Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.165 upstream stable release from git://git.kernel.org/ f2fs: fix return value of f2fs_convert_inline_inode() f2fs: fix to don't dirty inode for readonly filesystem EDAC, i10nm: make skx_common.o a separate module platform/chrome: cros_ec_debugfs: fix wrong EC message version block: refactor to use helper block: cleanup bio_integrity_prep block: initialize integrity buffer to zero before writing it to media hfsplus: fix to avoid false alarm of circular locking x86/of: Return consistent error type from x86_of_pci_irq_enable() x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling x86/pci/xen: Fix PCIBIOS_* return code handling x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos hwmon: (adt7475) Fix default duty on fan is disabled pwm: stm32: Always do lazy disabling drm/meson: fix canvas release in bind function hwmon: (max6697) Fix underflow when writing limit attributes hwmon: (max6697) Fix swapped temp{1,8} critical alarms arm64: dts: qcom: sdm845: add power-domain to UFS PHY arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings arm64: dts: qcom: sm8250: add power-domain to UFS PHY soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers arm64: dts: qcom: msm8996: specify UFS core_clk frequencies memory: fsl_ifc: Make FSL_IFC config visible and selectable soc: qcom: pdr: protect locator_addr with the main mutex soc: qcom: pdr: fix parsing of domains lists arm64: dts: rockchip: Increase VOP clk rate on RK3328 ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset ARM: dts: imx6qdl-kontron-samx6i: fix board reset ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 arm64: dts: amlogic: gx: correct hdmi clocks m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages x86/xen: Convert comma to semicolon m68k: cmpxchg: Fix return value for default case in __arch_xchg() ARM: pxa: spitz: use gpio descriptors for audio ARM: spitz: fix GPIO assignment for backlight vmlinux.lds.h: catch .bss..L* sections into BSS") firmware: turris-mox-rwtm: Do not complete if there are no waiters firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() firmware: turris-mox-rwtm: Initialize completion before mailbox wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device selftests/bpf: Fix prog numbers in test_sockmap net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP tcp: annotate lockless accesses to sk->sk_err_soft tcp: annotate lockless access to sk->sk_err tcp: add tcp_done_with_error() helper tcp: fix race in tcp_write_err() tcp: fix races in tcp_v[46]_err() net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined selftests/bpf: Check length of recv in test_sockmap lib: objagg: Fix general protection fault mlxsw: spectrum_acl_erp: Fix object nesting warning mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() net: fec: Refactor: #define magic constants net: fec: Fix FEC_ECR_EN1588 being cleared on link-down libbpf: Checking the btf_type kind when fixing variable offsets ipvs: Avoid unnecessary calls to skb_is_gso_sctp netfilter: nf_tables: rise cap on SELinux secmark context perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation perf: Fix perf_aux_size() for greater-than 32-bit size perf: Prevent passing zero nr_pages to rb_alloc_aux() perf: Fix default aux_watermark calculation wifi: virt_wifi: avoid reporting connection success with wrong SSID gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey wifi: virt_wifi: don't use strlen() in const context locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers selftests/bpf: Close fd in error path in drop_on_reuseport bpf: annotate BTF show functions with __printf bna: adjust 'name' buf size of bna_tcb and bna_ccb structures bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o selftests: forwarding: devlink_lib: Wait for udev events after reloading xdp: fix invalid wait context of page_pool_destroy() drm/amd/pm: Fix aldebaran pcie speed reporting drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() media: imon: Fix race getting ictx->lock media: i2c: Fix imx412 exposure control saa7134: Unchecked i2c_transfer function result fixed media: uvcvideo: Override default flags media: renesas: vsp1: Fix _irqsave and _irq mix media: renesas: vsp1: Store RPF partition configuration per RPF instance drm/mediatek: Add missing plane settings when async update drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property leds: trigger: Unregister sysfs attributes before calling deactivate() perf report: Fix condition in sort__sym_cmp() drm/etnaviv: fix DMA direction handling for cached RW buffers drm/qxl: Add check for drm_cvt_mode Revert "leds: led-core: Fix refcount leak in of_led_get()" ext4: fix infinite loop when replaying fast_commit media: venus: flush all buffers in output plane streamoff perf intel-pt: Fix aux_watermark calculation for 64-bit size perf intel-pt: Fix exclude_guest setting mfd: rsmu: Split core code into separate module mfd: omap-usb-tll: Use struct_size to allocate tll xprtrdma: Fix rpcrdma_reqs_reset() SUNRPC: avoid soft lockup when transmitting UDP to reachable server. NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server ext4: return early for non-eligible fast_commit track events ext4: don't track ranges in fast_commit if inode has inlined data ext4: avoid writing unitialized memory to disk in EA inodes sparc64: Fix incorrect function signature and add prototype for prom_cif_init SUNRPC: Fixup gss_status tracepoint error output PCI: Fix resource double counting on remove & rescan clk: qcom: branch: Add helper functions for setting retain bits clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock coresight: Fix ref leak when of_coresight_parse_endpoint() fails RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE RDMA/cache: Release GID table even if leak is detected Input: qt1050 - handle CHIP_ID reading error RDMA/mlx4: Fix truncated output warning in mad.c RDMA/mlx4: Fix truncated output warning in alias_GUID.c RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs ASoC: max98088: Check for clk_prepare_enable() error mtd: make mtd_test.c a separate module RDMA/device: Return error earlier if port in not valid Input: elan_i2c - do not leave interrupt disabled on suspend failure PCI: endpoint: Clean up error handling in vpci_scan_bus() vhost/vsock: always initialize seqpacket_allow net: missing check virtio MIPS: Octeron: remove source file executable bit powerpc/xmon: Fix disassembly CPU feature checks macintosh/therm_windtunnel: fix module unload. RDMA/hns: Fix missing pagesize and alignment check in FRMR RDMA/hns: Fix undifined behavior caused by invalid max_sge RDMA/hns: Fix insufficient extend DB for VFs. bnxt_re: Fix imm_data endianness netfilter: ctnetlink: use helper function to calculate expect ID netfilter: nf_set_pipapo: fix initial map fill net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports fs/ntfs3: Use ALIGN kernel macro fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT fs/ntfs3: Fix transform resident to nonresident for compressed files fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting fs/ntfs3: Fix getting file type pinctrl: rockchip: update rk3308 iomux routes pinctrl: core: fix possible memory leak when pinctrl_enable() fails pinctrl: single: fix possible memory leak when pinctrl_enable() fails pinctrl: ti: ti-iodelay: Drop if block with always false condition pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails pinctrl: freescale: mxs: Fix refcount of child fs/ntfs3: Replace inode_trylock with inode_lock fs/ntfs3: Fix field-spanning write in INDEX_HDR fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro rtc: interface: Add RTC offset to alarm after fix-up fs/ntfs3: Missed error return landlock: Don't lose track of restrictions on cred_transfer mm/hugetlb: fix possible recursive locking detected warning mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer dt-bindings: thermal: correct thermal zone node name limit tick/broadcast: Make takeover of broadcast hrtimer reliable net: netconsole: Disable target before netpoll cleanup af_packet: Handle outgoing VLAN packets without hardware offloading ipv6: take care of scope when choosing the src addr sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks fuse: verify {g,u}id mount options correctly char: tpm: Fix possible memory leak in tpm_bios_measurements_open() media: venus: fix use after free in vdec_close ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() ext2: Verify bitmap and itable block numbers before using them drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes scsi: qla2xxx: Fix optrom version displayed in FDMI drm/amd/display: Check for NULL pointer sched/fair: Use all little CPUs for CPU-bound workloads apparmor: use kvfree_sensitive to free data->data task_work: s/task_work_cancel()/task_work_cancel_func()/ task_work: Introduce task_work_cancel() again udf: Avoid using corrupted block bitmap buffer m68k: amiga: Turn off Warp1260 interrupts during boot ext4: check dot and dotdot of dx_root before making dir indexed ext4: make sure the first directory block is not a hole io_uring: tighten task exit cancellations selftests/landlock: Add cred_transfer test wifi: mwifiex: Fix interface type change leds: ss4200: Convert PCIBIOS_* return codes to errnos jbd2: make jbd2_journal_get_max_txn_bufs() internal media: uvcvideo: Fix integer overflow calculating timestamp KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() ALSA: usb-audio: Fix microphone sound on HD webcam. ALSA: usb-audio: Move HD Webcam quirk to the right place ALSA: usb-audio: Add a quirk for Sonix HD USB Camera tools/memory-model: Fix bug in lock.cat hwrng: amd - Convert PCIBIOS_* return codes to errnos PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN PCI: dw-rockchip: Fix initial PERST# GPIO value PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio binder: fix hang of unregistered readers dev/parport: fix the array out-of-bounds risk fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use ubi: eba: properly rollback inside self_check_eba decompress_bunzip2: fix rare decompression failure kbuild: Fix '-S -c' in x86 stack protector scripts kobject_uevent: Fix OOB access within zap_modalias_env() gve: Fix an edge case for TSO skb validity check devres: Fix devm_krealloc() wasting memory devres: Fix memory leakage caused by driver API devm_free_percpu() mm/numa_balancing: teach mpol_to_str about the balancing mode rtc: cmos: Fix return value of nvmem callbacks scsi: qla2xxx: During vport delete send async logout explicitly scsi: qla2xxx: Unable to act on RSCN for port online scsi: qla2xxx: Fix for possible memory corruption scsi: qla2xxx: Use QP lock to search for bsg scsi: qla2xxx: Fix flash read failure scsi: qla2xxx: Complete command early within lock scsi: qla2xxx: validate nvme_local_port correctly perf: Fix event leak upon exit perf: Fix event leak upon exec and file release perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR perf/x86/intel/pt: Fix topa_entry base length perf/x86/intel/pt: Fix a topa_entry base address calculation drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell drm/i915/dp: Reset intel_dp->link_trained before retraining the link rtc: isl1208: Fix return value of nvmem callbacks watchdog/perf: properly initialize the turbo mode timestamp and rearm counter platform: mips: cpu_hwmon: Disable driver on unsupported hardware RDMA/iwcm: Fix a use-after-free related to destroying CM IDs selftests/sigaltstack: Fix ppc64 GCC build rbd: don't assume rbd_is_lock_owner() for exclusive mappings remoteproc: stm32_rproc: Fix mailbox interrupts queuing remoteproc: imx_rproc: Skip over memory region when node value is NULL MIPS: ip30: ip30-console: Add missing include MIPS: dts: loongson: Fix GMAC phy node MIPS: Loongson64: env: Hook up Loongsson-2K MIPS: Loongson64: Remove memory node for builtin-dtb MIPS: Loongson64: reset: Prioritise firmware service MIPS: Loongson64: Test register availability before use drm/panfrost: Mark simple_ondemand governor as softdep rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 nilfs2: handle inconsistent state in nilfs_btnode_create_block() io_uring/io-wq: limit retrying worker initialisation kernel: rerun task_work while freezing in get_signal() kdb: address -Wformat-security