable PTP unicast
+ net: macb: fix sleep inside spinlock
+ ipv6: fix ip6_sock_set_addr_preferences() typo
+ ipv6: Remove in6addr_any alternatives.
+ tcp: Factorise sk_family-independent comparison in 
inet_bind2_bucket_match(_addr_any).
+ tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
+ tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address.
+ ixgbe: fix timestamp configuration code
+ kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
+ MIPS: Only fiddle with CHECKFLAGS if `need-compiler'
+ drm/amd/display: Fix a bug when searching for insert_above_mpcc
+ arm64: tegra: Update AHUB clock parent and rate on Tegra234
+ arm64: tegra: Update AHUB clock parent and rate
+ ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen
+ ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names
+ ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode
+ ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
+ net: annotate data-races around sk->sk_tsflags
+ net: annotate data-races around sk->sk_bind_phc
+ sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
+ misc: fastrpc: Fix remote heap allocation request
+ misc: fastrpc: Fix incorrect DMA mapping unmap request
+ perf build: Update build rule for generated files
+ net: renesas: rswitch: Fix unmasking irq condition
+ UBUNTU: Upstream stable to v6.1.54, v6.5.4

** Description changed:

  SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2023-11-28
+ 
+                 Ported from the following upstream stable releases:
+                         v6.1.54, v6.5.4
+ 
         from git://git.kernel.org/
  