warnings kdb: Use the passed prompt in kdb_position_cursor() jfs: Fix array-index-out-of-bounds in diFree dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels phy: cadence-torrent: Check return value on register read um: time-travel: fix time-travel-start option um: time-travel: fix signal blocking race/hang libbpf: Fix no-args func prototype BTF dumping syntax dma: fix call order in dmam_free_coherent bpf, events: Use prog to emit ksymbol event for main program MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later ipv4: Fix incorrect source address in Record Route option net: bonding: correctly annotate RCU in bond_should_notify_peers() netfilter: nft_set_pipapo_avx2: disable softinterrupts tipc: Return non-zero value from tipc_udp_addr2str() on error net: stmmac: Correct byte order of perfect_match net: nexthop: Initialize all fields in dumped nexthops bpf: Fix a segment issue when downgrading gso_size mISDN: Fix a use after free in hfcmulti_tx() apparmor: Fix null pointer deref when receiving skb during sock creation powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() lirc: rc_dev_get_from_fd(): fix file leak spi: spidev: Make probe to fail early if a spidev compatible is used spi: spidev: Replace ACPI specific code by device_get_match_data() spi: spidev: Replace OF specific code by device property API spidev: Add Silicon Labs EM3581 device compatible spi: spidev: order compatibles alphabetically spi: spidev: add correct compatible for Rohm BH2228FV ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable ceph: fix incorrect kmalloc size of pagevec mempool iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en nvme: split command copy into a helper nvme: separate command prep and issue nvme-pci: add missing condition check for existence of mapped data fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node arm64: dts: qcom: msm8998: drop USB PHY clock index arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB sysctl: always initialize i_uid/i_gid ext4: make ext4_es_insert_extent() return void ext4: refactor ext4_da_map_blocks() ext4: convert to exclusive lock while inserting delalloc extents ext4: factor out a common helper to query extent map ext4: check the extent status again before inserting delalloc block soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver drivers: soc: xilinx: check return status of get_api_version() leds: trigger: use RCU to protect the led_cdevs list leds: trigger: Remove unused function led_trigger_rename_static() leds: trigger: Store brightness set by led_trigger_event() leds: trigger: Call synchronize_rcu() before calling trig->activate() leds: triggers: Flush pending brightness before activating trigger irqdomain: Fixed unbalanced fwnode get and put genirq: Allow the PM device to originate from irq domain irqchip/imx-irqsteer: Constify irq_chip struct irqchip/imx-irqsteer: Add runtime PM support irqchip/imx-irqsteer: Handle runtime power management correctly drm/dp_mst: Fix all mstb marked as not probed after suspend/resume remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a MIPS: dts: loongson: Fix liointc IRQ polarity MIPS: dts: loongson: Fix ls2k1000-rtc interrupt drm/nouveau: prime: fix refcount underflow drm/vmwgfx: Fix overlay when using Screen Targets sched: act_ct: take care of padding in struct zones_ht_key ALSA: hda: conexant: Fix headset auto detect fail in the polling mode rtnetlink: enable alt_ifname for setlink/newlink rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). net/iucv: fix use after free in iucv_sock_close() net: mvpp2: Don't re-use loop iterator netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys ipv6: fix ndisc_is_useropt() handling for PIO riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() power: supply: bq24190_charger: replace deprecated strncpy with strscpy platform/chrome: cros_ec_proto: Lock device when updating MKBP version HID: wacom: Modify pen IDs protect the fetch of ->fd[fd] in do_dup2() from mispredictions ALSA: usb-audio: Correct surround channels in UAC1 channel map ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G Revert "ALSA: firewire-lib: obsolete workqueue for period update" Revert "ALSA: firewire-lib: operate for period elapse event in process context" drm/vmwgfx: Fix a deadlock in dma buf fence polling net: usb: sr9700: fix uninitialized variable use in sr_mdio_read r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY mptcp: fix duplicate data handling netfilter: ipset: Add list flush to cancel_gc genirq: Allow irq_chip registration functions to take a const irq_chip irqchip/mbigen: Fix mbigen node address layout x86/mm: Fix pti_clone_pgtable() alignment assumption x86/mm: Fix pti_clone_entry_text() for i386 sctp: move hlist_node and hashent out of sctp_ep_common sctp: Fix null-ptr-deref in reuseport_add_sock(). net: usb: qmi_wwan: fix memory leak for not ip packets net: bridge: mcast: wait for previous gc cycles when removing port net: linkwatch: use system_unbound_wq Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() l2tp: fix lockdep splat net: fec: Stop PPS on driver remove rcutorture: Fix rcu_torture_fwd_cb_cr() data race md: do not delete safemode_timer in mddev_suspend md/raid5: avoid BUG_ON() while continue reshape after reassembling clocksource/drivers/sh_cmt: Address race condition for clock events ACPI: battery: create alarm sysfs attribute atomically ACPI: SBS: manage alarm sysfs attribute through psy core selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT PCI: Add Edimax Vendor ID to pci_ids.h udf: prevent integer overflow in udf_bitmap_free_blocks() wifi: nl80211: don't give key data to userspace btrfs: fix bitmap leak when loading free space cache on duplicate entry drm/amdgpu/pm: Fix the null pointer dereference for smu7 drm/amdgpu: Fix the null pointer dereference to ras_manager drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules drm/amd/display: Add null checker before passing variables media: uvcvideo: Ignore empty TS packets media: uvcvideo: Fix the bandwdith quirk on USB 3.x ext4: fix uninitialized variable in ext4_inlinedir_to_tree jbd2: avoid memleak in jbd2_journal_write_metadata_buffer s390/sclp: Prevent release of buffer in I/O SUNRPC: Fix a race to wake a sync task profiling: remove profile=sleep support scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime ext4: fix wrong unit use in ext4_mb_find_by_goal arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space arm64: Add Neoverse-V2 part arm64: barrier: Restore spec_bar() macro arm64: cputype: Add Cortex-X4 definitions arm64: cputype: Add Neoverse-V3 definitions arm64: errata: Add workaround for Arm errata 3194386 and 3312417 UBUNTU: [Config] Set ARM64_ERRATUM_3194386=y arm64: cputype: Add Cortex-X3 definitions arm64: cputype: Add Cortex-A720 definitions arm64: cputype: Add Cortex-X925 definitions arm64: errata: Unify speculative SSBS errata logic arm64: errata: Expand speculative SSBS workaround arm64: cputype: Add Cortex-X1C definitions arm64: cputype: Add Cortex-A725 definitions arm64: errata: Expand speculative SSBS workaround (again) i2c: smbus: Improve handling of stuck alerts ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask ASoC: codecs: wsa881x: Correct Soundwire ports mask spi: spidev: Add missing spi_device_id for bh2228fv i2c: smbus: Send alert notifications to all devices if source not found bpf: kprobe: remove unused declaring of bpf_kprobe_override kprobes: Fix to check symbol prefixes correctly spi: spi-fsl-lpspi: Fix scldiv calculation ALSA: usb-audio: Re-add ScratchAmp quirk entries ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT drm/client: fix null pointer dereference in drm_client_modeset_probe ALSA: line6: Fix racy access to midibuf ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 usb: vhci-hcd: Do not drop references before new references are gained USB: serial: debug: do not echo input by default usb: gadget: core: Check for unset descriptor usb: gadget: u_serial: Set start_delayed during suspend scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic tick/broadcast: Move per CPU pointer access into the atomic section vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler ntp: Clamp maxerror and esterror to operating range clocksource: Reduce the default clocksource_watchdog() retries to 2 torture: Enable clocksource watchdog with "tsc=watchdog" clocksource: Scale the watchdog read retries automatically clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() irqchip/meson-gpio: support more than 8 channels gpio irq irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' driver core: Fix uevent_show() vs driver detach race ntp: Safeguard against time_constant overflow timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() serial: core: check uartclk for zero to avoid divide by zero kcov: properly check for softirq context irqchip/xilinx: Fix shift out of bounds genirq/irqdesc: Honor caller provided affinity in alloc_desc() power: supply: axp288_charger: Fix constant_charge_voltage writes power: supply: axp288_charger: Round constant_charge_voltage writes down tracing: Fix overflow in get_free_elt() padata: Fix possible divide-by-0 panic in padata_mt_helper() x86/mtrr: Check if fixed MTRRs exist before saving them sched/smt: Introduce sched_smt_present_inc/dec() helper sched/smt: Fix unbalance sched_smt_present dec/inc drm/bridge: analogix_dp: properly handle zero sized AUX transactions drm/mgag200: Set DDC timeout in milliseconds mptcp: sched: check both directions for backup mptcp: distinguish rcv vs sent backup flag in requests mptcp: fix NL PM announced address accounting mptcp: mib: count MPJ with backup flag mptcp: fix bad RCVPRUNED mib accounting mptcp: pm: only set request_bkup flag when sending MP_PRIO mptcp: export local_address mptcp: pm: fix backup support in signal endpoints selftests: mptcp: join: validate backup in MPJ selftests: mptcp: join: check backup support in signal endp btrfs: fix corruption after buffer fault in during direct IO append write xfs: fix log recovery buffer allocation for the legacy h_size fixup btrfs: fix double inode unlock for direct IO sync writes PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal netfilter: nf_tables: set element extended ACK reporting support netfilter: nf_tables: use timestamp to check for set element timeout netfilter: nf_tables: bail out if stateful expression provides no .clone netfilter: nf_tables: allow clone callbacks to sleep netfilter: nf_tables: prefer nft_chain_validate net: stmmac: Enable mac_managed_pm phylink config PCI: dwc: Restore MSI Receiver mask during resume wifi: mac80211: check basic rates validity mptcp: fully established after ADD_ADDR echo on MPJ drm/i915/gem: Fix Virtual Memory mapping boundaries calculation powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes arm64: cpufeature: Fix the visibility of compat hwcaps exec: Fix ToCToU between perm check and set-uid/gid usage nvme/pci: Add APST quirk for Lenovo N60z laptop usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. binfmt_flat: Fix corruption when not offsetting data start wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" Linux 5.15.165 UBUNTU: Upstream stable to v5.15.165 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Jammy) Importance: Medium Assignee: Koichiro Den (koichiroden) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Jammy) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Jammy) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Jammy) Status: New => In Progress ** Changed in: linux (Ubuntu Jammy) Assignee: (unassigned) => Koichiro Den (koichiroden) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.165 upstream stable release from git://git.kernel.org/ - + f2fs: fix return value of f2fs_convert_inline_inode() + f2fs: fix to don't dirty inode for readonly filesystem + EDAC, i10nm: make skx_common.o a separate module + platform/chrome: cros_ec_debugfs: fix wrong EC message version + block: refactor to use helper + block: cleanup bio_integrity_prep + block: initialize integrity buffer to zero before writing it to media + hfsplus: fix to avoid false alarm of circular locking + x86/of: Return consistent error type from x86_of_pci_irq_enable() + x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling + x86/pci/xen: Fix PCIBIOS_* return code handling + x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos + hwmon: (adt7475) Fix default duty on fan is disabled + pwm: stm32: Always do lazy disabling + drm/meson: fix canvas release in bind function + hwmon: (max6697) Fix underflow when writing limit attributes + hwmon: (max6697) Fix swapped temp{1,8} critical alarms + arm64: dts: qcom: sdm845: add power-domain to UFS PHY + arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings + arm64: dts: qcom: sm8250: add power-domain to UFS PHY + soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers + arm64: dts: qcom: msm8996: specify UFS core_clk frequencies + memory: fsl_ifc: Make FSL_IFC config visible and selectable + soc: qcom: pdr: protect locator_addr with the main mutex + soc: qcom: pdr: fix parsing of domains lists + arm64: dts: rockchip: Increase VOP clk rate on RK3328 + ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node + ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset + ARM: dts: imx6qdl-kontron-samx6i: fix board reset + ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects + ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity + arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property + arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux + arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 + arm64: dts: amlogic: gx: correct hdmi clocks + m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages + x86/xen: Convert comma to semicolon + m68k: cmpxchg: Fix return value for default case in __arch_xchg() + ARM: pxa: spitz: use gpio descriptors for audio + ARM: spitz: fix GPIO assignment for backlight + vmlinux.lds.h: catch .bss..L* sections into BSS") + firmware: turris-mox-rwtm: Do not complete if there are no waiters + firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() + firmware: turris-mox-rwtm: Initialize completion before mailbox + wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device + selftests/bpf: Fix prog numbers in test_sockmap + net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP + tcp: annotate lockless accesses to sk->sk_err_soft + tcp: annotate lockless access to sk->sk_err + tcp: add tcp_done_with_error() helper + tcp: fix race in tcp_write_err() + tcp: fix races in tcp_v[46]_err() + net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined + selftests/bpf: Check length of recv in test_sockmap + lib: objagg: Fix general protection fault + mlxsw: spectrum_acl_erp: Fix object nesting warning + mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible + mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors + wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers + wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() + wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() + net: fec: Refactor: #define magic constants + net: fec: Fix FEC_ECR_EN1588 being cleared on link-down + libbpf: Checking the btf_type kind when fixing variable offsets + ipvs: Avoid unnecessary calls to skb_is_gso_sctp + netfilter: nf_tables: rise cap on SELinux secmark context + perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation + perf: Fix perf_aux_size() for greater-than 32-bit size + perf: Prevent passing zero nr_pages to rb_alloc_aux() + perf: Fix default aux_watermark calculation + wifi: virt_wifi: avoid reporting connection success with wrong SSID + gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey + wifi: virt_wifi: don't use strlen() in const context + locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers + selftests/bpf: Close fd in error path in drop_on_reuseport + bpf: annotate BTF show functions with __printf + bna: adjust 'name' buf size of bna_tcb and bna_ccb structures + bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o + selftests: forwarding: devlink_lib: Wait for udev events after reloading + xdp: fix invalid wait context of page_pool_destroy() + drm/amd/pm: Fix aldebaran pcie speed reporting + drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit + drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators + drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() + media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() + media: imon: Fix race getting ictx->lock + media: i2c: Fix imx412 exposure control + saa7134: Unchecked i2c_transfer function result fixed + media: uvcvideo: Override default flags + media: renesas: vsp1: Fix _irqsave and _irq mix + media: renesas: vsp1: Store RPF partition configuration per RPF instance + drm/mediatek: Add missing plane settings when async update + drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property + leds: trigger: Unregister sysfs attributes before calling deactivate() + perf report: Fix condition in sort__sym_cmp() + drm/etnaviv: fix DMA direction handling for cached RW buffers + drm/qxl: Add check for drm_cvt_mode + Revert "leds: led-core: Fix refcount leak in of_led_get()" + ext4: fix infinite loop when replaying fast_commit + media: venus: flush all buffers in output plane streamoff + perf intel-pt: Fix aux_watermark calculation for 64-bit size + perf intel-pt: Fix exclude_guest setting + mfd: rsmu: Split core code into separate module + mfd: omap-usb-tll: Use struct_size to allocate tll + xprtrdma: Fix rpcrdma_reqs_reset() + SUNRPC: avoid soft lockup when transmitting UDP to reachable server. + NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server + ext4: return early for non-eligible fast_commit track events + ext4: don't track ranges in fast_commit if inode has inlined data + ext4: avoid writing unitialized memory to disk in EA inodes + sparc64: Fix incorrect function signature and add prototype for prom_cif_init + SUNRPC: Fixup gss_status tracepoint error output + PCI: Fix resource double counting on remove & rescan + clk: qcom: branch: Add helper functions for setting retain bits + clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock + coresight: Fix ref leak when of_coresight_parse_endpoint() fails + RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE + RDMA/cache: Release GID table even if leak is detected + Input: qt1050 - handle CHIP_ID reading error + RDMA/mlx4: Fix truncated output warning in mad.c + RDMA/mlx4: Fix truncated output warning in alias_GUID.c + RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs + ASoC: max98088: Check for clk_prepare_enable() error + mtd: make mtd_test.c a separate module + RDMA/device: Return error earlier if port in not valid + Input: elan_i2c - do not leave interrupt disabled on suspend failure + PCI: endpoint: Clean up error handling in vpci_scan_bus() + vhost/vsock: always initialize seqpacket_allow + net: missing check virtio + MIPS: Octeron: remove source file executable bit + powerpc/xmon: Fix disassembly CPU feature checks + macintosh/therm_windtunnel: fix module unload. + RDMA/hns: Fix missing pagesize and alignment check in FRMR + RDMA/hns: Fix undifined behavior caused by invalid max_sge + RDMA/hns: Fix insufficient extend DB for VFs. + bnxt_re: Fix imm_data endianness + netfilter: ctnetlink: use helper function to calculate expect ID + netfilter: nf_set_pipapo: fix initial map fill + net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports + net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports + fs/ntfs3: Use ALIGN kernel macro + fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT + fs/ntfs3: Fix transform resident to nonresident for compressed files + fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting + fs/ntfs3: Fix getting file type + pinctrl: rockchip: update rk3308 iomux routes + pinctrl: core: fix possible memory leak when pinctrl_enable() fails + pinctrl: single: fix possible memory leak when pinctrl_enable() fails + pinctrl: ti: ti-iodelay: Drop if block with always false condition + pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails + pinctrl: freescale: mxs: Fix refcount of child + fs/ntfs3: Replace inode_trylock with inode_lock + fs/ntfs3: Fix field-spanning write in INDEX_HDR + fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP + nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro + rtc: interface: Add RTC offset to alarm after fix-up + fs/ntfs3: Missed error return + landlock: Don't lose track of restrictions on cred_transfer + mm/hugetlb: fix possible recursive locking detected warning + mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer + dt-bindings: thermal: correct thermal zone node name limit + tick/broadcast: Make takeover of broadcast hrtimer reliable + net: netconsole: Disable target before netpoll cleanup + af_packet: Handle outgoing VLAN packets without hardware offloading + ipv6: take care of scope when choosing the src addr + sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks + fuse: verify {g,u}id mount options correctly + char: tpm: Fix possible memory leak in tpm_bios_measurements_open() + media: venus: fix use after free in vdec_close + ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error + hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() + ext2: Verify bitmap and itable block numbers before using them + drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes + drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes + scsi: qla2xxx: Fix optrom version displayed in FDMI + drm/amd/display: Check for NULL pointer + sched/fair: Use all little CPUs for CPU-bound workloads + apparmor: use kvfree_sensitive to free data->data + task_work: s/task_work_cancel()/task_work_cancel_func()/ + task_work: Introduce task_work_cancel() again + udf: Avoid using corrupted block bitmap buffer + m68k: amiga: Turn off Warp1260 interrupts during boot + ext4: check dot and dotdot of dx_root before making dir indexed + ext4: make sure the first directory block is not a hole + io_uring: tighten task exit cancellations + selftests/landlock: Add cred_transfer test + wifi: mwifiex: Fix interface type change + leds: ss4200: Convert PCIBIOS_* return codes to errnos + jbd2: make jbd2_journal_get_max_txn_bufs() internal + media: uvcvideo: Fix integer overflow calculating timestamp + KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() + ALSA: usb-audio: Fix microphone sound on HD webcam. + ALSA: usb-audio: Move HD Webcam quirk to the right place + ALSA: usb-audio: Add a quirk for Sonix HD USB Camera + tools/memory-model: Fix bug in lock.cat + hwrng: amd - Convert PCIBIOS_* return codes to errnos + PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN + PCI: dw-rockchip: Fix initial PERST# GPIO value + PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio + binder: fix hang of unregistered readers + dev/parport: fix the array out-of-bounds risk + fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed + scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds + clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use + ubi: eba: properly rollback inside self_check_eba + decompress_bunzip2: fix rare decompression failure + kbuild: Fix '-S -c' in x86 stack protector scripts + kobject_uevent: Fix OOB access within zap_modalias_env() + gve: Fix an edge case for TSO skb validity check + devres: Fix devm_krealloc() wasting memory + devres: Fix memory leakage caused by driver API devm_free_percpu() + mm/numa_balancing: teach mpol_to_str about the balancing mode + rtc: cmos: Fix return value of nvmem callbacks + scsi: qla2xxx: During vport delete send async logout explicitly + scsi: qla2xxx: Unable to act on RSCN for port online + scsi: qla2xxx: Fix for possible memory corruption + scsi: qla2xxx: Use QP lock to search for bsg + scsi: qla2xxx: Fix flash read failure + scsi: qla2xxx: Complete command early within lock + scsi: qla2xxx: validate nvme_local_port correctly + perf: Fix event leak upon exit + perf: Fix event leak upon exec and file release + perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR + perf/x86/intel/pt: Fix topa_entry base length + perf/x86/intel/pt: Fix a topa_entry base address calculation + drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 + drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell + drm/i915/dp: Reset intel_dp->link_trained before retraining the link + rtc: isl1208: Fix return value of nvmem callbacks + watchdog/perf: properly initialize the turbo mode timestamp and rearm counter + platform: mips: cpu_hwmon: Disable driver on unsupported