  net/ipv6: SKB symmetric hash should incorporate transport ports
  mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[]
  Multi-gen LRU: fix per-zone reclaim
  io_uring/net: don't overflow multishot accept
  io_uring: break out of iowq iopoll on teardown
  io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
  io_uring: Don't set affinity on a dying sqpoll thread
  drm/virtio: Conditionally allocate virtio_gpu_fence
  scsi: qla2xxx: Adjust IOCB resource on qpair create
  scsi: qla2xxx: Limit TMF to 8 per function
  scsi: qla2xxx: Fix deletion race condition
  scsi: qla2xxx: fix inconsistent TMF timeout
  scsi: qla2xxx: Fix command flush during TMF
  scsi: qla2xxx: Fix erroneous link up failure
  scsi: qla2xxx: Turn off noisy message log
  scsi: qla2xxx: Fix session hang in gnl
  scsi: qla2xxx: Fix TMF leak through
  scsi: qla2xxx: Remove unsupported ql2xenabledif option
  scsi: qla2xxx: Flush mailbox commands on chip reset
  scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
  scsi: qla2xxx: Error code did not return to upper layer
  scsi: qla2xxx: Fix firmware resource tracking
  null_blk: fix poll request timeout handling
  fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
  clk: qcom: camcc-sc7180: fix async resume during probe
  drm/ast: Fix DRAM init on AST2200
  ASoC: tegra: Fix SFC conversion for few rates
  clk: qcom: turingcc-qcs404: fix missing resume during probe
  arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos
  send channel sequence number in SMB3 requests after reconnects
  mm: hugetlb_vmemmap: fix a race between vmemmap pmd split
  lib/test_meminit: allocate pages up to order MAX_ORDER
  parisc: led: Fix LAN receive and transmit LEDs
  parisc: led: Reduce CPU overhead for disk & lan LED computation
  cifs: update desired access while requesting for directory lease
  pinctrl: cherryview: fix address_space_handler() argument
  dt-bindings: clock: xlnx,versal-clk: drop select:false
  clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
  clk: imx: pll14xx: align pdiv with reference manual
  clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
  soc: qcom: qmi_encdec: Restrict string length in decode
  clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors
  clk: qcom: lpasscc-sc7280: fix missing resume during probe
  clk: qcom: q6sstop-qcs404: fix missing resume during probe
  clk: qcom: mss-sc7180: fix missing resume during probe
  NFS: Fix a potential data corruption
  NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
  bus: mhi: host: Skip MHI reset if device is in RDDM
  kbuild: rpm-pkg: define _arch conditionally
  kbuild: do not run depmod for 'make modules_sign'
  tpm_crb: Fix an error handling path in crb_acpi_add()
  gfs2: Switch to wait_event in gfs2_logd
  gfs2: low-memory forced flush fixes
  mailbox: qcom-ipcc: fix incorrect num_chans counting
  kconfig: fix possible buffer overflow
  Input: iqs7222 - configure power mode before triggering ATI
  perf trace: Use zfree() to reduce chances of use after free
  perf trace: Really free the evsel->priv area
  pwm: atmel-tcb: Convert to platform remove callback returning void
  pwm: atmel-tcb: Harmonize resource allocation order
  pwm: atmel-tcb: Fix resource freeing in error path and remove
  backlight: gpio_backlight: Drop output GPIO direction check for initial power 
state
  Input: tca6416-keypad - always expect proper IRQ number in i2c client
  Input: tca6416-keypad - fix interrupt enable disbalance
  perf annotate bpf: Don't enclose non-debug code with an assert()
  x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
  perf vendor events: Update the JSON/events descriptions for power10 platform
  perf vendor events: Drop some of the JSON/events for power10 platform
  perf vendor events: Drop STORES_PER_INST metric event for power10 platform
  perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
  watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
  pwm: lpc32xx: Remove handling of PWM channels
  perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators
  perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test
  drm/i915: mark requests for GuC virtual engines to avoid use-after-free
  blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
  blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice()
  smb: propagate error code of extract_sharename()
  net/sched: fq_pie: avoid stalls in fq_pie_timer()
  sctp: annotate data-races around sk->sk_wmem_queued
  ipv4: annotate data-races around fi->fib_dead
  net: read sk->sk_family once in sk_mc_loop()
  net: fib: avoid warn splat in flow dissector
  xsk: Fix xsk_diag use-after-free error during socket cleanup
  drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page"
  drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn()
  drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
  net: use sk_forward_alloc_get() in sk_get_meminfo()
  net: annotate data-races around sk->sk_forward_alloc
  mptcp: annotate data-races around msk->rmem_fwd_alloc
  ipv4: ignore dst hint for multipath routes
  ipv6: ignore dst hint for multipath routes
  igb: disable virtualization features on 82580
  gve: fix frag_list chaining
  veth: Fixing transmit return status for dropped packets
  net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
  net: phy: micrel: Correct bit assignments for phy_device flags
  bpf, sockmap: Fix skb refcnt race after locking changes
  af_unix: Fix data-races around user->unix_inflight.
  af_unix: Fix data-race around unix_tot_inflight.
  af_unix: Fix data-races around sk->sk_shutdown.
  af_unix: Fix data race around sk->sk_err.
  kcm: Destroy mutex in kcm_exit_net()
  octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler
  igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
  igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
  igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
  s390/zcrypt: don't leak memory if dev_set_name() fails
  idr: fix param name in idr_alloc_cyclic() doc
  ip_tunnels: use DEV_STATS_INC()
  net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and 
offload
  net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
  net: dsa: sja1105: complete tc-cbs offload support on SJA1110
  bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf().
  bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check.
  net: hns3: fix tx timeout issue
  net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read()
  net: hns3: fix debugfs concurrency issue between kfree buffer and read
  net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue
  net: hns3: fix the port information display when sfp is absent
  net: hns3: remove GSO partial feature bit
  sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
  Multi-gen LRU: avoid race in inc_min_seq()
  net/mlx5: Free IRQ rmap and notifier on kernel shutdown
  ARC: atomics: Add compiler barrier to atomic operations...
  clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL
  dmaengine: sh: rz-dmac: Fix destination and source data size setting
  jbd2: fix checkpoint cleanup performance regression
  jbd2: check 'jh->b_transaction' before removing it from checkpoint
  jbd2: correct the end of the journal recovery scan range
  ext4: add correct group descriptors and reserved GDT blocks to system zone
  ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
  f2fs: flush inode if atomic file is aborted
  f2fs: avoid false alarm of circular locking
  lib: test_scanf: Add explicit type cast to result initialization in 
test_number_prefix()
  hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
  ata: ahci: Add Elkhart Lake AHCI controller
  ata: pata_falcon: fix IO base selection for Q40
  ata: sata_gemini: Add missing MODULE_DESCRIPTION
  ata: pata_ftide010: Add missing MODULE_DESCRIPTION
  fuse: nlookup missing decrement in fuse_direntplus_link
  btrfs: zoned: do not zone finish data relocation block group
  btrfs: fix start transaction qgroup rsv double free
  btrfs: free qgroup rsv on io failure
  btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
  btrfs: set page extent mapped after read_folio in relocate_one_page
  btrfs: zoned: re-enable metadata over-commit for zoned mode
  btrfs: use the correct superblock to compare fsid in btrfs_validate_super
  drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
  mtd: rawnand: brcmnand: Fix crash during the panic_write
  mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
  mtd: spi-nor: Correct flags for Winbond w25q128
  mtd: rawnand: brcmnand: Fix potential false time out warning
  mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
  drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
  drm/amd/display: prevent potential division by zero errors
  KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry
  KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn
  KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration
  KVM: nSVM: Check instead of asserting on nested TSC scaling support
  KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state
  KVM: SVM: Set target pCPU during IRTE update if target vCPU is running
  KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL
  MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression
  perf hists browser: Fix hierarchy mode header
  perf test shell stat_bpf_counters: Fix test on Intel
  perf tools: Handle old data in PERF_RECORD_ATTR
  perf hists browser: Fix the number of entries for 'e' key
  drm/amd/display: always switch off ODM before committing more streams
  drm/amd/display: Remove wait while locked
  drm/amdgpu: register a dirty framebuffer callback for fbcon
  kunit: Fix wild-memory-access bug in kunit_free_suite_set()
  net: ipv4: fix one memleak in __inet_del_ifa()
  kselftest/runner.sh: Propagate SIGTERM to runner child
  selftests: Keep symlinks, when possible
  net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in 
smcr_port_add
  net: stmmac: fix handling of zero coalescing tx-usecs
  net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
  net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in 
mtk_hwlro_get_fdir_all()
  hsr: Fix uninit-value access in fill_frame_info()
  net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast 
address
  net:ethernet:adi:adin1110: Fix forwarding offload
  net: dsa: sja1105: hide all multicast addresses from "bridge fdb show"
  net: dsa: sja1105: propagate exact error code from 
sja1105_dynamic_config_poll_valid()
  net: dsa: sja1105: fix multicast forwarding working only for last added mdb 
entry
  net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB 
accesses
  net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset
  r8152: check budget for r8152_poll()
  kcm: Fix memory leak in error path of kcm_sendmsg()
  platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
  platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
  platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
  platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
  UBUNTU: [Config] updateconfigs for NVSW_SN2201
  platform/mellanox: NVSW_SN2201 should depend on ACPI
  net: macb: Enable PTP unicast
  net: macb: fix sleep inside spinlock
  ipv6: fix ip6_sock_set_addr_preferences() typo
  ipv6: Remove in6addr_any alternatives.
  tcp: Factorise sk_family-independent comparison in 
inet_bind2_bucket_match(_addr_any).
  tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
  tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address.
  ixgbe: fix timestamp configuration code
  kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
  MIPS: Only fiddle with CHECKFLAGS if `need-compiler'
  drm/amd/display: Fix a bug when searching for insert_above_mpcc
  arm64: tegra: Update AHUB clock parent and rate on Tegra234
  arm64: tegra: Update AHUB clock parent and rate
  ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen
  ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names
  ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode
  ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
  net: annotate data-races around sk->sk_tsflags
  net: annotate data-races around sk->sk_bind_phc
  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  misc: fastrpc: Fix remote heap allocation request
  misc: fastrpc: Fix incorrect DMA mapping unmap request
  perf build: Update build rule for generated files
  net: renesas: rswitch: Fix unmasking irq condition
  UBUNTU: Upstream stable to v6.1.54, v6.5.4

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2045079

Title:
  Lunar update: upstream stable patchset 2023-11-28

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Lunar:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2023-11-28

                  Ported from the following upstream stable releases:
                          v6.1.54, v6.5.4

         from git://git.kernel.org/

  net/ipv6: SKB symmetric hash should incorporate transport ports
  mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[]
  Multi-gen LRU: fix per-zone reclaim
  io_uring/net: don't overflow multishot accept
  io_uring: break out of iowq iopoll on teardown
  io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
  io_uring: Don't set affinity on a dying sqpoll thread
  drm/virtio: Conditionally allocate virtio_gpu_fence
  scsi: qla2xxx: Adjust IOCB resource on qpair create
  scsi: qla2xxx: Limit TMF to 8 per function
  scsi: qla2xxx: Fix deletion race condition
  scsi: qla2xxx: fix inconsistent TMF timeout
  scsi: qla2xxx: Fix command flush during TMF
  scsi: qla2xxx: Fix erroneous link up failure
  scsi: qla2xxx: Turn off noisy message log
  scsi: qla2xxx: Fix session hang in gnl
  scsi: qla2xxx: Fix TMF leak through
  scsi: qla2xxx: Remove unsupported ql2xenabledif option
  scsi: qla2xxx: Flush mailbox commands on chip reset
  scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
  scsi: qla2xxx: Error code did not return to upper layer
  scsi: qla2xxx: Fix firmware resource tracking
  null_blk: fix poll request timeout handling
  fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
  clk: qcom: camcc-sc7180: fix async resume during probe
  drm/ast: Fix DRAM init on AST2200
  ASoC: tegra: Fix SFC conversion for few rates
  clk: qcom: turingcc-qcs404: fix missing resume during probe
  arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos
  send channel sequence number in SMB3 requests after reconnects
  mm: hugetlb_vmemmap: fix a race between vmemmap pmd split
  lib/test_meminit: allocate pages up to order MAX_ORDER
  parisc: led: Fix LAN receive and transmit LEDs
  parisc: led: Reduce CPU overhead for disk & lan LED computation
  cifs: update desired access while requesting for directory lease
  pinctrl: cherryview: fix address_space_handler() argument
  dt-bindings: clock: xlnx,versal-clk: drop select:false
  clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
  clk: imx: pll14xx: align pdiv with reference manual
  clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
  soc: qcom: qmi_encdec: Restrict string length in decode
  clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors
  clk: qcom: lpasscc-sc7280: fix missing resume during probe
  clk: qcom: q6sstop-qcs404: fix missing resume during probe
  clk: qcom: mss-sc7180: fix missing resume during probe
  NFS: Fix a potential data corruption
  NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
  bus: mhi: host: Skip MHI reset if device is in RDDM
  kbuild: rpm-pkg: define _arch conditionally
  kbuild: do not run depmod for 'make modules_sign'
  tpm_crb: Fix an error handling path in crb_acpi_add()
  gfs2: Switch to wait_event in gfs2_logd
  gfs2: low-memory forced flush fixes
  mailbox: qcom-ipcc: fix incorrect num_chans counting
  kconfig: fix possible buffer overflow
  Input: iqs7222 - configure power mode before triggering ATI
  perf trace: Use zfree() to reduce chances of use after free
  perf trace: Really free the evsel->priv area
  pwm: atmel-tcb: Convert to platform remove callback returning void
  pwm: atmel-tcb: Harmonize resource allocation order
  pwm: atmel-tcb: Fix resource freeing in error path and remove
  backlight: gpio_backlight: Drop output GPIO direction check for initial power 
state
  Input: tca6416-keypad - always expect proper IRQ number in i2c client
  Input: tca6416-keypad - fix interrupt enable disbalance
  perf annotate bpf: Don't enclose non-debug code with an assert()
  x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
  perf vendor events: Update the JSON/events descriptions for power10 platform
  perf vendor events: Drop some of the JSON/events for power10 platform
  perf vendor events: Drop STORES_PER_INST metric event for power10 platform
  perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
  watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
  pwm: lpc32xx: Remove handling of PWM channels
  perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators
  perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test
  drm/i915: mark requests for GuC virtual engines to avoid use-after-free
  blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
  blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice()
  smb: propagate error code of extract_sharename()
  net/sched: fq_pie: avoid stalls in fq_pie_timer()
  sctp: annotate data-races around sk->sk_wmem_queued
  ipv4: annotate data-races around fi->fib_dead
  net: read sk->sk_family once in sk_mc_loop()
  net: fib: avoid warn splat in flow dissector
  xsk: Fix xsk_diag use-after-free error during socket cleanup
  drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page"
  drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn()
  drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
  net: use sk_forward_alloc_get() in sk_get_meminfo()
  net: annotate data-races around sk->sk_forward_alloc
  mptcp: annotate data-races around msk->rmem_fwd_alloc
  ipv4: ignore dst hint for multipath routes
  ipv6: ignore dst hint for multipath routes
  igb: disable virtualization features on 82580
  gve: fix frag_list chaining
  veth: Fixing transmit return status for dropped packets
  net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
  net: phy: micrel: Correct bit assignments for phy_device flags
  bpf, sockmap: Fix skb refcnt race after locking changes
  af_unix: Fix data-races around user->unix_inflight.
  af_unix: Fix data-race around unix_tot_inflight.
  af_unix: Fix data-races around sk->sk_shutdown.
  af_unix: Fix data race around sk->sk_err.
  kcm: Destroy mutex in kcm_exit_net()
  octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler
  igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
  igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
  igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
  s390/zcrypt: don't leak memory if dev_set_name() fails
  idr: fix param name in idr_alloc_cyclic() doc
  ip_tunnels: use DEV_STATS_INC()
  net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and 