hardware + RDMA/iwcm: Fix a use-after-free related to destroying CM IDs + selftests/sigaltstack: Fix ppc64 GCC build + rbd: don't assume rbd_is_lock_owner() for exclusive mappings + remoteproc: stm32_rproc: Fix mailbox interrupts queuing + remoteproc: imx_rproc: Skip over memory region when node value is NULL + MIPS: ip30: ip30-console: Add missing include + MIPS: dts: loongson: Fix GMAC phy node + MIPS: Loongson64: env: Hook up Loongsson-2K + MIPS: Loongson64: Remove memory node for builtin-dtb + MIPS: Loongson64: reset: Prioritise firmware service + MIPS: Loongson64: Test register availability before use + drm/panfrost: Mark simple_ondemand governor as softdep + rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait + rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings + Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables + Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 + nilfs2: handle inconsistent state in nilfs_btnode_create_block() + io_uring/io-wq: limit retrying worker initialisation + kernel: rerun task_work while freezing in get_signal() + kdb: address -Wformat-security warnings + kdb: Use the passed prompt in kdb_position_cursor() + jfs: Fix array-index-out-of-bounds in diFree + dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels + phy: cadence-torrent: Check return value on register read + um: time-travel: fix time-travel-start option + um: time-travel: fix signal blocking race/hang + libbpf: Fix no-args func prototype BTF dumping syntax + dma: fix call order in dmam_free_coherent + bpf, events: Use prog to emit ksymbol event for main program + MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later + ipv4: Fix incorrect source address in Record Route option + net: bonding: correctly annotate RCU in bond_should_notify_peers() + netfilter: nft_set_pipapo_avx2: disable softinterrupts + tipc: Return non-zero value from tipc_udp_addr2str() on error + net: stmmac: Correct byte order of perfect_match + net: nexthop: Initialize all fields in dumped nexthops + bpf: Fix a segment issue when downgrading gso_size + mISDN: Fix a use after free in hfcmulti_tx() + apparmor: Fix null pointer deref when receiving skb during sock creation + powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() + lirc: rc_dev_get_from_fd(): fix file leak + spi: spidev: Make probe to fail early if a spidev compatible is used + spi: spidev: Replace ACPI specific code by device_get_match_data() + spi: spidev: Replace OF specific code by device property API + spidev: Add Silicon Labs EM3581 device compatible + spi: spidev: order compatibles alphabetically + spi: spidev: add correct compatible for Rohm BH2228FV + ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable + ceph: fix incorrect kmalloc size of pagevec mempool + iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en + nvme: split command copy into a helper + nvme: separate command prep and issue + nvme-pci: add missing condition check for existence of mapped data + fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT + powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC + arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node + arm64: dts: qcom: msm8998: drop USB PHY clock index + arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings + arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB + arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB + sysctl: always initialize i_uid/i_gid + ext4: make ext4_es_insert_extent() return void + ext4: refactor ext4_da_map_blocks() + ext4: convert to exclusive lock while inserting delalloc extents + ext4: factor out a common helper to query extent map + ext4: check the extent status again before inserting delalloc block + soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver + drivers: soc: xilinx: check return status of get_api_version() + leds: trigger: use RCU to protect the led_cdevs list + leds: trigger: Remove unused function led_trigger_rename_static() + leds: trigger: Store brightness set by led_trigger_event() + leds: trigger: Call synchronize_rcu() before calling trig->activate() + leds: triggers: Flush pending brightness before activating trigger + irqdomain: Fixed unbalanced fwnode get and put + genirq: Allow the PM device to originate from irq domain + irqchip/imx-irqsteer: Constify irq_chip struct + irqchip/imx-irqsteer: Add runtime PM support + irqchip/imx-irqsteer: Handle runtime power management correctly + drm/dp_mst: Fix all mstb marked as not probed after suspend/resume + remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init + MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 + MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a + MIPS: dts: loongson: Fix liointc IRQ polarity + MIPS: dts: loongson: Fix ls2k1000-rtc interrupt + drm/nouveau: prime: fix refcount underflow + drm/vmwgfx: Fix overlay when using Screen Targets + sched: act_ct: take care of padding in struct zones_ht_key + ALSA: hda: conexant: Fix headset auto detect fail in the polling mode + rtnetlink: enable alt_ifname for setlink/newlink + rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). + net/iucv: fix use after free in iucv_sock_close() + net: mvpp2: Don't re-use loop iterator + netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). + netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). + net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys + ipv6: fix ndisc_is_useropt() handling for PIO + riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() + power: supply: bq24190_charger: replace deprecated strncpy with strscpy + platform/chrome: cros_ec_proto: Lock device when updating MKBP version + HID: wacom: Modify pen IDs + protect the fetch of ->fd[fd] in do_dup2() from mispredictions + ALSA: usb-audio: Correct surround channels in UAC1 channel map + ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G + Revert "ALSA: firewire-lib: obsolete workqueue for period update" + Revert "ALSA: firewire-lib: operate for period elapse event in process context" + drm/vmwgfx: Fix a deadlock in dma buf fence polling + net: usb: sr9700: fix uninitialized variable use in sr_mdio_read + r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY + mptcp: fix duplicate data handling + netfilter: ipset: Add list flush to cancel_gc + genirq: Allow irq_chip registration functions to take a const irq_chip + irqchip/mbigen: Fix mbigen node address layout + x86/mm: Fix pti_clone_pgtable() alignment assumption + x86/mm: Fix pti_clone_entry_text() for i386 + sctp: move hlist_node and hashent out of sctp_ep_common + sctp: Fix null-ptr-deref in reuseport_add_sock(). + net: usb: qmi_wwan: fix memory leak for not ip packets + net: bridge: mcast: wait for previous gc cycles when removing port + net: linkwatch: use system_unbound_wq + Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() + net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() + l2tp: fix lockdep splat + net: fec: Stop PPS on driver remove + rcutorture: Fix rcu_torture_fwd_cb_cr() data race + md: do not delete safemode_timer in mddev_suspend + md/raid5: avoid BUG_ON() while continue reshape after reassembling + clocksource/drivers/sh_cmt: Address race condition for clock events + ACPI: battery: create alarm sysfs attribute atomically + ACPI: SBS: manage alarm sysfs attribute through psy core + selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT + PCI: Add Edimax Vendor ID to pci_ids.h + udf: prevent integer overflow in udf_bitmap_free_blocks() + wifi: nl80211: don't give key data to userspace + btrfs: fix bitmap leak when loading free space cache on duplicate entry + drm/amdgpu/pm: Fix the null pointer dereference for smu7 + drm/amdgpu: Fix the null pointer dereference to ras_manager + drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules + drm/amd/display: Add null checker before passing variables + media: uvcvideo: Ignore empty TS packets + media: uvcvideo: Fix the bandwdith quirk on USB 3.x + ext4: fix uninitialized variable in ext4_inlinedir_to_tree + jbd2: avoid memleak in jbd2_journal_write_metadata_buffer + s390/sclp: Prevent release of buffer in I/O + SUNRPC: Fix a race to wake a sync task + profiling: remove profile=sleep support + scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES + sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime + ext4: fix wrong unit use in ext4_mb_find_by_goal + arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space + arm64: Add Neoverse-V2 part + arm64: barrier: Restore spec_bar() macro + arm64: cputype: Add Cortex-X4 definitions + arm64: cputype: Add Neoverse-V3 definitions + arm64: errata: Add workaround for Arm errata 3194386 and 3312417 + UBUNTU: [Config] Set ARM64_ERRATUM_3194386=y + arm64: cputype: Add Cortex-X3 definitions + arm64: cputype: Add Cortex-A720 definitions + arm64: cputype: Add Cortex-X925 definitions + arm64: errata: Unify speculative SSBS errata logic + arm64: errata: Expand speculative SSBS workaround + arm64: cputype: Add Cortex-X1C definitions + arm64: cputype: Add Cortex-A725 definitions + arm64: errata: Expand speculative SSBS workaround (again) + i2c: smbus: Improve handling of stuck alerts + ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask + ASoC: codecs: wsa881x: Correct Soundwire ports mask + spi: spidev: Add missing spi_device_id for bh2228fv + i2c: smbus: Send alert notifications to all devices if source not found + bpf: kprobe: remove unused declaring of bpf_kprobe_override + kprobes: Fix to check symbol prefixes correctly + spi: spi-fsl-lpspi: Fix scldiv calculation + ALSA: usb-audio: Re-add ScratchAmp quirk entries + ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT + drm/client: fix null pointer dereference in drm_client_modeset_probe + ALSA: line6: Fix racy access to midibuf + ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list + ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 + usb: vhci-hcd: Do not drop references before new references are gained + USB: serial: debug: do not echo input by default + usb: gadget: core: Check for unset descriptor + usb: gadget: u_serial: Set start_delayed during suspend + scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES + scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic + tick/broadcast: Move per CPU pointer access into the atomic section + vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler + ntp: Clamp maxerror and esterror to operating range + clocksource: Reduce the default clocksource_watchdog() retries to 2 + torture: Enable clocksource watchdog with "tsc=watchdog" + clocksource: Scale the watchdog read retries automatically + clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() + irqchip/meson-gpio: support more than 8 channels gpio irq + irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' + driver core: Fix uevent_show() vs driver detach race + ntp: Safeguard against time_constant overflow + timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() + serial: core: check uartclk for zero to avoid divide by zero + kcov: properly check for softirq context + irqchip/xilinx: Fix shift out of bounds + genirq/irqdesc: Honor caller provided affinity in alloc_desc() + power: supply: axp288_charger: Fix constant_charge_voltage writes + power: supply: axp288_charger: Round constant_charge_voltage writes down + tracing: Fix overflow in get_free_elt() + padata: Fix possible divide-by-0 panic in padata_mt_helper() + x86/mtrr: Check if fixed MTRRs exist before saving them + sched/smt: Introduce sched_smt_present_inc/dec() helper + sched/smt: Fix unbalance sched_smt_present dec/inc + drm/bridge: analogix_dp: properly handle zero sized AUX transactions + drm/mgag200: Set DDC timeout in milliseconds + mptcp: sched: check both directions for backup + mptcp: distinguish rcv vs sent backup flag in requests + mptcp: fix NL PM announced address accounting + mptcp: mib: count MPJ with backup flag + mptcp: fix bad RCVPRUNED mib accounting + mptcp: pm: only set request_bkup flag when sending MP_PRIO + mptcp: export local_address + mptcp: pm: fix backup support in signal endpoints + selftests: mptcp: join: validate backup in MPJ + selftests: mptcp: join: check backup support in signal endp + btrfs: fix corruption after buffer fault in during direct IO append write + xfs: fix log recovery buffer allocation for the legacy h_size fixup + btrfs: fix double inode unlock for direct IO sync writes + PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal + netfilter: nf_tables: set element extended ACK reporting support + netfilter: nf_tables: use timestamp to check for set element timeout + netfilter: nf_tables: bail out if stateful expression provides no .clone + netfilter: nf_tables: allow clone callbacks to sleep + netfilter: nf_tables: prefer nft_chain_validate + net: stmmac: Enable mac_managed_pm phylink config + PCI: dwc: Restore MSI Receiver mask during resume + wifi: mac80211: check basic rates validity + mptcp: fully established after ADD_ADDR echo on MPJ + drm/i915/gem: Fix Virtual Memory mapping boundaries calculation + powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. + arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes + arm64: cpufeature: Fix the visibility of compat hwcaps + exec: Fix ToCToU between perm check and set-uid/gid usage + nvme/pci: Add APST quirk for Lenovo N60z laptop + usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. + binfmt_flat: Fix corruption when not offsetting data start + wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values + ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode + media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" + Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" Linux 5.15.165 - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values - binfmt_flat: Fix corruption when not offsetting data start - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. - nvme/pci: Add APST quirk for Lenovo N60z laptop - exec: Fix ToCToU between perm check and set-uid/gid usage - arm64: cpufeature: Fix the visibility of compat hwcaps - arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation - mptcp: fully established after ADD_ADDR echo on MPJ - wifi: mac80211: check basic rates validity - PCI: dwc: Restore MSI Receiver mask during resume - net: stmmac: Enable mac_managed_pm phylink config - netfilter: nf_tables: prefer nft_chain_validate - netfilter: nf_tables: allow clone callbacks to sleep - netfilter: nf_tables: bail out if stateful expression provides no .clone - netfilter: nf_tables: use timestamp to check for set element timeout - netfilter: nf_tables: set element extended ACK reporting support - tls: fix race between tx work scheduling and socket close - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal - btrfs: fix double inode unlock for direct IO sync writes - xfs: fix log recovery buffer allocation for the legacy h_size fixup - btrfs: fix corruption after buffer fault in during direct IO append write - selftests: mptcp: join: check backup support in signal endp - selftests: mptcp: join: validate backup in MPJ - mptcp: pm: fix backup support in signal endpoints - mptcp: export local_address - mptcp: pm: only set request_bkup flag when sending MP_PRIO - mptcp: fix bad RCVPRUNED mib accounting - mptcp: mib: count MPJ with backup flag - mptcp: fix NL PM announced address accounting - mptcp: distinguish rcv vs sent backup flag in requests - mptcp: sched: check both directions for backup - drm/mgag200: Set DDC timeout in milliseconds - drm/bridge: analogix_dp: properly handle zero sized AUX transactions - sched/smt: Fix unbalance sched_smt_present dec/inc - sched/smt: Introduce sched_smt_present_inc/dec() helper - x86/mtrr: Check if fixed MTRRs exist before saving them - padata: Fix possible divide-by-0 panic in padata_mt_helper() - tracing: Fix overflow in get_free_elt() - power: supply: axp288_charger: Round constant_charge_voltage writes down - power: supply: axp288_charger: Fix constant_charge_voltage writes - genirq/irqdesc: Honor caller provided affinity in alloc_desc() - irqchip/xilinx: Fix shift out of bounds - kcov: properly check for softirq context - serial: core: check uartclk for zero to avoid divide by zero - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() - ntp: Safeguard against time_constant overflow - driver core: Fix uevent_show() vs driver detach race - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' - irqchip/meson-gpio: support more than 8 channels gpio irq - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() - clocksource: Scale the watchdog read retries automatically - torture: Enable clocksource watchdog with "tsc=watchdog" - clocksource: Reduce the default clocksource_watchdog() retries to 2 - ntp: Clamp maxerror and esterror to operating range - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler - tick/broadcast: Move per CPU pointer access into the atomic section - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES - usb: gadget: u_serial: Set start_delayed during suspend - usb: gadget: core: Check for unset descriptor - USB: serial: debug: do not echo input by default - usb: vhci-hcd: Do not drop references before new references are gained - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list - ALSA: line6: Fix racy access to midibuf - drm/client: fix null pointer dereference in drm_client_modeset_probe - ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT - ALSA: usb-audio: Re-add ScratchAmp quirk entries - spi: spi-fsl-lpspi: Fix scldiv calculation - kprobes: Fix to check symbol prefixes correctly - bpf: kprobe: remove unused declaring of bpf_kprobe_override - i2c: smbus: Send alert notifications to all devices if source not found - spi: spidev: Add missing spi_device_id for bh2228fv - ASoC: codecs: wsa881x: Correct Soundwire ports mask - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask - i2c: smbus: Improve handling of stuck alerts - arm64: errata: Expand speculative SSBS workaround (again) - arm64: cputype: Add Cortex-A725 definitions - arm64: cputype: Add Cortex-X1C definitions - arm64: errata: Expand speculative SSBS workaround - arm64: errata: Unify speculative SSBS errata logic - arm64: cputype: Add Cortex-X925 definitions - arm64: cputype: Add Cortex-A720 definitions - arm64: cputype: Add Cortex-X3 definitions - arm64: errata: Add workaround for Arm errata 3194386 and 3312417 - arm64: cputype: Add Neoverse-V3 definitions - arm64: cputype: Add Cortex-X4 definitions - arm64: barrier: Restore spec_bar() macro - arm64: Add Neoverse-V2 part - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space - ext4: fix wrong unit use in ext4_mb_find_by_goal - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES - profiling: remove profile=sleep support - SUNRPC: Fix a race to wake a sync task - s390/sclp: Prevent release of buffer in I/O - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer - ext4: fix uninitialized variable in ext4_inlinedir_to_tree - media: uvcvideo: Fix the bandwdith quirk on USB 3.x - media: uvcvideo: Ignore empty TS packets - drm/amd/display: Add null checker before passing variables - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules - drm/amdgpu: Fix the null pointer dereference to ras_manager - drm/amdgpu/pm: Fix the null pointer dereference for smu7 - btrfs: fix bitmap leak when loading free space cache on duplicate entry - wifi: nl80211: don't give key data to userspace - udf: prevent integer overflow in udf_bitmap_free_blocks() - PCI: Add Edimax Vendor ID to pci_ids.h - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT - ACPI: SBS: manage alarm sysfs attribute through psy core - ACPI: battery: create alarm sysfs attribute atomically - clocksource/drivers/sh_cmt: Address race condition for clock events - md/raid5: avoid BUG_ON() while continue reshape after reassembling - md: do not delete safemode_timer in mddev_suspend - rcutorture: Fix rcu_torture_fwd_cb_cr() data race - net: fec: Stop PPS on driver remove - l2tp: fix lockdep splat - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() - net: linkwatch: use system_unbound_wq - net: bridge: mcast: wait for previous gc cycles when removing port - net: usb: qmi_wwan: fix memory leak for not ip packets - sctp: Fix null-ptr-deref in reuseport_add_sock(). - sctp: move hlist_node and hashent out of sctp_ep_common - x86/mm: Fix pti_clone_entry_text() for i386 - x86/mm: Fix pti_clone_pgtable() alignment assumption - irqchip/mbigen: Fix mbigen node address layout - genirq: Allow irq_chip registration functions to take a const irq_chip - netfilter: ipset: Add list flush to cancel_gc - mptcp: fix duplicate data handling - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read - drm/vmwgfx: Fix a deadlock in dma buf fence polling - Revert "ALSA: firewire-lib: operate for period elapse event in process context" - Revert "ALSA: firewire-lib: obsolete workqueue for period update" - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G - ALSA: usb-audio: Correct surround channels in UAC1 channel map - protect the fetch of ->fd[fd] in do_dup2() from mispredictions - HID: wacom: Modify pen IDs - platform/chrome: cros_ec_proto: Lock device when updating MKBP version - power: supply: bq24190_charger: replace deprecated strncpy with strscpy - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() - ipv6: fix ndisc_is_useropt() handling for PIO - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys - netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). - netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). - net: mvpp2: Don't re-use loop iterator - net/iucv: fix use after free in iucv_sock_close() - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). - rtnetlink: enable alt_ifname for setlink/newlink - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode - sched: act_ct: take care of padding in struct zones_ht_key - drm/vmwgfx: Fix overlay when using Screen Targets - drm/nouveau: prime: fix refcount underflow - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt - MIPS: dts: loongson: Fix liointc IRQ polarity - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a - MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume - irqchip/imx-irqsteer: Handle runtime power management correctly - irqchip/imx-irqsteer: Add runtime PM support - irqchip/imx-irqsteer: Constify irq_chip struct - genirq: Allow the PM device to originate from irq domain - irqdomain: Fixed unbalanced fwnode get and put - leds: triggers: Flush pending brightness before activating trigger - leds: trigger: Call synchronize_rcu() before calling trig->activate() - leds: trigger: Store brightness set by led_trigger_event() - leds: trigger: Remove unused function led_trigger_rename_static() - leds: trigger: use RCU to protect the led_cdevs list - drivers: soc: xilinx: check return status of get_api_version() - soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver - ext4: check the extent status again before inserting delalloc block - ext4: factor out a common helper to query extent map - ext4: convert to exclusive lock while inserting delalloc extents - ext4: refactor ext4_da_map_blocks() - ext4: make ext4_es_insert_extent() return void - sysctl: always initialize i_uid/i_gid - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB - arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings - arm64: dts: qcom: msm8998: drop USB PHY clock index - arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT - nvme-pci: add missing condition check for existence of mapped data - nvme: separate command prep and issue - nvme: split command copy into a helper - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en - ceph: fix incorrect kmalloc size of pagevec mempool - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable - spi: spidev: add correct compatible for Rohm BH2228FV - spi: spidev: order compatibles alphabetically - spidev: Add Silicon Labs EM3581 device compatible - spi: spidev: Replace OF specific code by device property API - spi: spidev: Replace ACPI specific code by device_get_match_data() - spi: spidev: Make probe to fail early if a spidev compatible is used - lirc: rc_dev_get_from_fd(): fix file leak - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() - apparmor: Fix null pointer deref when receiving skb during sock creation - mISDN: Fix a use after free in hfcmulti_tx() - bpf: Fix a segment issue when downgrading gso_size - net: nexthop: Initialize all fields in dumped nexthops - net: stmmac: Correct byte order of perfect_match - tipc: Return non-zero value from tipc_udp_addr2str() on error - netfilter: nft_set_pipapo_avx2: disable softinterrupts - net: bonding: correctly annotate RCU in bond_should_notify_peers() - ipv4: Fix incorrect source address in Record Route option - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later - bpf, events: Use prog to emit ksymbol event for main program - dma: fix call order in dmam_free_coherent - libbpf: Fix no-args func prototype BTF dumping syntax - um: time-travel: fix signal blocking race/hang - um: time-travel: fix time-travel-start option - phy: cadence-torrent: Check return value on register read - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels - jfs: Fix array-index-out-of-bounds in diFree - kdb: Use the passed prompt in kdb_position_cursor() - kdb: address -Wformat-security warnings - kernel: rerun task_work while freezing in get_signal() - io_uring/io-wq: limit retrying worker initialisation - nilfs2: handle inconsistent state in nilfs_btnode_create_block() - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait - drm/panfrost: Mark simple_ondemand governor as softdep - MIPS: Loongson64: Test register availability before use - MIPS: Loongson64: reset: Prioritise firmware service - MIPS: Loongson64: Remove memory node for builtin-dtb - MIPS: Loongson64: env: Hook up Loongsson-2K - MIPS: dts: loongson: Fix GMAC phy node - MIPS: ip30: ip30-console: Add missing include - remoteproc: imx_rproc: Skip over memory region when node value is NULL - remoteproc: stm32_rproc: Fix mailbox interrupts queuing - rbd: don't assume rbd_is_lock_owner() for exclusive mappings - selftests/sigaltstack: Fix ppc64 GCC build - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs - platform: mips: cpu_hwmon: Disable driver on unsupported hardware - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter - rtc: isl1208: Fix return value of nvmem callbacks - drm/i915/dp: Reset intel_dp->link_trained before retraining the link - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 - perf/x86/intel/pt: Fix a topa_entry base address calculation - perf/x86/intel/pt: Fix topa_entry base length - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR - perf: Fix event leak upon exec and file release - perf: Fix event leak upon exit - scsi: qla2xxx: validate nvme_local_port correctly - scsi: qla2xxx: Complete command early within lock - scsi: qla2xxx: Fix flash read failure - scsi: qla2xxx: Use QP lock to search for bsg - scsi: qla2xxx: Fix for possible memory corruption - scsi: qla2xxx: Unable to act on RSCN for port online - scsi: qla2xxx: During vport delete send async logout explicitly - rtc: cmos: Fix return value of nvmem callbacks - mm/numa_balancing: teach mpol_to_str about the balancing mode - devres: Fix memory leakage caused by driver API devm_free_percpu() - devres: Fix devm_krealloc() wasting memory - gve: Fix an edge case for TSO skb validity check - kobject_uevent: Fix OOB access within zap_modalias_env() - kbuild: Fix '-S -c' in x86 stack protector scripts - decompress_bunzip2: fix rare decompression failure - ubi: eba: properly rollback inside self_check_eba - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed - dev/parport: fix the array out-of-bounds risk - binder: fix hang of unregistered readers - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio - PCI: dw-rockchip: Fix initial PERST# GPIO value - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN - hwrng: amd - Convert PCIBIOS_* return codes to errnos - tools/memory-model: Fix bug in lock.cat - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera - ALSA: usb-audio: Move HD Webcam quirk to the right place - ALSA: usb-audio: Fix microphone sound on HD webcam. - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() - media: uvcvideo: Fix integer overflow calculating timestamp - jbd2: make jbd2_journal_get_max_txn_bufs() internal - leds: ss4200: Convert PCIBIOS_* return codes to errnos - wifi: mwifiex: Fix interface type change - selftests/landlock: Add cred_transfer test - io_uring: tighten task exit cancellations - ext4: make sure the first directory block is not a hole - ext4: check dot and dotdot of dx_root before making dir indexed - m68k: amiga: Turn off Warp1260 interrupts during boot - udf: Avoid using corrupted block bitmap buffer - task_work: Introduce task_work_cancel() again - task_work: s/task_work_cancel()/task_work_cancel_func()/ - apparmor: use kvfree_sensitive to free data->data - sched/fair: Use all little CPUs for CPU-bound workloads - drm/amd/display: Check for NULL pointer - scsi: qla2xxx: Fix optrom version displayed in FDMI - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes - ext2: Verify bitmap and itable block numbers before using them - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error - media: venus: fix use after free in vdec_close - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() - fuse: verify {g,u}id mount options correctly - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks - ipv6: take care of scope when choosing the src addr - af_packet: Handle outgoing VLAN packets without hardware offloading - net: netconsole: Disable target before netpoll cleanup - tick/broadcast: Make takeover of broadcast hrtimer reliable - dt-bindings: thermal: correct thermal zone node name limit - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer - mm/hugetlb: fix possible recursive locking detected warning - landlock: Don't lose track of restrictions on cred_transfer - fs/ntfs3: Missed error return - rtc: interface: Add RTC offset to alarm after fix-up - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP - fs/ntfs3: Fix field-spanning write in INDEX_HDR - fs/ntfs3: Replace inode_trylock with inode_lock - pinctrl: freescale: mxs: Fix refcount of child - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails - pinctrl: ti: ti-iodelay: Drop if block with always false condition - pinctrl: single: fix possible memory leak when pinctrl_enable() fails - pinctrl: core: fix possible memory leak when pinctrl_enable() fails - pinctrl: rockchip: update rk3308 iomux routes - fs/ntfs3: Fix getting file type - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting - fs/ntfs3: Fix transform resident to nonresident for compressed files - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT - fs/ntfs3: Use ALIGN kernel macro - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports - netfilter: nf_set_pipapo: fix initial map fill - netfilter: nft_set_pipapo: constify lookup fn args where possible - netfilter: ctnetlink: use helper function to calculate expect ID - bnxt_re: Fix imm_data endianness - RDMA/hns: Fix insufficient extend DB for VFs. - RDMA/hns: Fix undifined behavior caused by invalid max_sge - RDMA/hns: Fix missing pagesize and alignment check in FRMR - macintosh/therm_windtunnel: fix module unload. - powerpc/xmon: Fix disassembly CPU feature checks - MIPS: Octeron: remove source file executable bit - net: missing check virtio - vhost/vsock: always initialize seqpacket_allow - PCI: endpoint: Clean up error handling in vpci_scan_bus() - Input: elan_i2c - do not leave interrupt disabled on suspend failure - RDMA/device: Return error earlier if port in not valid - mtd: make mtd_test.c a separate module - ASoC: max98088: Check for clk_prepare_enable() error - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs - RDMA/mlx4: Fix truncated output warning in alias_GUID.c - RDMA/mlx4: Fix truncated output warning in mad.c - Input: qt1050 - handle CHIP_ID reading error - RDMA/cache: Release GID table even if leak is detected - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE - coresight: Fix ref leak when of_coresight_parse_endpoint() fails - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock - clk: qcom: branch: Add helper functions for setting retain bits - PCI: Fix resource double counting on remove & rescan - SUNRPC: Fixup gss_status tracepoint error output - sparc64: Fix incorrect function signature and add prototype for prom_cif_init - ext4: avoid writing unitialized memory to disk in EA inodes - ext4: don't track ranges in fast_commit if inode has inlined data - ext4: return early for non-eligible fast_commit track events - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. - xprtrdma: Fix rpcrdma_reqs_reset() - mfd: omap-usb-tll: Use struct_size to allocate tll - mfd: rsmu: Split core code into separate module - perf intel-pt: Fix exclude_guest setting - perf intel-pt: Fix aux_watermark calculation for 64-bit size - media: venus: flush all buffers in output plane streamoff - ext4: fix infinite loop when replaying fast_commit - Revert "leds: led-core: Fix refcount leak in of_led_get()" - drm/qxl: Add check for drm_cvt_mode - drm/etnaviv: fix DMA direction handling for cached RW buffers - perf report: Fix condition in sort__sym_cmp() - leds: trigger: Unregister sysfs attributes before calling deactivate() - drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property - drm/mediatek: Add missing plane settings when async update - media: renesas: vsp1: Store RPF partition configuration per RPF instance - media: renesas: vsp1: Fix _irqsave and _irq mix - media: uvcvideo: Override default flags - saa7134: Unchecked i2c_transfer function result fixed - media: i2c: Fix imx412 exposure control - media: imon: Fix race getting ictx->lock - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit - drm/amd/pm: Fix aldebaran pcie speed reporting - xdp: fix invalid wait context of page_pool_destroy() - selftests: forwarding: devlink_lib: Wait for udev events after reloading - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures - bpf: annotate BTF show functions with __printf - selftests/bpf: Close fd in error path in drop_on_reuseport - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers - wifi: virt_wifi: don't use strlen() in const context - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey - wifi: virt_wifi: avoid reporting connection success with wrong SSID - perf: Fix default aux_watermark calculation - perf: Prevent passing zero nr_pages to rb_alloc_aux() - perf: Fix perf_aux_size() for greater-than 32-bit size - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation - netfilter: nf_tables: rise cap on SELinux secmark context - ipvs: Avoid unnecessary calls to skb_is_gso_sctp - libbpf: Checking the btf_type kind when fixing variable offsets - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down - net: fec: Refactor: #define magic constants - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors - mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible - mlxsw: spectrum_acl_erp: Fix object nesting warning - lib: objagg: Fix general protection fault - selftests/bpf: Check length of recv in test_sockmap - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined - tcp: fix races in tcp_v[46]_err() - tcp: fix race in tcp_write_err() - tcp: add tcp_done_with_error() helper - tcp: annotate lockless access to sk->sk_err - tcp: annotate lockless accesses to sk->sk_err_soft - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP - selftests/bpf: Fix prog numbers in test_sockmap - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device - firmware: turris-mox-rwtm: Initialize completion before mailbox - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() - firmware: turris-mox-rwtm: Do not complete if there are no waiters - vmlinux.lds.h: catch .bss..L* sections into BSS") - ARM: spitz: fix GPIO assignment for backlight - ARM: pxa: spitz: use gpio descriptors for audio - m68k: cmpxchg: Fix return value for default case in __arch_xchg() - x86/xen: Convert comma to semicolon - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages - arm64: dts: amlogic: gx: correct hdmi clocks - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects - ARM: dts: imx6qdl-kontron-samx6i: fix board reset - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node - arm64: dts: rockchip: Increase VOP clk rate on RK3328 - soc: qcom: pdr: fix parsing of domains lists - soc: qcom: pdr: protect locator_addr with the main mutex - memory: fsl_ifc: Make FSL_IFC config visible and selectable - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers - arm64: dts: qcom: sm8250: add power-domain to UFS PHY - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings - arm64: dts: qcom: sdm845: add power-domain to UFS PHY - hwmon: (max6697) Fix swapped temp{1,8} critical alarms - hwmon: (max6697) Fix underflow when writing limit attributes - drm/meson: fix