offload
  net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
  net: dsa: sja1105: complete tc-cbs offload support on SJA1110
  bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf().
  bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check.
  net: hns3: fix tx timeout issue
  net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read()
  net: hns3: fix debugfs concurrency issue between kfree buffer and read
  net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue
  net: hns3: fix the port information display when sfp is absent
  net: hns3: remove GSO partial feature bit
  sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
  Multi-gen LRU: avoid race in inc_min_seq()
  net/mlx5: Free IRQ rmap and notifier on kernel shutdown
  ARC: atomics: Add compiler barrier to atomic operations...
  clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL
  dmaengine: sh: rz-dmac: Fix destination and source data size setting
  jbd2: fix checkpoint cleanup performance regression
  jbd2: check 'jh->b_transaction' before removing it from checkpoint
  jbd2: correct the end of the journal recovery scan range
  ext4: add correct group descriptors and reserved GDT blocks to system zone
  ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
  f2fs: flush inode if atomic file is aborted
  f2fs: avoid false alarm of circular locking
  lib: test_scanf: Add explicit type cast to result initialization in 
test_number_prefix()
  hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
  ata: ahci: Add Elkhart Lake AHCI controller
  ata: pata_falcon: fix IO base selection for Q40
  ata: sata_gemini: Add missing MODULE_DESCRIPTION
  ata: pata_ftide010: Add missing MODULE_DESCRIPTION
  fuse: nlookup missing decrement in fuse_direntplus_link
  btrfs: zoned: do not zone finish data relocation block group
  btrfs: fix start transaction qgroup rsv double free
  btrfs: free qgroup rsv on io failure
  btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
  btrfs: set page extent mapped after read_folio in relocate_one_page
  btrfs: zoned: re-enable metadata over-commit for zoned mode
  btrfs: use the correct superblock to compare fsid in btrfs_validate_super
  drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
  mtd: rawnand: brcmnand: Fix crash during the panic_write
  mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
  mtd: spi-nor: Correct flags for Winbond w25q128
  mtd: rawnand: brcmnand: Fix potential false time out warning
  mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
  drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
  drm/amd/display: prevent potential division by zero errors
  KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry
  KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn
  KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration
  KVM: nSVM: Check instead of asserting on nested TSC scaling support
  KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state
  KVM: SVM: Set target pCPU during IRTE update if target vCPU is running
  KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL
  MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression
  perf hists browser: Fix hierarchy mode header
  perf test shell stat_bpf_counters: Fix test on Intel
  perf tools: Handle old data in PERF_RECORD_ATTR
  perf hists browser: Fix the number of entries for 'e' key
  drm/amd/display: always switch off ODM before committing more streams
  drm/amd/display: Remove wait while locked
  drm/amdgpu: register a dirty framebuffer callback for fbcon
  kunit: Fix wild-memory-access bug in kunit_free_suite_set()
  net: ipv4: fix one memleak in __inet_del_ifa()
  kselftest/runner.sh: Propagate SIGTERM to runner child
  selftests: Keep symlinks, when possible
  net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in 
smcr_port_add
  net: stmmac: fix handling of zero coalescing tx-usecs
  net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
  net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in 
mtk_hwlro_get_fdir_all()
  hsr: Fix uninit-value access in fill_frame_info()
  net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast 
address
  net:ethernet:adi:adin1110: Fix forwarding offload
  net: dsa: sja1105: hide all multicast addresses from "bridge fdb show"
  net: dsa: sja1105: propagate exact error code from 
sja1105_dynamic_config_poll_valid()
  net: dsa: sja1105: fix multicast forwarding working only for last added mdb 
entry
  net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB 
accesses
  net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset
  r8152: check budget for r8152_poll()
  kcm: Fix memory leak in error path of kcm_sendmsg()
  platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
  platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
  platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
  platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
  UBUNTU: [Config] updateconfigs for NVSW_SN2201
  platform/mellanox: NVSW_SN2201 should depend on ACPI
  net: macb: Enable PTP unicast
  net: macb: fix sleep inside spinlock
  ipv6: fix ip6_sock_set_addr_preferences() typo
  ipv6: Remove in6addr_any alternatives.
  tcp: Factorise sk_family-independent comparison in 
inet_bind2_bucket_match(_addr_any).
  tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
  tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address.
  ixgbe: fix timestamp configuration code
  kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
  MIPS: Only fiddle with CHECKFLAGS if `need-compiler'
  drm/amd/display: Fix a bug when searching for insert_above_mpcc
  arm64: tegra: Update AHUB clock parent and rate on Tegra234
  arm64: tegra: Update AHUB clock parent and rate
  ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen
  ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names
  ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode
  ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
  net: annotate data-races around sk->sk_tsflags
  net: annotate data-races around sk->sk_bind_phc
  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  misc: fastrpc: Fix remote heap allocation request
  misc: fastrpc: Fix incorrect DMA mapping unmap request
  perf build: Update build rule for generated files
  net: renesas: rswitch: Fix unmasking irq condition
  UBUNTU: Upstream stable to v6.1.54, v6.5.4

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2045079/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to