canvas release in bind function - pwm: stm32: Always do lazy disabling - hwmon: (adt7475) Fix default duty on fan is disabled - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos - x86/pci/xen: Fix PCIBIOS_* return code handling - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling - x86/of: Return consistent error type from x86_of_pci_irq_enable() - hfsplus: fix to avoid false alarm of circular locking - block: initialize integrity buffer to zero before writing it to media - block: cleanup bio_integrity_prep - block: refactor to use helper - platform/chrome: cros_ec_debugfs: fix wrong EC message version - EDAC, i10nm: make skx_common.o a separate module - f2fs: fix to don't dirty inode for readonly filesystem - f2fs: fix return value of f2fs_convert_inline_inode() + UBUNTU: Upstream stable to v5.15.165 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2078428 Title: Jammy update: v5.15.165 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Jammy: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.165 upstream stable release from git://git.kernel.org/ f2fs: fix return value of f2fs_convert_inline_inode() f2fs: fix to don't dirty inode for readonly filesystem EDAC, i10nm: make skx_common.o a separate module platform/chrome: cros_ec_debugfs: fix wrong EC message version block: refactor to use helper block: cleanup bio_integrity_prep block: initialize integrity buffer to zero before writing it to media hfsplus: fix to avoid false alarm of circular locking x86/of: Return consistent error type from x86_of_pci_irq_enable() x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling x86/pci/xen: Fix PCIBIOS_* return code handling x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos hwmon: (adt7475) Fix default duty on fan is disabled pwm: stm32: Always do lazy disabling drm/meson: fix canvas release in bind function hwmon: (max6697) Fix underflow when writing limit attributes hwmon: (max6697) Fix swapped temp{1,8} critical alarms arm64: dts: qcom: sdm845: add power-domain to UFS PHY arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings arm64: dts: qcom: sm8250: add power-domain to UFS PHY soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers arm64: dts: qcom: msm8996: specify UFS core_clk frequencies memory: fsl_ifc: Make FSL_IFC config visible and selectable soc: qcom: pdr: protect locator_addr with the main mutex soc: qcom: pdr: fix parsing of domains lists arm64: dts: rockchip: Increase VOP clk rate on RK3328 ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset ARM: dts: imx6qdl-kontron-samx6i: fix board reset ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 arm64: dts: amlogic: gx: correct hdmi clocks m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages x86/xen: Convert comma to semicolon m68k: cmpxchg: Fix return value for default case in __arch_xchg() ARM: pxa: spitz: use gpio descriptors for audio ARM: spitz: fix GPIO assignment for backlight vmlinux.lds.h: catch .bss..L* sections into BSS") firmware: turris-mox-rwtm: Do not complete if there are no waiters firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() firmware: turris-mox-rwtm: Initialize completion before mailbox wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device selftests/bpf: Fix prog numbers in test_sockmap net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP tcp: annotate lockless accesses to sk->sk_err_soft tcp: annotate lockless access to sk->sk_err tcp: add tcp_done_with_error() helper tcp: fix race in tcp_write_err() tcp: fix races in tcp_v[46]_err() net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined selftests/bpf: Check length of recv in test_sockmap lib: objagg: Fix general protection fault mlxsw: spectrum_acl_erp: Fix object nesting warning mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() net: fec: Refactor: #define magic constants net: fec: Fix FEC_ECR_EN1588 being cleared on link-down libbpf: Checking the btf_type kind when fixing variable offsets ipvs: Avoid unnecessary calls to skb_is_gso_sctp netfilter: nf_tables: rise cap on SELinux secmark context perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation perf: Fix perf_aux_size() for greater-than 32-bit size perf: Prevent passing zero nr_pages to rb_alloc_aux() perf: Fix default aux_watermark calculation wifi: virt_wifi: avoid reporting connection success with wrong SSID gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey wifi: virt_wifi: don't use strlen() in const context locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers selftests/bpf: Close fd in error path in drop_on_reuseport bpf: annotate BTF show functions with __printf bna: adjust 'name' buf size of bna_tcb and bna_ccb structures bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o selftests: forwarding: devlink_lib: Wait for udev events after reloading xdp: fix invalid wait context of page_pool_destroy() drm/amd/pm: Fix aldebaran pcie speed reporting drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() media: imon: Fix race getting ictx->lock media: i2c: Fix imx412 exposure control saa7134: Unchecked i2c_transfer function result fixed media: uvcvideo: Override default flags media: renesas: vsp1: Fix _irqsave and _irq mix media: renesas: vsp1: Store RPF partition configuration per RPF instance drm/mediatek: Add missing plane settings when async update drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property leds: trigger: Unregister sysfs attributes before calling deactivate() perf report: Fix condition in sort__sym_cmp() drm/etnaviv: fix DMA direction handling for cached RW buffers drm/qxl: Add check for drm_cvt_mode Revert "leds: led-core: Fix refcount leak in of_led_get()" ext4: fix infinite loop when replaying fast_commit media: venus: flush all buffers in output plane streamoff perf intel-pt: Fix aux_watermark calculation for 64-bit size perf intel-pt: Fix exclude_guest setting mfd: rsmu: Split core code into separate module mfd: omap-usb-tll: Use struct_size to allocate tll xprtrdma: Fix rpcrdma_reqs_reset() SUNRPC: avoid soft lockup when transmitting UDP to reachable server. NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server ext4: return early for non-eligible fast_commit track events ext4: don't track ranges in fast_commit if inode has inlined data ext4: avoid writing unitialized memory to disk in EA inodes sparc64: Fix incorrect function signature and add prototype for prom_cif_init SUNRPC: Fixup gss_status tracepoint error output PCI: Fix resource double counting on remove & rescan clk: qcom: branch: Add helper functions for setting retain bits clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock coresight: Fix ref leak when of_coresight_parse_endpoint() fails RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE RDMA/cache: Release GID table even if leak is detected Input: qt1050 - handle CHIP_ID reading error RDMA/mlx4: Fix truncated output warning in mad.c RDMA/mlx4: Fix truncated output warning in alias_GUID.c RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs ASoC: max98088: Check for clk_prepare_enable() error mtd: make mtd_test.c a separate module RDMA/device: Return error earlier if port in not valid Input: elan_i2c - do not leave interrupt disabled on suspend failure PCI: endpoint: Clean up error handling in vpci_scan_bus() vhost/vsock: always initialize seqpacket_allow net: missing check virtio MIPS: Octeron: remove source file executable bit powerpc/xmon: Fix disassembly CPU feature checks macintosh/therm_windtunnel: fix module unload. RDMA/hns: Fix missing pagesize and alignment check in FRMR RDMA/hns: Fix undifined behavior caused by invalid max_sge RDMA/hns: Fix insufficient extend DB for VFs. bnxt_re: Fix imm_data endianness netfilter: ctnetlink: use helper function to calculate expect ID netfilter: nf_set_pipapo: fix initial map fill net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports fs/ntfs3: Use ALIGN kernel macro fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT fs/ntfs3: Fix transform resident to nonresident for compressed files fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting fs/ntfs3: Fix getting file type pinctrl: rockchip: update rk3308 iomux routes pinctrl: core: fix possible memory leak when pinctrl_enable() fails pinctrl: single: fix possible memory leak when pinctrl_enable() fails pinctrl: ti: ti-iodelay: Drop if block with always false condition pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails pinctrl: freescale: mxs: Fix refcount of child fs/ntfs3: Replace inode_trylock with inode_lock fs/ntfs3: Fix field-spanning write in INDEX_HDR fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro rtc: interface: Add RTC offset to alarm after fix-up fs/ntfs3: Missed error return landlock: Don't lose track of restrictions on cred_transfer mm/hugetlb: fix possible recursive locking detected warning mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer dt-bindings: thermal: correct thermal zone node name limit tick/broadcast: Make takeover of broadcast hrtimer reliable net: netconsole: Disable target before netpoll cleanup af_packet: Handle outgoing VLAN packets without hardware offloading ipv6: take care of scope when choosing the src addr sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks fuse: verify {g,u}id mount options correctly char: tpm: Fix possible memory leak in tpm_bios_measurements_open() media: venus: fix use after free in vdec_close ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() ext2: Verify bitmap and itable block numbers before using them drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes scsi: qla2xxx: Fix optrom version displayed in FDMI drm/amd/display: Check for NULL pointer sched/fair: Use all little CPUs for CPU-bound workloads apparmor: use kvfree_sensitive to free data->data task_work: s/task_work_cancel()/task_work_cancel_func()/ task_work: Introduce task_work_cancel() again udf: Avoid using corrupted block bitmap buffer m68k: amiga: Turn off Warp1260 interrupts during boot ext4: check dot and dotdot of dx_root before making dir indexed ext4: make sure the first directory block is not a hole io_uring: tighten task exit cancellations selftests/landlock: Add cred_transfer test wifi: mwifiex: Fix interface type change leds: ss4200: Convert PCIBIOS_* return codes to errnos jbd2: make jbd2_journal_get_max_txn_bufs() internal media: uvcvideo: Fix integer overflow calculating timestamp KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() ALSA: usb-audio: Fix microphone sound on HD webcam. ALSA: usb-audio: Move HD Webcam quirk to the right place ALSA: usb-audio: Add a quirk for Sonix HD USB Camera tools/memory-model: Fix bug in lock.cat hwrng: amd - Convert PCIBIOS_* return codes to errnos PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN PCI: dw-rockchip: Fix initial PERST# GPIO value PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio binder: fix hang of unregistered readers dev/parport: fix the array out-of-bounds risk fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use ubi: eba: properly rollback inside self_check_eba decompress_bunzip2: fix rare decompression failure kbuild: Fix '-S -c' in x86 stack protector scripts kobject_uevent: Fix OOB access within zap_modalias_env() gve: Fix an edge case for TSO skb validity check devres: Fix devm_krealloc() wasting memory devres: Fix memory leakage caused by driver API devm_free_percpu() mm/numa_balancing: teach mpol_to_str about the balancing mode rtc: cmos: Fix return value of nvmem callbacks scsi: qla2xxx: During vport delete send async logout explicitly scsi: qla2xxx: Unable to act on RSCN for port online scsi: qla2xxx: Fix for possible memory corruption scsi: qla2xxx: Use QP lock to search for bsg scsi: qla2xxx: Fix flash read failure scsi: qla2xxx: Complete command early within lock scsi: qla2xxx: validate nvme_local_port correctly perf: Fix event leak upon exit perf: Fix event leak upon exec and file release perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR perf/x86/intel/pt: Fix topa_entry base length perf/x86/intel/pt: Fix a topa_entry base address calculation drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell drm/i915/dp: Reset intel_dp->link_trained before retraining the link rtc: isl1208: Fix return value of nvmem callbacks watchdog/perf: properly initialize the turbo mode timestamp and rearm counter platform: mips: cpu_hwmon: Disable driver on unsupported hardware RDMA/iwcm: Fix a use-after-free related to destroying CM IDs selftests/sigaltstack: Fix ppc64 GCC build rbd: don't assume rbd_is_lock_owner() for exclusive mappings remoteproc: stm32_rproc: Fix mailbox interrupts queuing remoteproc: imx_rproc: Skip over memory region when node value is NULL MIPS: ip30: ip30-console: Add missing include MIPS: dts: loongson: Fix GMAC phy node MIPS: Loongson64: env: Hook up Loongsson-2K MIPS: Loongson64: Remove memory node for builtin-dtb MIPS: Loongson64: reset: Prioritise firmware service MIPS: Loongson64: Test register availability before use drm/panfrost: Mark simple_ondemand governor as softdep rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 nilfs2: handle inconsistent state in nilfs_btnode_create_block() io_uring/io-wq: limit retrying worker initialisation kernel: rerun task_work while freezing in get_signal() kdb: address -Wformat-security warnings kdb: Use the passed prompt in kdb_position_cursor() jfs: Fix array-index-out-of-bounds in diFree dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels phy: cadence-torrent: Check return value on register read um: time-travel: fix time-travel-start option um: time-travel: fix signal blocking race/hang libbpf: Fix no-args func prototype BTF dumping syntax dma: fix call order in dmam_free_coherent bpf, events: Use prog to emit ksymbol event for main program MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later ipv4: Fix incorrect source address in Record Route option net: bonding: correctly annotate RCU in bond_should_notify_peers() netfilter: nft_set_pipapo_avx2: disable softinterrupts tipc: Return non-zero value from tipc_udp_addr2str() on error net: stmmac: Correct byte order of perfect_match net: nexthop: Initialize all fields in dumped nexthops bpf: Fix a segment issue when downgrading gso_size mISDN: Fix a use after free in hfcmulti_tx() apparmor: Fix null pointer deref when receiving skb during sock creation powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() lirc: rc_dev_get_from_fd(): fix file leak spi: spidev: Make probe to fail early if a spidev compatible is used spi: spidev: Replace ACPI specific code by device_get_match_data() spi: spidev: Replace OF specific code by device property API spidev: Add Silicon Labs EM3581 device compatible spi: spidev: order compatibles alphabetically spi: spidev: add correct compatible for Rohm BH2228FV ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable ceph: fix incorrect kmalloc size of pagevec mempool iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en nvme: split command copy into a helper nvme: separate command prep and issue nvme-pci: add missing condition check for existence of mapped data fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node arm64: dts: qcom: msm8998: drop USB PHY clock index arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB sysctl: always initialize i_uid/i_gid ext4: make ext4_es_insert_extent() return void ext4: refactor ext4_da_map_blocks() ext4: convert to exclusive lock while inserting delalloc extents ext4: factor out a common helper to query extent map ext4: check the extent status again before inserting delalloc block soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver drivers: soc: xilinx: check return status of get_api_version() leds: trigger: use RCU to protect the led_cdevs list leds: trigger: Remove unused function led_trigger_rename_static() leds: trigger: Store brightness set by led_trigger_event() leds: trigger: Call synchronize_rcu() before calling trig->activate() leds: triggers: Flush pending brightness before activating trigger irqdomain: Fixed unbalanced fwnode get and put genirq: Allow the PM device to originate from irq domain irqchip/imx-irqsteer: Constify irq_chip struct irqchip/imx-irqsteer: Add runtime PM support irqchip/imx-irqsteer: Handle runtime power management correctly drm/dp_mst: Fix all mstb marked as not probed after suspend/resume remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a MIPS: dts: loongson: Fix liointc IRQ polarity MIPS: dts: loongson: Fix ls2k1000-rtc interrupt drm/nouveau: prime: fix refcount underflow drm/vmwgfx: Fix overlay when using Screen Targets sched: act_ct: take care of padding in struct zones_ht_key ALSA: hda: conexant: Fix headset auto detect fail in the polling mode rtnetlink: enable alt_ifname for setlink/newlink rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). net/iucv: fix use after free in iucv_sock_close() net: mvpp2: Don't re-use loop iterator netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys ipv6: fix ndisc_is_useropt() handling for PIO riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() power: supply: bq24190_charger: replace deprecated strncpy with strscpy platform/chrome: cros_ec_proto: Lock device when updating MKBP version HID: wacom: Modify pen IDs protect the fetch of ->fd[fd] in do_dup2() from mispredictions ALSA: usb-audio: Correct surround channels in UAC1 channel map ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G Revert "ALSA: firewire-lib: obsolete workqueue for period update" Revert "ALSA: firewire-lib: operate for period elapse event in process context" drm/vmwgfx: Fix a deadlock in dma buf fence polling net: usb: sr9700: fix uninitialized variable use in sr_mdio_read r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY mptcp: fix duplicate data handling netfilter: ipset: Add list flush to cancel_gc genirq: Allow irq_chip registration functions to take a const irq_chip irqchip/mbigen: Fix mbigen node address layout x86/mm: Fix pti_clone_pgtable() alignment assumption x86/mm: Fix pti_clone_entry_text() for i386 sctp: move hlist_node and hashent out of sctp_ep_common sctp: Fix null-ptr-deref in reuseport_add_sock(). net: usb: qmi_wwan: fix memory leak for not ip packets net: bridge: mcast: wait for previous gc cycles when removing port net: linkwatch: use system_unbound_wq Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() l2tp: fix lockdep splat net: fec: Stop PPS on driver remove rcutorture: Fix rcu_torture_fwd_cb_cr() data race md: do not delete safemode_timer in mddev_suspend md/raid5: avoid BUG_ON() while continue reshape after reassembling clocksource/drivers/sh_cmt: Address race condition for clock events ACPI: battery: create alarm sysfs attribute atomically ACPI: SBS: manage alarm sysfs attribute through psy core selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT PCI: Add Edimax Vendor ID to pci_ids.h udf: prevent integer overflow in udf_bitmap_free_blocks() wifi: nl80211: don't give key data to userspace btrfs: fix bitmap leak when loading free space cache on duplicate entry drm/amdgpu/pm: Fix the null pointer dereference for smu7 drm/amdgpu: Fix the null pointer dereference to ras_manager drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules drm/amd/display: Add null checker before passing variables media: uvcvideo: Ignore empty TS packets media: uvcvideo: Fix the bandwdith quirk on USB 3.x ext4: fix uninitialized variable in ext4_inlinedir_to_tree jbd2: avoid memleak in jbd2_journal_write_metadata_buffer s390/sclp: Prevent release of buffer in I/O SUNRPC: Fix a race to wake a sync task profiling: remove profile=sleep support scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime ext4: fix wrong unit use in ext4_mb_find_by_goal arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space arm64: Add Neoverse-V2 part arm64: barrier: Restore spec_bar() macro arm64: cputype: Add Cortex-X4 definitions arm64: cputype: Add Neoverse-V3 definitions arm64: errata: Add workaround for Arm errata 3194386 and 3312417 UBUNTU: [Config] Set ARM64_ERRATUM_3194386=y arm64: cputype: Add Cortex-X3 definitions arm64: cputype: Add Cortex-A720 definitions arm64: cputype: Add Cortex-X925 definitions arm64: errata: Unify speculative SSBS errata logic arm64: errata: Expand speculative SSBS workaround arm64: cputype: Add Cortex-X1C definitions arm64: cputype: Add Cortex-A725 definitions arm64: errata: Expand speculative SSBS workaround (again) i2c: smbus: Improve handling of stuck alerts ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask ASoC: codecs: wsa881x: Correct Soundwire ports mask spi: spidev: Add missing spi_device_id for bh2228fv i2c: smbus: Send alert notifications to all devices if source not found bpf: kprobe: remove unused declaring of bpf_kprobe_override kprobes: Fix to check symbol prefixes correctly spi: spi-fsl-lpspi: Fix scldiv calculation ALSA: usb-audio: Re-add ScratchAmp quirk entries ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT drm/client: fix null pointer dereference in drm_client_modeset_probe ALSA: line6: Fix racy access to midibuf ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 usb: vhci-hcd: Do not drop references before new references are gained USB: serial: debug: do not echo input by default usb: gadget: core: Check for unset descriptor usb: gadget: u_serial: Set start_delayed during suspend scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic tick/broadcast: Move per CPU pointer access into the atomic section vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler ntp: Clamp maxerror and esterror to operating range clocksource: Reduce the default clocksource_watchdog() retries to 2 torture: Enable clocksource watchdog with "tsc=watchdog" clocksource: Scale the watchdog read retries automatically clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() irqchip/meson-gpio: support more than 8 channels gpio irq irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' driver core: Fix uevent_show() vs driver detach race ntp: Safeguard against time_constant overflow timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() serial: core: check uartclk for zero to avoid divide by zero kcov: properly check for softirq context irqchip/xilinx: Fix shift out of bounds genirq/irqdesc: Honor caller provided affinity in alloc_desc() power: supply: axp288_charger: Fix constant_charge_voltage writes power: supply: axp288_charger: Round constant_charge_voltage writes down tracing: Fix overflow in get_free_elt() padata: Fix possible divide-by-0 panic in padata_mt_helper() x86/mtrr: Check if fixed MTRRs exist before saving them sched/smt: Introduce sched_smt_present_inc/dec() helper sched/smt: Fix unbalance sched_smt_present dec/inc drm/bridge: analogix_dp: properly handle zero sized AUX transactions drm/mgag200: Set DDC timeout in milliseconds mptcp: sched: check both directions for backup mptcp: distinguish rcv vs sent backup flag in requests mptcp: fix NL PM announced address accounting mptcp: mib: count MPJ with backup flag mptcp: fix bad RCVPRUNED mib accounting mptcp: pm: only set request_bkup flag when sending MP_PRIO mptcp: export local_address mptcp: pm: fix backup support in signal endpoints selftests: mptcp: join: validate backup in MPJ selftests: mptcp: join: check backup support in signal endp btrfs: fix corruption after buffer fault in during direct IO append write xfs: fix log recovery buffer allocation for the legacy h_size fixup btrfs: fix double inode unlock for direct IO sync writes PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal netfilter: nf_tables: set element extended ACK reporting support netfilter: nf_tables: use timestamp to check for set element timeout netfilter: nf_tables: bail out if stateful expression provides no .clone netfilter: nf_tables: allow clone callbacks to sleep netfilter: nf_tables: prefer nft_chain_validate net: stmmac: Enable mac_managed_pm phylink config PCI: dwc: Restore MSI Receiver mask during resume wifi: mac80211: check basic rates validity mptcp: fully established after ADD_ADDR echo on MPJ drm/i915/gem: Fix Virtual Memory mapping boundaries calculation powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes arm64: cpufeature: Fix the visibility of compat hwcaps exec: Fix ToCToU between perm check and set-uid/gid usage nvme/pci: Add APST quirk for Lenovo N60z laptop usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. binfmt_flat: Fix corruption when not offsetting data start wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" Linux 5.15.165 UBUNTU: Upstream stable to v5.15.165 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2078428/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp